Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/7a1b60-3aec-44dd-9662-365985409bfa/1/KLwbPQy41cqsOntK0XlF--9QWKU.mft
File: KLwbPQy41cqsOntK0XlF--9QWKU.mft (raw, json)
Hash identifier: XCm5pwQW59pBhq4oBC7cQkEx6iGLs4+FP1fIzhxT2zk=
Subject key identifier: 8B:75:5D:E6:BF:5C:5C:02:35:20:51:73:3E:FB:C4:F1:85:4E:51:E5
Authority key identifier: 28:BC:1B:3D:0C:B8:D5:CA:AC:3A:7B:4A:D1:79:45:FB:EF:50:58:A5
Certificate issuer: /CN=28bc1b3d0cb8d5caac3a7b4ad17945fbef5058a5
Certificate serial: 0194BC72AD667B2ED14D89B48D853046DDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLwbPQy41cqsOntK0XlF--9QWKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/7a1b60-3aec-44dd-9662-365985409bfa/1/KLwbPQy41cqsOntK0XlF--9QWKU.mft
Manifest number: 39
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: KLwbPQy41cqsOntK0XlF--9QWKU.crl (hash: I3M/JCdxHaaoDbDoqo3cBaT3/ZtwBK79J3n8Edz/pPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ad:66:7b:2e:d1:4d:89:b4:8d:85:30:46:dd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bc1b3d0cb8d5caac3a7b4ad17945fbef5058a5
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=8b755de6bf5c5c02352051733efbc4f1854e51e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:18:a6:6f:86:19:d9:76:e9:e6:38:79:9c:
dc:7e:28:aa:ec:2f:bd:c0:98:94:40:a5:1c:35:10:
9b:77:bd:bc:09:06:f2:6c:b8:c1:5b:d8:fa:a6:69:
5e:7d:06:5f:ab:e9:05:df:8e:5e:88:1e:94:46:3c:
8a:ac:95:bb:75:7d:e1:23:47:31:3e:d5:d4:43:99:
da:9c:04:a7:72:b9:fe:c8:0f:76:22:d0:bf:52:d1:
10:c6:ad:e2:ce:bb:35:f8:a6:95:e7:ea:ab:41:9d:
1c:4c:01:66:aa:c5:82:ce:56:6d:2e:d4:99:e9:ea:
11:47:b8:95:44:14:38:2d:7b:74:e9:35:1d:3f:15:
e7:de:1c:b0:5f:02:e4:d0:55:15:03:fd:04:ad:0f:
39:52:3c:b5:b8:02:7d:92:60:8c:08:84:6f:e7:14:
c5:d8:15:93:ae:82:17:f2:91:c3:e5:10:d4:8b:79:
97:54:09:f9:0b:c3:b4:89:81:d6:33:1a:0b:2c:ac:
2c:d2:0c:97:aa:53:2e:45:f6:0d:89:71:f5:b5:ac:
11:cb:f9:86:3a:94:b0:5f:f3:e5:16:54:81:43:80:
04:32:20:8f:f3:9c:da:d6:c7:e5:e1:e7:62:7a:b5:
7a:f7:af:3f:40:74:b5:d8:c3:25:f5:e0:5d:ce:b2:
2c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:5D:E6:BF:5C:5C:02:35:20:51:73:3E:FB:C4:F1:85:4E:51:E5
X509v3 Authority Key Identifier:
keyid:28:BC:1B:3D:0C:B8:D5:CA:AC:3A:7B:4A:D1:79:45:FB:EF:50:58:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLwbPQy41cqsOntK0XlF--9QWKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/7a1b60-3aec-44dd-9662-365985409bfa/1/KLwbPQy41cqsOntK0XlF--9QWKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/7a1b60-3aec-44dd-9662-365985409bfa/1/KLwbPQy41cqsOntK0XlF--9QWKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a5:c2:d5:0c:f7:4f:95:d8:0e:b2:93:96:18:c6:e7:2b:c8:
fe:ec:85:6f:97:27:ba:d9:61:f0:c4:bf:2c:16:d5:5f:26:ff:
8f:0c:e3:2e:9e:c4:2e:20:0a:49:b7:92:ab:55:97:f3:f5:89:
ab:47:fe:6b:ea:ce:a0:d6:9d:81:91:1a:11:46:22:4d:f7:7d:
82:28:99:40:84:f1:82:82:c3:a2:68:43:37:82:a7:c5:35:f4:
cf:6e:f3:b4:86:55:d3:55:d1:1b:d2:18:d4:ca:68:2d:5f:4e:
c6:3d:97:a1:3d:76:7f:8e:76:aa:79:dc:8f:d3:5e:02:24:ff:
54:d3:36:23:c5:85:99:52:14:e3:be:40:e4:27:cb:bc:80:6e:
d4:38:4e:c9:43:3f:4e:91:0d:e9:93:0b:58:43:35:cc:18:4b:
85:bf:7d:00:67:f9:76:f6:63:0b:f0:38:c2:08:52:b4:b8:2b:
0b:c4:c2:fe:d7:d6:bc:a5:4c:85:4d:02:fd:8e:77:dd:3f:a8:
c3:aa:d9:a8:da:66:90:08:78:fa:c5:a2:00:91:63:0a:ec:0e:
5c:74:3a:e4:99:0a:3b:25:9d:b6:99:34:9d:2a:42:da:d3:84:
98:e2:5a:5a:d1:63:72:45:55:37:27:d3:f9:02:04:d8:21:8a:
4b:dd:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:04 2025 by rpki-client