Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
File: kHpNEpJLU1fjAmev48XMc2QkEVg.mft (raw, json)
Hash identifier: QmFPFNtbO9pvVFcWSDf7qO4TG7DFTKbb1Q4/adSIGaQ=
Subject key identifier: 62:EE:D0:B6:4D:96:0C:4E:3F:1A:F2:F3:2E:05:EC:26:B3:C3:41:CC
Authority key identifier: 90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58
Certificate issuer: /CN=907a4d12924b5357e30267afe3c5cc7364241158
Certificate serial: 0194BBCDEFA5EF661A5C6FB5594C17C5E6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
Manifest number: 0E3F
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: kHpNEpJLU1fjAmev48XMc2QkEVg.crl (hash: QvTa47vd54UeG69+oCqmCMg2A9I2ewpcbwEgyP4vWt4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ef:a5:ef:66:1a:5c:6f:b5:59:4c:17:c5:e6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a4d12924b5357e30267afe3c5cc7364241158
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=62eed0b64d960c4e3f1af2f32e05ec26b3c341cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c4:3c:f4:3e:33:a0:87:11:da:8a:82:d6:0a:
4a:ab:5a:4a:ba:d1:49:91:82:c4:44:c0:84:d5:72:
bc:ef:17:f1:74:68:b9:0e:07:45:ce:bb:3f:0c:1e:
e9:ec:cb:1a:56:ba:91:4a:49:dc:97:51:e7:2e:af:
46:4f:f3:30:19:56:a3:cd:aa:0d:c6:68:49:1e:23:
41:b8:2f:a5:fb:81:84:b1:3e:48:9e:99:53:21:ee:
ff:0a:57:94:64:93:5a:c5:73:3e:f6:de:70:11:0b:
e4:16:68:08:15:3a:f5:0e:99:01:40:33:52:58:eb:
61:d6:47:f2:e6:63:54:39:f2:2a:8e:34:84:5b:f0:
d1:9f:b9:d7:8e:51:95:be:08:d4:07:70:28:17:d9:
55:77:78:e1:40:cf:1a:e3:b1:77:ae:39:60:2f:7a:
40:55:db:dc:1b:bc:53:3f:40:a1:54:29:f1:7f:88:
21:ca:43:4f:74:57:e0:1d:dc:a6:31:db:4a:3f:1e:
00:1b:a2:81:c8:8a:b6:1f:da:88:55:b1:f4:f4:d1:
9b:7f:2a:c9:99:e7:12:b1:3a:9b:82:fc:29:4d:d8:
a9:b1:eb:ff:a5:7e:e6:ed:3a:ab:e3:2c:cd:cf:76:
3d:14:47:3f:50:f1:84:31:4f:73:b2:f4:2f:7d:0b:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EE:D0:B6:4D:96:0C:4E:3F:1A:F2:F3:2E:05:EC:26:B3:C3:41:CC
X509v3 Authority Key Identifier:
keyid:90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:66:c7:49:b2:e3:12:33:f7:e4:05:99:24:57:17:81:7b:d2:
03:ca:71:a4:b0:f9:3e:67:12:b0:a0:20:b0:10:31:3d:31:22:
04:e1:ea:74:3d:46:45:9d:0e:9c:d1:72:e1:1f:e6:5e:29:ba:
89:98:89:75:b9:21:18:ba:ce:d1:ba:6a:db:5c:36:76:ee:a4:
25:92:cd:43:eb:a2:33:0f:00:69:14:db:2a:8a:1d:6a:ea:e7:
50:50:28:d8:57:75:94:31:d2:81:c2:40:84:d7:ad:46:81:37:
49:b3:b9:7e:f2:9d:5f:77:d0:14:cc:50:20:f1:82:4b:82:2f:
ac:2e:d9:6d:43:94:42:cf:38:fc:67:52:7f:59:3c:c0:5a:cc:
77:c5:43:ed:6b:71:8d:71:3e:6a:0f:67:b4:5a:71:3f:89:3f:
e7:e8:65:23:83:f3:dd:23:06:5a:96:3c:1f:b4:50:18:6f:e4:
68:fc:9f:a0:e7:b4:90:ed:d1:6a:81:09:60:fb:77:58:88:d2:
de:5e:91:79:1c:d6:0d:59:fe:90:90:19:fb:07:39:4e:b2:aa:
5a:99:39:b3:81:b3:41:e2:10:4b:c2:e3:da:6b:72:9f:a2:a5:
c7:25:fd:7b:27:a0:25:e9:71:f7:2d:43:3e:7d:32:bc:f5:05:
06:cc:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:24 2025 by rpki-client