Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
File: KY60_lwZ8pLyiSTL8VVaj1do2CY.mft (raw, json)
Hash identifier: tP2HcKYqJi0B8zXJUj8DQNw8u4zHY1hPdYHPBWBZeB0=
Subject key identifier: 85:84:E1:0D:C1:63:E2:67:5B:EE:9E:2C:AE:1F:15:F9:B7:ED:3D:AF
Authority key identifier: 29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26
Certificate issuer: /CN=298eb4fe5c19f292f28924cbf1555a8f5768d826
Certificate serial: 0194BBCE49AEE2D99B4A9519E256D7462B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: KY60_lwZ8pLyiSTL8VVaj1do2CY.crl (hash: 5WPSovTVdoipSGCR8rEB6FkmykoFVznWd+cQ4GOZNQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:49:ae:e2:d9:9b:4a:95:19:e2:56:d7:46:2b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298eb4fe5c19f292f28924cbf1555a8f5768d826
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=8584e10dc163e2675bee9e2cae1f15f9b7ed3daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:02:3e:f5:7e:21:41:96:52:37:d7:a3:26:
1b:0c:6f:c0:17:dd:10:70:4a:81:4a:6a:1b:04:bb:
28:14:51:b1:92:c8:a0:c9:ef:f9:c3:29:96:d0:0e:
63:bb:40:d4:3b:19:a3:97:54:c7:ba:1b:6b:8b:1f:
d9:b5:25:ed:97:3d:9c:90:f6:98:e9:f9:76:57:8c:
b1:23:b3:6d:94:09:5c:e9:9a:b8:44:f7:83:16:00:
89:65:b7:96:0f:29:ef:bd:60:90:a5:cb:fe:06:15:
38:5e:f0:f5:ac:d2:a4:6d:27:b0:c0:18:13:cf:6b:
76:a7:c6:06:41:a6:e3:4a:93:6a:3c:3c:dd:7f:d6:
23:fa:a0:9c:88:b9:53:c1:c6:d4:33:87:b6:69:7d:
6b:20:57:53:c1:af:8e:30:b6:02:a2:5d:ea:6d:b3:
cf:63:46:ce:f3:47:5e:5e:54:77:98:7c:d5:a3:cb:
93:41:e7:5c:6b:ea:8f:bf:6e:94:99:48:2e:97:9d:
a1:1e:d8:02:b1:41:8d:b1:d6:09:c3:5b:ee:6c:ce:
35:c0:6d:46:e7:42:77:56:5b:62:75:b6:b3:f9:83:
c6:6b:9d:7c:db:ea:88:6c:b4:a1:8b:1e:6f:36:cf:
9d:c8:e0:17:61:4a:25:23:dc:02:11:aa:02:df:3e:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:84:E1:0D:C1:63:E2:67:5B:EE:9E:2C:AE:1F:15:F9:B7:ED:3D:AF
X509v3 Authority Key Identifier:
keyid:29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:01:97:3a:9f:40:b6:3b:ab:be:2c:9a:96:af:89:d3:81:69:
bd:d5:e5:83:bb:30:a8:83:d5:af:95:ba:e5:c4:ab:17:cb:ed:
8d:ce:b0:45:e1:79:04:db:e6:61:dd:0d:fa:ec:8a:ab:ee:0c:
7d:60:99:9c:6d:e8:8f:50:1a:6a:50:50:a7:9a:6d:81:ee:4e:
3d:46:6a:37:c3:fd:6b:5b:f3:da:bf:bd:44:6a:fa:cc:fa:c7:
7b:5b:56:c5:bb:50:3e:e0:bc:e7:0f:20:07:fc:37:c9:94:32:
ab:d7:bc:2f:e3:dc:97:7f:1b:27:47:ab:65:18:f6:41:8e:ef:
11:73:66:07:22:59:14:22:c9:97:c2:1b:2e:3a:d0:40:bd:a3:
af:9b:7a:86:0c:27:fa:c7:51:f7:17:38:41:fa:aa:24:27:06:
db:41:fd:51:44:4e:79:58:0b:a8:4b:1f:af:80:6c:63:8b:a3:
76:82:b9:3c:ea:17:05:ef:2b:c4:10:40:e7:d8:76:77:d9:20:
77:0c:d8:ea:07:09:bd:e0:df:18:eb:ff:19:04:b1:9c:0f:c5:
5c:de:15:57:b4:2b:fb:02:e2:56:69:b9:7e:f1:79:e5:9d:2f:
47:ec:fd:ee:a5:09:77:de:fa:64:65:2f:49:b6:69:40:3f:d6:
df:e6:ab:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:38 2025 by rpki-client