Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
File: KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft (raw, json)
Hash identifier: 92XnhkMEnG7/tGwzhAIlwjzOqQLRU0XHVl8B4iW3pMg=
Subject key identifier: 02:12:65:00:03:C5:C3:D3:C3:26:BC:4C:1E:A2:86:56:30:F6:98:C8
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 0194BCE05D269DCAF30FC4C7D80A9ABC7210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
Manifest number: 1410
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl (hash: nK3bc96kIB1hKjpcozOAnDEx/8ZMNdITwpYsvkENl+E=)
2: M60aH6ZmYDVwlHRFmj0bLwl4Mk8.roa (hash: bKtHkMAIhL+WE1R8SfyDK2iICNQ8FX6qCdgDD2Zy2n0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5d:26:9d:ca:f3:0f:c4:c7:d8:0a:9a:bc:72:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=0212650003c5c3d3c326bc4c1ea2865630f698c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:51:28:bb:f9:4c:31:5c:8c:31:b2:d7:1e:
cc:e1:a7:b1:24:77:12:2d:87:51:66:4f:15:df:66:
fa:21:2e:9e:56:29:30:cd:ba:81:ca:a4:67:c9:31:
b1:f8:4f:eb:4c:fe:22:a5:1a:a4:d5:8c:cb:ef:60:
f1:8f:80:f8:f7:9f:03:8b:9a:1b:70:05:33:47:ce:
ef:92:5f:88:6b:ba:3a:aa:21:f4:6c:5f:51:f1:0b:
ea:4c:50:15:cf:68:e7:d3:58:88:5b:d9:c1:7a:89:
19:24:35:b5:7b:ef:f5:76:60:6c:79:8f:fe:e4:74:
4b:47:ef:3b:c5:7c:60:b0:00:dc:45:50:9f:9c:d8:
68:b1:ac:48:97:71:38:e3:6d:ac:4f:43:43:90:6a:
3a:0c:73:a5:18:63:bb:67:a4:69:15:85:ef:c0:0b:
8e:54:4b:70:fb:40:9e:dc:4a:01:e8:ed:1c:06:60:
e9:ac:a3:83:a6:de:67:1e:40:5c:c2:2f:b0:1c:6a:
f3:1a:2f:d6:81:e9:e2:6f:32:b2:a1:ea:5e:84:b6:
c8:44:02:d3:7d:9c:77:ee:0a:50:ec:9c:3a:bf:2e:
e3:bb:36:50:38:d8:51:90:a7:9d:93:a7:08:93:04:
43:0c:a6:e8:2a:93:46:72:c8:ac:b7:b4:70:a8:e6:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:12:65:00:03:C5:C3:D3:C3:26:BC:4C:1E:A2:86:56:30:F6:98:C8
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fb:cc:9a:f5:1e:1e:b0:54:d5:57:28:f5:d9:91:3b:32:f5:
17:60:54:5e:b8:ff:50:a6:dc:99:1e:2c:02:37:80:6e:cd:1b:
0a:7f:33:f0:7d:d6:aa:70:d2:16:57:b4:72:b9:58:e8:b2:d1:
e3:0c:dc:03:f4:3e:1e:5c:46:87:19:df:f6:bd:8b:e9:b0:70:
a6:80:8d:0c:d4:ee:37:e5:6b:56:5f:48:02:e4:7a:3d:b1:fe:
6e:31:26:ef:47:1c:c3:45:a3:aa:13:7c:bc:9c:d1:2a:60:a7:
2c:bc:76:61:74:e7:8a:3a:8e:94:4a:7c:3b:80:ef:05:1a:af:
08:ea:a6:a7:34:49:f8:4d:d4:84:9d:f3:29:3f:eb:cf:69:00:
05:2c:c3:04:82:4c:07:70:8f:9d:73:c6:b2:73:00:11:0f:18:
16:a4:68:a5:fa:3a:81:03:6f:2f:6c:93:69:b4:45:6d:0a:7b:
25:6e:61:89:05:64:f6:0c:8d:5c:86:ad:ab:de:e7:2b:ea:3c:
f2:69:ff:65:21:dc:ca:d0:d9:6f:91:c1:65:eb:a6:05:20:e3:
0e:b7:13:8d:a8:38:73:0f:07:ad:65:fe:db:c7:c1:6f:a0:51:
98:0c:bb:3c:98:16:b0:70:94:ac:8f:89:8a:a3:d8:ed:a2:26:
a3:6c:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:50 2025 by rpki-client