Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
File: kffw_3S3yfrqKXjtlehAmEkE3NY.mft (raw, json)
Hash identifier: TQgxIsGXxcHTL7UN9b9r4C0PwI31diLLXrclqVOcpGU=
Subject key identifier: BB:48:CD:21:2D:F1:A0:80:80:8E:95:3A:C5:3E:19:63:AE:C6:31:77
Authority key identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
Certificate issuer: /CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Certificate serial: 0194BC3C3868B92DE7B77AEEC18D94209522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
Manifest number: 07E6
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: kffw_3S3yfrqKXjtlehAmEkE3NY.crl (hash: I3lQHwHKMMI2fRtP4psp72H17Ak0aRGxqhLVd8ExGFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:38:68:b9:2d:e7:b7:7a:ee:c1:8d:94:20:95:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=bb48cd212df1a080808e953ac53e1963aec63177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:bf:29:80:69:e1:42:06:3e:9c:67:91:85:
23:25:6d:5a:ca:b4:37:5f:d1:e9:62:b7:bb:5e:e9:
26:6b:eb:ef:a6:b0:17:51:9b:29:93:08:5d:95:c6:
7a:e0:92:c4:b3:1d:7b:4d:ab:e5:4e:1a:01:a2:9a:
c2:8f:14:10:e6:3d:9e:53:f8:ce:55:83:f4:f2:ef:
39:e8:27:95:83:4a:fe:d3:c5:d7:f2:47:fe:0b:62:
2c:0b:8b:00:b5:e5:56:f0:f1:29:9b:a0:38:13:a7:
37:a1:13:26:73:a6:d8:df:91:71:f9:87:4e:d7:35:
39:6b:2d:43:e5:68:8b:70:96:88:55:12:f3:a4:54:
a7:74:d4:2a:ec:92:76:b6:59:40:98:e0:98:52:f8:
41:b4:d4:a1:40:3a:f5:76:0b:46:17:7b:84:a1:a3:
cb:8b:4f:37:83:c3:f2:c3:17:4b:2c:30:29:f6:b5:
df:cf:d8:08:23:18:14:b6:22:ac:7e:5e:0b:42:63:
6b:a7:b3:a7:8d:64:66:03:18:10:a7:5a:b5:4e:83:
4d:bf:43:19:37:bb:44:45:71:81:b5:1e:c4:94:2c:
9b:07:93:4f:0e:9d:88:9a:c3:4e:f9:86:29:27:eb:
67:82:34:b5:03:ea:2f:6e:e9:e5:47:19:d3:38:52:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:48:CD:21:2D:F1:A0:80:80:8E:95:3A:C5:3E:19:63:AE:C6:31:77
X509v3 Authority Key Identifier:
keyid:91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f1:02:dd:92:88:be:d8:15:ee:40:64:1b:79:57:57:83:fe:
6c:60:01:09:3f:26:fc:5d:81:d1:44:8c:6b:c1:5b:78:92:90:
99:44:5b:da:66:09:4d:c0:44:ef:de:89:d6:87:04:46:09:8b:
a0:6e:1c:09:59:e5:a6:55:f3:02:e0:a6:cc:27:6f:6e:84:3e:
2d:bf:3b:4c:28:9a:8a:18:b2:78:0e:64:a3:df:01:0e:6e:1d:
a2:25:1d:ec:a3:5c:6f:2f:ca:0d:a7:11:1b:9c:d9:88:0d:a0:
47:d3:03:c6:48:d7:55:25:a7:df:85:b2:1c:11:b8:e7:38:79:
06:61:2a:e5:7e:d2:98:66:52:b7:1c:61:86:0c:2a:c0:86:2a:
3e:c1:c5:59:d5:fa:b6:03:6d:aa:f3:b4:99:8b:6e:3a:9e:e6:
77:ff:df:6e:96:87:c4:c2:f9:18:65:19:5d:31:c7:56:a0:81:
27:5a:27:67:eb:9d:6f:32:b5:fb:dc:25:96:77:79:28:08:9b:
de:da:2d:c7:cf:8a:6f:71:17:b9:dd:9b:8e:fb:50:26:f0:36:
fa:6d:f2:11:6e:f3:74:2f:44:0a:80:1b:b4:86:7c:ee:87:af:
b3:ba:77:9a:a1:6e:79:da:f2:9b:85:7e:bf:43:60:14:8e:e1:
85:50:39:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:47 2025 by rpki-client