Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: Sm2uSnK/BQf0KWzROFf1DzVNs8jFv6l7uQQk10MS0O8=
Subject key identifier: D8:2B:BB:D9:92:43:3E:ED:AE:34:26:71:24:66:0A:62:FB:69:03:C6
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 0194BC728F8542B6C23ABA65E715D6C8B989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 047B
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: QKk9KuAetGUBhk8IW4rmwvPIQVnu/R25rduGiDilVOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8f:85:42:b6:c2:3a:ba:65:e7:15:d6:c8:b9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=d82bbbd992433eedae34267124660a62fb6903c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:db:e9:fa:ac:2c:f2:8e:d5:0a:40:0d:b7:69:
0c:06:72:5c:25:14:dc:11:bf:e3:3c:f0:40:c4:02:
f2:7c:b3:9e:0d:a9:d6:7f:dc:8d:00:0b:43:db:7b:
8a:b7:d8:c6:ac:3c:76:70:db:f3:40:f3:93:a3:00:
d8:ae:31:d7:b7:92:a5:10:b1:db:c1:18:79:24:f9:
6d:03:81:c6:de:04:80:b1:76:df:f1:a8:23:98:44:
c4:ff:c1:d6:e8:ab:d3:f5:53:1e:49:d2:d6:46:84:
e4:4d:eb:02:03:50:fe:67:cf:6a:f4:e6:a9:06:2d:
c8:03:92:e3:cf:6a:d6:24:7d:a3:5c:c9:cd:28:fc:
61:78:26:14:a6:48:8a:9d:56:6d:0f:69:d9:21:64:
4d:54:74:3e:69:b6:44:b6:aa:ea:5c:1c:a3:79:2d:
01:93:e3:e0:90:8c:ca:6e:d6:55:e6:95:37:e7:b0:
89:23:f4:d4:fe:06:b7:8c:0f:4e:67:77:5b:7f:f4:
70:af:09:a2:7d:d9:46:90:cc:df:38:d0:e9:9d:7c:
07:6f:0c:6c:cc:1b:e4:4d:6c:dd:e9:86:1c:ba:0b:
5b:be:12:c7:87:ad:b1:32:0c:10:4e:1f:d1:63:5b:
e6:65:12:18:ed:3a:c3:49:85:02:d0:23:ea:57:76:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2B:BB:D9:92:43:3E:ED:AE:34:26:71:24:66:0A:62:FB:69:03:C6
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3c:d2:d7:ec:51:a0:1c:0b:5c:a9:7f:0d:00:b9:b2:3b:c1:
f8:a1:56:7c:07:5f:14:c2:a6:4d:fb:fe:3e:9a:7b:dd:3d:5d:
9c:54:6b:75:43:c2:ce:24:2d:3b:10:f0:33:46:fe:70:b6:e9:
d0:d7:fa:a1:43:ef:4d:73:7a:64:e8:d3:d3:65:4f:6f:c6:3a:
1f:bf:d3:e2:8d:4b:a6:e0:70:98:b3:ca:8f:db:85:32:88:9b:
63:c2:8d:2e:2b:49:a0:63:21:48:33:77:01:e2:19:6a:94:c0:
b1:20:35:0e:61:ae:ef:80:ce:b4:c6:ba:f4:24:72:c9:12:df:
6e:71:e7:a7:29:d7:1d:0e:c6:3e:4b:bd:c1:10:33:c1:7d:b1:
a3:60:5b:c6:b3:1d:38:9f:7e:df:7c:ed:71:27:8d:e5:62:3c:
ea:e3:42:37:bf:26:c0:e8:c4:07:7b:f8:7a:a9:7a:a1:b2:e2:
88:d9:c0:be:e1:04:a7:a0:29:56:aa:8a:67:8c:c4:a8:b4:ce:
7e:d1:a2:fc:f4:69:fc:73:c1:c0:24:47:2a:6b:8a:7c:3f:89:
07:13:f5:ad:20:b4:af:a9:e0:f2:3a:f1:ee:0a:d7:67:85:86:
cf:85:75:90:0d:c9:f5:d5:51:68:43:a0:5e:72:4a:8c:56:0d:
15:4d:d5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:25 2025 by rpki-client