Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
File: KpTH34VXtlNEfD4G-0s3LVEgoiI.mft (raw, json)
Hash identifier: cgxL9Ep2P9omcO8mOpNT2HlbB9V7HrqjINg7rDv67tg=
Subject key identifier: 4F:94:50:10:08:6A:38:F0:4F:16:B2:5A:B9:D0:1A:EA:1B:AC:B0:24
Authority key identifier: 2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
Certificate issuer: /CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Certificate serial: 0194BBCEC0D51A4048F8FC0FDCF17C41A736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:16 +0000
Manifest this update: Fri 31 Jan 2025 10:01:16 +0000
Manifest next update: Sat 01 Feb 2025 10:01:16 +0000
Files and hashes: 1: KpTH34VXtlNEfD4G-0s3LVEgoiI.crl (hash: H/hd5KgDOv8yZPyMaKhm+Z1IhzAXbAJ/U+8i2RTH8/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c0:d5:1a:40:48:f8:fc:0f:dc:f1:7c:41:a7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Validity
Not Before: Jan 31 10:01:16 2025 GMT
Not After : Feb 1 10:01:16 2025 GMT
Subject: CN=4f945010086a38f04f16b25ab9d01aea1bacb024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:98:d0:e3:df:ac:73:8a:6c:82:29:44:27:
f8:5f:3c:77:eb:89:8d:79:88:40:bf:14:5d:4e:93:
9c:31:1f:46:69:1d:18:96:cf:b4:fc:d6:30:f0:65:
59:78:ad:9d:97:e5:ce:9d:73:7c:6c:97:7e:2b:1f:
45:97:f9:0e:19:89:97:8f:2d:04:13:c5:79:3c:b4:
fd:0a:ee:8d:d1:12:3a:de:6b:14:4d:02:a8:e9:7a:
9d:f7:75:b5:0b:de:61:24:5a:90:44:f8:1a:08:61:
4c:08:0b:f4:86:0f:d3:b7:0c:1e:9b:82:5c:5b:62:
e3:4d:8c:6f:17:92:fd:50:c3:14:20:f7:f8:8e:5c:
f3:37:45:0c:b9:ad:66:68:a5:65:68:4e:94:a3:aa:
7f:7e:f7:e5:05:53:5a:3f:3d:0c:8c:55:c3:8f:28:
c1:73:81:82:69:a4:e3:11:fe:7f:fa:ea:c6:b5:c0:
ec:4b:2a:ae:1c:05:e4:2f:32:fc:7b:3c:0d:a6:50:
c4:1d:2e:33:6f:18:82:eb:21:b8:f1:69:14:41:2c:
d7:5a:b0:d4:5b:b7:5c:cc:b4:fa:e3:17:33:fa:b0:
07:84:e2:85:a8:61:16:94:3d:03:2e:b7:f0:65:f1:
c8:9d:ff:32:d0:f2:dd:87:38:9f:08:50:f6:46:9e:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:94:50:10:08:6A:38:F0:4F:16:B2:5A:B9:D0:1A:EA:1B:AC:B0:24
X509v3 Authority Key Identifier:
keyid:2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d5:d4:e0:77:3b:52:12:8b:ce:bd:4e:07:68:d8:ce:31:25:
a1:cd:af:2b:c9:7a:db:3d:17:16:5a:17:d2:db:44:12:34:d1:
1b:19:97:5c:e0:b7:a2:f1:7e:b0:3d:99:e2:61:8f:ae:89:49:
80:79:72:d8:aa:ec:a2:46:3f:05:e8:32:2f:dc:87:a8:40:32:
b9:8b:4c:00:c3:3b:aa:fc:2a:17:e4:2c:cd:45:aa:21:f9:29:
34:23:a4:d1:00:81:52:8d:5a:8c:4c:4d:e4:16:69:ec:46:4a:
97:a6:bb:7b:7e:82:84:32:a7:22:6e:4f:c4:81:d9:f5:1b:90:
05:a2:9b:1b:64:68:f6:79:8f:3c:2c:e4:c0:b0:a0:bf:e4:15:
da:26:af:06:5c:69:71:a1:f8:4a:99:29:cc:25:df:f9:45:5d:
fe:8d:98:a6:29:cc:44:3f:f7:d8:01:d6:9c:9a:37:61:e4:09:
be:64:9c:c2:71:04:a6:8d:9b:00:09:ae:27:3c:99:7e:9e:96:
2a:13:b3:41:be:98:25:37:7d:54:f1:7a:3e:13:28:47:74:e8:
87:28:84:b5:d4:f6:6a:ef:85:dd:f6:de:bd:72:6b:ba:ab:81:
23:e7:e3:10:a9:18:fe:c2:bc:69:3b:02:37:44:10:ad:36:7f:
55:14:48:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:41 2025 by rpki-client