Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
File: _KXnwS9jZpo_aAySaEpD-ohO0Uw.mft (raw, json)
Hash identifier: 6N3p3SdJmLSPAGzmEfjroHXlQA8hx1qF7XkFmBm+Lo0=
Subject key identifier: 12:83:CC:AC:C3:27:76:AF:AD:2E:69:93:60:73:25:6F:80:86:F0:5B
Authority key identifier: FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
Certificate issuer: /CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Certificate serial: 0194BC3C4B95421613B1F8B4318E02311999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
Manifest number: 132C
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: _KXnwS9jZpo_aAySaEpD-ohO0Uw.crl (hash: KxmEMJLjlESzxmZlovFW1LKoxgrVW0XllftK3TdJRDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4b:95:42:16:13:b1:f8:b4:31:8e:02:31:19:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=1283ccacc32776afad2e69936073256f8086f05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:60:07:5b:b8:9e:e3:ee:d1:24:1e:f1:fd:
b0:20:86:3c:9d:a3:66:0a:44:0d:91:c5:f5:a4:8f:
93:ca:48:f8:98:79:af:c5:88:d4:cc:92:b8:15:35:
cb:57:3a:5c:40:a9:01:55:4d:33:0c:ad:20:b7:1c:
05:47:82:f2:b2:62:2f:b8:12:1a:fd:85:5e:17:77:
3a:5d:96:9c:b8:09:4f:db:40:6b:28:9c:a9:7f:f5:
9b:04:d5:bb:90:ba:b5:df:d5:85:cb:ca:1e:51:0b:
55:35:44:3a:0f:91:73:46:85:f5:47:43:d1:e1:33:
ce:2e:87:1c:14:4c:9f:41:4c:49:0b:d6:c3:3b:57:
27:47:64:38:6c:cc:07:03:2c:d0:69:6d:7e:8f:9e:
3d:87:40:97:b8:56:c3:0c:4c:04:9f:c6:38:4d:33:
54:d0:85:a7:74:51:f5:25:fe:21:26:3a:5b:d7:0a:
b6:5f:2d:49:a5:8b:73:26:10:94:46:53:e2:92:e2:
7e:f0:f3:2f:6d:f9:7b:af:97:aa:40:03:cf:3a:52:
53:b9:25:29:51:dd:c1:73:c4:87:56:3b:c2:0e:e8:
67:57:33:64:8b:41:51:3b:26:12:98:0d:3a:95:9b:
00:c7:d7:6f:a1:39:7c:86:50:40:1d:c2:f5:e3:9a:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:83:CC:AC:C3:27:76:AF:AD:2E:69:93:60:73:25:6F:80:86:F0:5B
X509v3 Authority Key Identifier:
keyid:FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ab:df:d4:df:85:05:63:ce:ff:92:77:5d:87:ff:b9:cd:1a:
61:15:53:a3:a6:bc:f8:13:69:92:26:6d:bd:8f:7f:5c:b0:77:
9d:f7:c0:d5:5d:56:49:fc:94:8a:e8:46:ac:84:99:79:be:bc:
a4:14:72:c8:5a:5f:81:fb:e3:d3:72:fe:6e:43:97:96:55:1f:
c3:0e:81:6d:a9:3a:e7:22:81:b3:b9:e4:f9:70:2e:0a:35:be:
10:3b:94:3e:05:97:a7:a2:0e:24:94:86:7a:f9:bf:be:84:30:
c5:75:13:9f:7b:39:77:3d:88:c6:5d:52:4f:41:59:10:98:41:
01:cd:f6:31:0b:d6:f8:6a:2b:93:8c:42:cb:04:ca:65:08:ce:
8c:4c:15:48:0f:e4:64:ae:4f:e9:55:16:44:44:fb:86:0f:2d:
8c:cb:2b:51:d0:05:ec:d0:e0:f2:bb:f8:20:ac:3d:10:d1:2d:
7f:01:92:6e:95:f3:26:6d:c2:fa:f8:71:cf:41:6c:ce:4f:4a:
8f:0a:5a:da:be:0c:f9:89:b4:b1:74:5c:ce:07:9b:37:c1:f7:
cf:e4:38:39:d7:12:07:b9:79:7b:8e:f6:f6:e5:42:e7:71:c8:
6e:af:11:ad:00:1b:1a:cb:b9:b4:8d:f4:58:5c:9d:7b:8b:de:
04:27:c7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:00 2025 by rpki-client