Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
File: kYaHyFQkQhcMxR71MW05Y2CXCNw.mft (raw, json)
Hash identifier: L84PmxgwCrVyJ9O3oismaFrjW7Z9w9Rm47QIVHQnx+s=
Subject key identifier: 35:75:CD:E5:04:DC:69:AD:CB:21:B2:DE:78:1C:1D:DA:35:85:98:50
Authority key identifier: 91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC
Certificate issuer: /CN=918687c8542442170cc51ef5316d3963609708dc
Certificate serial: 0194BBCDCC1FDF7F750AAFD15014B4FB2B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
Manifest number: 1036
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: kYaHyFQkQhcMxR71MW05Y2CXCNw.crl (hash: D0q4Lpj3LuS7kpO0MivdIR17sLsbj7Ts65mR5iqpcTg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cc:1f:df:7f:75:0a:af:d1:50:14:b4:fb:2b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918687c8542442170cc51ef5316d3963609708dc
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=3575cde504dc69adcb21b2de781c1dda35859850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:06:7c:a7:0a:ef:31:d5:d5:62:8b:49:d0:
d4:19:4d:b7:93:81:70:dd:bc:f0:73:fe:a9:1f:ec:
85:8e:01:5a:d6:a8:3e:0b:cb:b7:6d:98:77:a2:bf:
d8:6b:9e:19:04:1f:ae:53:74:09:bd:8a:10:1d:b7:
00:1b:b8:e9:db:93:fe:22:81:18:dc:2b:02:ab:b6:
59:c3:98:a4:e5:a0:2e:97:25:84:7f:db:23:bd:ab:
14:94:13:da:df:7d:b6:ba:21:66:40:47:30:1d:83:
7e:54:c8:98:37:7c:46:6c:95:5a:66:cc:4a:3b:90:
67:65:5b:7e:f1:04:47:f1:d7:53:f3:0d:0b:9d:ec:
05:c6:d3:97:ef:07:a9:98:77:e1:b3:c4:0e:6c:17:
ba:86:1f:59:d9:70:8a:d5:6f:2e:dd:88:fc:15:f4:
cd:8f:e5:4d:69:fe:3c:54:db:b0:36:84:06:a3:59:
c6:c7:d5:00:81:d9:b9:72:c4:b3:8c:bc:43:10:cd:
9c:ac:c8:16:6b:58:b9:b0:fc:b0:9c:0f:41:a8:7d:
77:17:2d:96:2a:b7:b5:e7:dc:62:c5:9a:ce:0e:45:
86:87:df:a6:fb:55:e7:d1:ce:c6:14:09:02:5f:1e:
30:4d:53:18:9c:81:fa:50:6a:69:ff:e5:ca:d1:d3:
2b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:75:CD:E5:04:DC:69:AD:CB:21:B2:DE:78:1C:1D:DA:35:85:98:50
X509v3 Authority Key Identifier:
keyid:91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:52:93:86:79:e6:95:ed:1b:86:de:ca:e9:29:50:86:20:9a:
1c:96:75:2b:c3:e0:54:9a:47:31:5f:b3:e4:97:c1:47:94:43:
5c:11:ae:e5:9a:d9:bc:73:e0:fd:f9:d6:34:66:d6:31:7c:0f:
6e:30:22:bf:a9:c1:85:6b:ac:37:d7:c9:55:58:ad:c9:51:9b:
84:4c:69:16:da:6f:ff:5b:82:b5:be:69:5f:14:52:33:9d:84:
b1:d8:1d:46:f9:f3:bc:cc:41:05:1a:e3:d5:36:d7:5f:0d:cd:
79:00:aa:10:03:a6:cb:1e:46:64:f8:8b:1a:20:c4:36:18:0a:
06:3c:57:51:41:dd:24:f3:62:4f:f2:87:f1:f4:11:9c:63:03:
95:c7:97:fe:b8:1f:55:34:90:bd:55:ed:00:02:6f:37:59:91:
5f:f6:11:27:7b:aa:2d:d3:38:9f:69:00:bd:a6:ff:c1:e7:1c:
48:07:7d:e7:71:30:9a:7a:95:9a:69:ca:11:3f:2f:71:60:8f:
f1:4f:0d:71:ef:35:c8:ff:ec:9d:32:8b:11:9a:13:e4:38:b3:
49:61:74:a7:2b:6b:97:0f:70:58:2b:c0:85:e7:cf:a7:b5:71:
7f:87:71:44:35:64:29:76:5e:c1:7b:b7:a6:6e:b4:69:20:d1:
31:d0:2d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:52 2025 by rpki-client