Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
File: KeieDArUFRV01m8rML0dpKqd8Fs.mft (raw, json)
Hash identifier: PXfhGOWNk7vRW4aRDGVlle9+yAAsOrATQZa9wGTmjZQ=
Subject key identifier: CB:3A:4B:A1:FC:F4:E4:D9:86:37:04:B0:AC:0F:66:DD:3E:79:45:59
Authority key identifier: 29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
Certificate issuer: /CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Certificate serial: 0194BBCE9D9D6BBAD4FB182728B783A94282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
Manifest number: 10F6
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: KeieDArUFRV01m8rML0dpKqd8Fs.crl (hash: 50vadBQHk2iZZZzAYfRXzXJ4KhrUUF/qbrVuxYlF+ME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9d:9d:6b:ba:d4:fb:18:27:28:b7:83:a9:42:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=cb3a4ba1fcf4e4d9863704b0ac0f66dd3e794559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:44:a0:8e:b3:36:c6:00:fe:4d:73:02:8d:
29:d9:6e:58:66:20:d3:1b:ad:79:19:fd:de:4c:4a:
1b:b4:e9:bd:d1:84:16:f3:d3:ad:a7:53:a7:d2:a5:
c8:c7:57:a4:2e:32:0d:44:83:26:7c:78:7c:0f:e8:
c9:6e:4e:a3:e7:62:d9:73:42:2e:23:ee:b1:1c:76:
13:3c:67:be:39:f9:e3:4a:1e:c6:be:e3:0d:34:37:
eb:c6:9d:a2:57:a0:ff:06:8a:f5:0c:82:bf:8c:90:
df:dd:42:f3:e9:cf:1b:4c:f9:e2:e0:86:5d:cb:b8:
ae:88:1c:6b:0c:cf:8a:c8:aa:dc:08:c3:ec:dc:73:
ab:07:9b:6a:aa:88:d6:4e:1a:9a:08:5f:57:29:07:
38:4d:e3:bd:c5:2a:65:52:4f:30:52:60:9a:58:c3:
9d:3e:7d:e4:34:c8:c5:a4:be:9a:47:aa:42:70:87:
81:06:d2:bb:0a:dc:ae:dd:9a:80:bf:30:6e:22:92:
77:83:67:56:36:42:83:2b:11:a4:ce:d3:7b:d6:b6:
ec:94:67:8e:26:b0:eb:be:f6:80:5a:88:6c:6b:0a:
35:2c:5d:47:de:a7:02:fa:cc:8c:7d:ee:2b:b5:3c:
f6:ff:b3:a4:ba:bb:9c:a5:34:bc:7c:28:63:72:36:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3A:4B:A1:FC:F4:E4:D9:86:37:04:B0:AC:0F:66:DD:3E:79:45:59
X509v3 Authority Key Identifier:
keyid:29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f0:77:0c:c2:19:2a:df:3f:fe:7a:39:ac:95:6b:c8:c2:6d:
aa:1f:07:df:dc:da:f2:8c:6d:db:35:85:1d:70:01:5e:c1:00:
ed:87:31:d6:4f:6d:45:37:47:c1:83:df:df:de:36:8c:9d:15:
d1:e9:d9:a8:9e:c1:f1:c7:5f:ff:05:42:28:02:93:c2:93:f6:
87:d9:c7:23:a7:6a:93:15:4b:69:26:03:96:38:1d:c8:4a:4f:
00:84:83:9c:91:51:83:e4:bf:56:1e:49:e6:a8:de:f9:62:3c:
b2:5b:a5:bd:2d:c5:92:d2:c0:93:f6:ae:ea:31:20:f8:54:24:
66:2e:25:0b:23:e1:18:14:d6:b2:4c:e3:26:7f:a7:d3:ac:66:
50:b9:bd:cc:ca:c8:5d:cb:3a:76:a9:cd:2c:8f:de:d6:db:5e:
03:db:e3:17:74:92:75:93:d6:cc:7c:82:ea:b7:85:5c:fe:b0:
78:97:1b:82:78:59:68:06:38:7d:c8:eb:bd:2a:69:88:c1:0d:
b8:c8:f7:d4:bd:14:30:90:c3:d7:95:5f:3f:bc:97:bc:74:94:
41:4a:52:00:53:de:4c:19:05:b2:9c:fa:41:e8:c8:3e:e6:a3:
c9:55:aa:97:99:47:db:f7:2b:1b:28:03:8c:1f:ec:64:a3:d2:
39:8c:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:34 2025 by rpki-client