Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
File: Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft (raw, json)
Hash identifier: 0UhIl46QkhnZ6GrZi+Fw8fknxO03f1ECrUxiNw4nkr4=
Subject key identifier: 49:B4:F9:4F:9E:F8:53:15:A5:03:9B:1D:64:53:38:81:69:43:8E:AE
Authority key identifier: 2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
Certificate issuer: /CN=2afd754f3077cd60f009be026c9084e572970660
Certificate serial: 0194BC72A1D2725EE957ECB773EC3C2120ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
Manifest number: 021C
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl (hash: HBjgQiwMz7fF1v4jQo04xzq68bg1xNde8YNUgfPRQy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a1:d2:72:5e:e9:57:ec:b7:73:ec:3c:21:20:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2afd754f3077cd60f009be026c9084e572970660
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=49b4f94f9ef85315a5039b1d6453388169438eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:0c:77:99:71:42:46:af:a3:91:69:49:bc:
83:15:f0:df:ae:26:d7:34:b1:d3:50:05:8f:84:de:
10:d3:38:4a:2a:24:2e:01:d9:f9:9c:ef:e2:0e:b5:
0f:73:38:4b:ed:fe:7f:ef:e0:0d:60:96:e5:15:60:
09:52:8a:18:7b:6f:b6:7c:01:b0:a0:ad:1b:70:c6:
ab:d5:d6:d6:55:89:b7:c4:29:51:ee:59:e2:9d:93:
a9:b4:46:f2:81:4f:ac:c6:7e:f1:a8:9d:11:5b:38:
04:e0:7a:ee:a7:f9:05:a6:50:67:c3:ea:52:88:de:
bb:07:65:18:65:ed:a9:02:d4:64:8a:27:51:cf:53:
04:71:c7:34:8e:15:22:80:5f:ee:da:2d:d4:68:2b:
23:26:fb:7c:6c:2c:d3:a6:7f:d6:c2:28:71:f6:ef:
4e:86:a8:b2:06:b2:4c:1f:91:e9:56:89:a9:82:cd:
64:94:77:15:a0:e7:eb:aa:d3:65:93:e5:cc:25:ff:
71:89:bb:43:d5:ea:89:12:c4:8d:5a:45:ca:50:f0:
fa:7c:2f:9d:64:11:47:28:70:c3:2e:d3:bf:f0:03:
d7:c1:91:5e:18:79:ca:d9:e9:31:19:52:cf:a4:79:
f8:1b:8e:8a:8c:33:1d:6e:bd:fe:ef:79:2f:4e:f9:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B4:F9:4F:9E:F8:53:15:A5:03:9B:1D:64:53:38:81:69:43:8E:AE
X509v3 Authority Key Identifier:
keyid:2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:18:10:9e:6b:35:7b:11:2f:76:6b:19:b3:5e:0f:7d:f3:1b:
e8:3b:a8:b3:7c:35:82:7d:a4:dc:80:ad:1e:ca:2e:2c:ed:e7:
37:83:84:61:7b:d7:dd:be:5a:78:be:4a:da:ce:c3:ae:69:14:
5c:ca:d6:e3:a2:8f:6a:cf:bb:7e:cb:72:a5:7e:bf:95:99:3a:
1e:8d:0c:04:ff:c7:d6:00:a9:54:09:de:bb:67:ec:6c:03:ca:
c7:49:b0:99:6f:67:37:ab:16:4d:04:3f:9c:a3:c8:96:46:47:
35:1a:0a:8c:c2:1c:cf:48:df:f7:f3:59:24:3e:1b:46:76:9c:
33:0c:fe:a8:89:5d:b6:06:98:f4:c8:6d:36:64:b4:ad:e2:6c:
68:fb:3a:78:e7:53:d7:68:e4:0b:31:53:23:fe:85:cd:2c:a9:
e9:ba:a2:5a:fc:23:76:23:9a:56:a5:06:7b:ec:82:b7:06:ae:
43:8b:a9:78:87:55:3a:7a:66:74:58:da:c0:86:db:bd:ca:82:
b7:3d:fd:1a:52:0b:32:a9:e4:5c:a4:46:3f:45:6a:92:59:fc:
c1:67:3e:90:d0:98:38:6e:a0:1d:b1:53:e5:d8:0d:c4:5b:c9:
30:f6:b4:58:89:2a:77:c2:6e:04:fd:29:84:87:e1:74:44:7e:
6e:06:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:30 2025 by rpki-client