Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: CidWPyL0wfGeAUmqS12QJccDyHi6zrhMPgdiEKvD6yI=
Subject key identifier: 4C:D2:FA:15:4F:39:1A:A7:30:C7:5D:47:95:97:2D:0F:FA:F0:8E:C2
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 0194BC3C313311FED62BAC99E72A3B3EBE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0AE7
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: gGOWXlKssd0oP26mOIFncWWbSeOUq3s6RB4QQYjgCMQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:31:33:11:fe:d6:2b:ac:99:e7:2a:3b:3e:be:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=4cd2fa154f391aa730c75d4795972d0ffaf08ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:fb:9b:13:e7:f6:7e:c9:c0:81:c4:e3:fe:
b9:f8:8f:a7:fa:15:6c:a3:22:64:3f:0a:61:dc:75:
c0:93:0e:b7:d5:c0:7b:c4:fb:9e:c4:64:a4:34:b8:
f4:17:14:64:de:96:31:7d:ab:1b:35:3a:ad:28:ae:
38:ba:6f:99:1a:25:35:5c:41:90:f9:56:48:44:89:
fe:e1:9c:d8:0a:72:e2:b6:f4:8c:6b:bc:62:00:ae:
0e:29:4d:4f:88:90:99:81:83:60:0e:2d:d2:ff:c8:
00:a3:70:0d:7c:05:2a:75:10:aa:77:13:8a:b4:53:
12:bd:f9:53:c2:51:fd:ea:3a:98:15:79:36:2d:1b:
95:e1:35:41:1d:65:ed:56:67:9c:9e:57:0a:db:42:
e9:37:03:53:9e:fc:47:d7:a5:32:35:b2:0a:27:d0:
c3:d0:5f:a9:4e:87:88:28:0d:3d:7a:cc:f2:d3:72:
ce:14:2c:6d:c9:34:9d:a6:ef:75:3d:c8:fc:1c:ee:
90:eb:03:fe:2c:c7:f1:0b:e1:dc:f9:64:19:71:e0:
47:c8:d1:70:cf:6f:6e:85:b8:7d:42:cb:3b:9a:3a:
de:ee:ec:79:a8:e1:54:b8:93:07:08:e4:35:f9:88:
50:44:a6:1f:5f:77:44:e8:5f:92:db:a3:96:ef:8e:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D2:FA:15:4F:39:1A:A7:30:C7:5D:47:95:97:2D:0F:FA:F0:8E:C2
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3b:5a:d3:0e:74:95:c0:b1:1c:27:ac:26:85:49:37:94:8b:
2c:6e:21:63:0c:9c:42:d6:20:e5:ea:13:72:19:ed:84:73:78:
35:e2:77:ef:ab:b3:be:4a:aa:30:39:f8:e6:36:2c:93:5d:6f:
33:c3:f7:d0:f5:0c:12:61:b8:97:e3:2b:09:e1:03:aa:ca:59:
8b:f5:35:1f:8e:0f:df:07:d5:41:db:4b:06:44:0d:43:ff:91:
34:40:7e:3e:98:d8:75:b1:a5:c2:a3:ff:dc:e6:9f:0b:f5:7d:
f0:6f:ba:6b:5b:a5:c6:14:3c:b4:a2:7f:c1:c1:39:31:d1:bd:
62:fa:64:66:99:87:94:b3:d1:c5:c1:e0:83:26:f6:a8:f5:5e:
46:57:f9:f9:0f:33:53:fa:20:57:fc:9e:8e:f6:3f:41:0f:3d:
35:f1:0a:c3:19:3d:3d:af:0a:a8:79:d1:70:41:0c:a9:45:c1:
70:a2:2b:ea:01:b6:1b:17:4f:11:92:e4:82:ce:3b:bb:be:db:
66:9c:99:4b:1a:7d:2a:1d:29:76:22:66:64:a3:e6:fb:19:72:
94:99:1e:06:a9:f0:3f:b8:e7:a7:84:25:a4:f9:4d:27:48:53:
d4:53:07:62:df:61:64:84:31:26:d7:97:bd:b8:df:95:47:7a:
3a:48:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:53 2025 by rpki-client