Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/990fda-5905-4e49-a630-15357cd5ece4/1/kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.mft
File: kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.mft (raw, json)
Hash identifier: ZJ8El806Z2jMk63fA4A5ahkScEFwy1t31peRZCEK45I=
Subject key identifier: D8:AB:CC:E5:DD:43:29:3B:70:70:4E:B4:C8:1C:A3:11:D8:8E:17:EC
Authority key identifier: 91:D3:38:37:0E:10:62:7A:4C:D6:31:E3:FD:E1:86:E1:94:89:8C:81
Certificate issuer: /CN=91d338370e10627a4cd631e3fde186e194898c81
Certificate serial: 0194BBCDDC2B9B201831639947AC184ED419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/990fda-5905-4e49-a630-15357cd5ece4/1/kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.mft
Manifest number: 0A15
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.crl (hash: 66dlqns+x4DmnRVKUOH1BraIUJTs2MUL1zTLH9iQqUs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dc:2b:9b:20:18:31:63:99:47:ac:18:4e:d4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d338370e10627a4cd631e3fde186e194898c81
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=d8abcce5dd43293b70704eb4c81ca311d88e17ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:66:a0:54:1f:6e:8f:c6:6a:19:17:ee:e2:
15:5a:40:47:18:4a:b4:6f:91:e7:3f:14:dd:26:75:
a8:23:11:65:95:37:9a:25:d3:50:ae:ab:94:2b:49:
ee:51:97:27:00:f6:d5:da:20:ed:ca:8b:bf:29:9c:
a4:0b:c4:74:79:48:cb:85:3b:15:72:cf:35:9c:0a:
c9:89:6a:19:21:15:bc:04:1e:ed:c3:4a:cf:32:7a:
43:51:46:d3:c3:00:d7:c0:d9:b8:11:d8:c1:2c:5e:
9c:14:43:52:23:a1:39:fa:9b:4c:49:e5:b4:92:3e:
73:40:a8:ae:0c:05:25:9e:66:96:f2:4a:c4:3f:e1:
89:f6:aa:5e:4c:fd:fd:d3:24:2a:28:22:06:3f:e5:
6f:6f:3c:3f:16:96:a8:6d:f9:47:57:20:9e:5c:67:
03:8e:ea:b7:53:a1:ba:1e:68:c2:d3:82:92:63:f8:
b8:38:1f:8d:44:72:a7:fc:6d:f7:a9:c6:26:42:ae:
9a:c4:a4:a5:fa:78:53:a5:9e:ac:be:0e:0c:de:a2:
0a:b0:4f:f7:51:b4:08:9b:86:95:fd:93:ec:45:df:
b1:3d:15:2e:78:cd:a5:86:cb:85:f3:6c:1e:0a:4c:
4d:2b:82:e5:a6:ac:b5:ea:02:af:19:dd:18:c1:a8:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AB:CC:E5:DD:43:29:3B:70:70:4E:B4:C8:1C:A3:11:D8:8E:17:EC
X509v3 Authority Key Identifier:
keyid:91:D3:38:37:0E:10:62:7A:4C:D6:31:E3:FD:E1:86:E1:94:89:8C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/990fda-5905-4e49-a630-15357cd5ece4/1/kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/990fda-5905-4e49-a630-15357cd5ece4/1/kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fc:32:d4:14:e7:dc:9b:53:65:93:86:fa:f0:95:8f:e0:a0:
1a:fc:ce:a1:3d:02:98:7a:c2:0b:81:cf:52:51:97:ad:e1:35:
c0:30:fd:c9:7f:08:28:a5:08:88:bf:02:2a:4e:c9:3e:a4:11:
ab:0f:a7:34:69:10:65:0d:82:aa:10:65:a4:5e:ca:02:81:ad:
35:e4:70:d4:1c:dc:5b:c9:14:af:0a:3a:c8:8d:c7:d4:e5:71:
69:26:90:19:84:86:03:d9:be:3f:87:48:ff:5b:c5:a5:20:e6:
8b:1c:f0:b5:65:2a:03:01:ea:b9:70:d2:e0:17:ba:03:df:57:
24:e4:e8:cd:5a:60:f7:a7:be:6c:d7:38:13:b9:bb:be:e1:6c:
56:d2:c0:63:6f:06:24:81:c5:04:95:8d:a8:cf:81:0a:65:aa:
d5:94:e2:18:e0:80:ef:de:9a:1e:30:5d:ff:61:63:9a:cd:19:
63:28:22:7f:43:b3:de:b3:f5:88:2a:cd:ad:47:83:97:01:9a:
09:56:fc:d6:f8:00:10:91:c6:5f:79:81:b1:38:30:16:d9:2e:
cd:30:82:c2:f3:fd:75:2d:f0:87:b9:aa:27:6a:44:a1:7b:45:
47:14:d9:0f:81:22:b3:55:98:d3:b3:96:50:a5:f7:72:ea:f1:
9a:39:81:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:01 2025 by rpki-client