Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
File: Km9uXKXbQ3eec6znzhbs4O55R5k.mft (raw, json)
Hash identifier: Yg/sGyPltNZ6c0QIynQ786cuRy5ug9aGJoUA/M8kEwg=
Subject key identifier: 86:80:45:4A:07:3F:EA:67:D4:98:22:25:75:9E:8A:E0:07:D0:EB:BF
Authority key identifier: 2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
Certificate issuer: /CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Certificate serial: 0194BC04DD2E0484CC252946CD46CD7E0AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
Manifest number: 02AC
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: Km9uXKXbQ3eec6znzhbs4O55R5k.crl (hash: 72tCJSZW2/Qbd7aTgXE7kFhn3LXEhdEijThnPLYMB9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dd:2e:04:84:cc:25:29:46:cd:46:cd:7e:0a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=8680454a073fea67d4982225759e8ae007d0ebbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:01:35:33:d0:7b:34:f9:e7:99:5c:14:31:
01:da:4b:a0:f9:18:31:85:fe:bb:6e:da:59:c3:01:
ef:78:d7:f6:db:ad:1f:f2:4d:20:3f:ba:bf:11:8d:
0e:ce:e8:57:36:4d:91:0a:f4:c7:e0:ef:d4:ad:a2:
e6:d6:1c:71:76:a4:9e:6e:40:8f:7c:9f:93:6d:45:
aa:f0:fd:d8:73:e5:7f:f4:fb:70:84:87:8d:12:d4:
af:82:2c:3d:79:f6:1c:ed:54:16:aa:ac:9e:b9:7f:
74:28:6d:d5:15:2e:04:0d:ed:de:54:70:11:d4:0f:
d8:e5:8f:1f:01:4f:eb:ad:fa:4f:d5:2d:7f:6b:c1:
fe:fc:03:cd:03:87:28:6a:a6:50:77:74:24:a8:cf:
b3:96:79:78:c1:c4:1c:3b:73:49:4b:c7:a6:31:29:
5a:f3:8f:42:c8:57:66:3d:22:6c:d6:ec:ec:ba:bf:
cb:c3:f1:9b:c0:34:ec:68:88:d2:43:e7:3a:bd:9a:
c8:2a:bf:97:81:1e:6c:3c:ef:da:96:cf:bd:e8:6d:
f2:49:2a:6c:fa:1b:51:a0:69:48:bf:f9:db:21:b3:
51:dd:f4:18:56:77:e7:47:63:d9:eb:fb:88:3a:57:
04:51:c3:1c:27:ea:68:e8:82:52:2e:34:a2:3a:3f:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:80:45:4A:07:3F:EA:67:D4:98:22:25:75:9E:8A:E0:07:D0:EB:BF
X509v3 Authority Key Identifier:
keyid:2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3f:5d:03:16:99:15:25:74:a4:8b:e0:95:97:bf:c3:04:37:
d5:59:82:c1:1d:c4:7a:c1:a9:da:43:f0:5e:7f:c7:bc:61:2d:
53:86:6e:79:45:d9:8e:91:6b:4c:82:24:bd:1b:08:cc:85:20:
f7:ae:7e:32:b9:e8:fe:01:f9:b8:40:09:fd:82:b2:4f:22:0d:
58:53:12:4f:95:18:05:d5:1f:99:67:11:80:68:60:dd:32:d3:
64:36:8f:21:26:fa:2a:d8:16:65:1f:11:d6:17:90:c0:e2:ee:
c1:49:14:61:8f:b5:6f:39:41:c9:7e:2d:5f:b2:48:1f:4a:80:
bb:8f:83:13:2a:98:cf:04:56:32:18:f2:65:2c:87:18:9f:24:
89:ac:d7:f7:58:d0:ff:cb:30:05:58:70:23:04:7a:be:f8:13:
89:60:9a:db:13:06:a8:06:fa:df:15:42:ef:17:19:9d:5e:c5:
e6:e4:39:93:a0:dc:07:75:43:97:9b:9e:d2:08:95:ff:b5:00:
b3:43:8c:4c:a5:45:20:be:1b:cc:14:67:b4:3c:53:36:7a:3e:
d3:f5:60:56:57:aa:46:10:8b:3f:a8:8c:b6:a6:f2:06:2b:73:
0a:2d:89:04:f4:78:02:5c:44:c6:b4:8c:b8:73:b8:5d:68:0f:
ab:8d:30:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:27 2025 by rpki-client