Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier: W5rbQG0f4Kv319XFGY/wpkgWQqjRWHJuLDlmvUBlKgI=
Subject key identifier: B2:1F:FE:5F:1D:49:8D:82:A2:E8:04:1B:C9:24:CB:10:54:79:07:74
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial: 0194BD1769B05A25ED0F544F4527F37A6939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: STxfCROP6XYv0CMgGBNduUyHejL4NYcN2L4Nzi9yS38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:69:b0:5a:25:ed:0f:54:4f:45:27:f3:7a:69:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=b21ffe5f1d498d82a2e8041bc924cb1054790774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ca:06:d6:65:38:1d:c0:7c:34:62:7c:54:57:
35:74:42:f7:6d:23:89:84:5c:4f:bf:09:0a:ea:a6:
84:1d:50:23:df:51:7c:c4:c4:70:b1:86:3c:d1:44:
b4:04:e5:32:00:2f:84:70:2c:81:0c:c0:7a:22:d2:
92:80:e3:87:4a:11:d9:cf:12:0c:6d:96:a1:2d:e9:
fc:e4:df:df:81:f7:88:9d:d9:e3:44:3f:8e:f9:71:
96:44:ee:e2:23:9e:50:8c:10:a2:74:20:ef:d7:8a:
b1:46:bc:e5:ce:b3:c5:4b:aa:f0:93:11:7e:ff:19:
ba:ac:04:f8:62:0a:8a:f5:96:1a:82:f7:5b:bb:99:
61:14:02:eb:ed:4a:fa:c0:62:8a:77:c2:1f:4f:b0:
d6:e5:de:37:63:0e:38:5d:c3:eb:88:64:c1:7b:4a:
f7:ba:04:6b:cf:b3:62:5c:41:fb:8b:d8:59:1e:8d:
0d:c0:14:14:99:4f:ab:6d:fd:14:6e:d2:c9:a7:14:
fd:de:cf:f2:59:e6:54:28:8e:3d:f8:29:e0:00:c5:
4c:7e:3f:e3:d5:54:5b:9d:3c:b1:66:67:7d:88:2d:
ce:68:27:23:65:c3:37:fa:2e:f3:98:f8:68:37:42:
f7:be:29:a6:b5:d2:9e:ab:b1:f7:7b:71:92:2b:bd:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1F:FE:5F:1D:49:8D:82:A2:E8:04:1B:C9:24:CB:10:54:79:07:74
X509v3 Authority Key Identifier:
keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:48:1c:59:ac:b8:4f:22:af:4a:3b:85:a4:3f:e6:7a:e1:ae:
c3:60:66:e0:21:77:aa:f9:32:51:33:c4:50:32:3c:c4:ea:17:
63:13:32:0b:4b:a9:b7:ec:70:ef:d3:7a:ef:47:40:70:3f:1b:
d7:56:c3:ac:d3:9c:01:84:4f:29:8f:4e:61:d3:ae:72:dc:40:
19:40:1c:d5:9c:cf:ec:cf:ea:71:c6:35:df:73:0c:52:bb:c4:
52:c3:3f:04:61:a5:b1:04:ec:9f:0b:cf:46:e3:26:b2:d6:9e:
fd:bc:38:03:24:f5:af:7a:04:da:79:3b:e5:33:fc:75:db:27:
17:09:2f:e8:ad:4a:b2:67:ea:e2:79:db:5d:cf:51:71:8d:c7:
07:44:81:6c:6d:d4:37:33:d0:5a:36:9c:c8:8d:29:52:55:af:
63:b8:9e:1e:4a:04:3a:f1:46:17:cc:d6:35:b1:8d:36:50:a8:
b3:0a:1b:cb:e4:18:6f:4d:6a:2c:d3:d7:09:94:71:84:dc:5a:
01:7a:49:35:a9:72:d2:da:0e:08:12:56:fe:d1:3a:d6:15:92:
d6:d4:ba:3e:23:6f:ea:e7:eb:7d:5a:59:bd:b4:35:43:9a:2d:
d9:b7:66:cb:fc:cd:12:11:eb:98:36:44:82:f7:86:e0:80:1c:
e9:02:6d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:36 2025 by rpki-client