Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/KHtQElUXlEJ0oUa7rNZOaRog-gY.mft
File: KHtQElUXlEJ0oUa7rNZOaRog-gY.mft (raw, json)
Hash identifier: bmAFJRDLXAfGE2tiwAKniKJrwD+9HaK1VffbvMjnHIg=
Subject key identifier: 39:FC:6B:C9:7D:70:A5:BE:95:4B:4A:62:94:56:EF:53:D7:B3:50:A7
Authority key identifier: 28:7B:50:12:55:17:94:42:74:A1:46:BB:AC:D6:4E:69:1A:20:FA:06
Certificate issuer: /CN=287b50125517944274a146bbacd64e691a20fa06
Certificate serial: 0194BBCE83BDF99C7B5C6331661CFF058D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHtQElUXlEJ0oUa7rNZOaRog-gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/KHtQElUXlEJ0oUa7rNZOaRog-gY.mft
Manifest number: 0CD4
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: KHtQElUXlEJ0oUa7rNZOaRog-gY.crl (hash: l/Oj12efQoSUXuosorP5GcKH+Ov9wPqzMuhOEd3Py1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:83:bd:f9:9c:7b:5c:63:31:66:1c:ff:05:8d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287b50125517944274a146bbacd64e691a20fa06
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=39fc6bc97d70a5be954b4a629456ef53d7b350a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:a5:dd:3e:79:5d:92:92:2a:57:80:06:ae:
0d:e6:ff:72:89:fa:a8:22:a1:04:d8:7a:46:f3:d6:
80:a0:a6:45:4e:ab:52:01:72:a2:88:92:5a:94:fd:
41:82:95:e9:4e:aa:2f:84:0d:f9:0e:bd:af:4a:bf:
ed:e9:7e:40:cc:8f:c5:70:9d:cc:fd:9a:82:27:69:
4c:a9:84:f2:17:70:c7:10:f8:5c:fe:27:d6:bd:8d:
20:7c:0b:26:5a:30:b7:a2:9b:0c:6a:c5:42:dc:37:
a5:14:d2:9d:ab:99:1c:b2:f7:19:b5:e6:51:2a:74:
53:d5:b5:23:8a:51:94:01:8d:06:32:ed:ff:7a:cf:
79:40:b7:f5:b5:93:e2:3a:d4:13:72:f8:26:d8:73:
da:f9:f7:23:77:f1:a7:3a:00:b0:af:5f:d2:3e:de:
58:4b:95:9e:0b:9b:fa:59:f4:79:92:3d:3d:ee:2e:
f4:2b:3b:63:a6:ee:6d:e1:61:ce:68:6f:ea:6a:20:
74:4a:83:9b:67:89:b8:f3:d5:f0:04:6f:f3:05:df:
54:41:c5:f8:5d:90:fa:98:2b:16:de:c4:8e:87:c7:
8d:39:8f:13:0b:e2:85:ee:85:de:09:2e:03:7a:d6:
c9:19:34:61:5e:61:3e:31:ff:06:01:1d:e9:9a:70:
2f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FC:6B:C9:7D:70:A5:BE:95:4B:4A:62:94:56:EF:53:D7:B3:50:A7
X509v3 Authority Key Identifier:
keyid:28:7B:50:12:55:17:94:42:74:A1:46:BB:AC:D6:4E:69:1A:20:FA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHtQElUXlEJ0oUa7rNZOaRog-gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/KHtQElUXlEJ0oUa7rNZOaRog-gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/KHtQElUXlEJ0oUa7rNZOaRog-gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1f:64:92:f4:04:9e:ef:7d:1f:ab:47:c8:cb:8b:a9:db:2d:
0d:c5:74:8f:bb:98:f4:b2:8c:34:0f:38:4b:c9:36:d1:24:74:
0b:b8:ee:18:f9:d0:97:23:5a:bf:18:a9:8b:e2:0c:8f:57:3d:
67:03:bd:1c:38:82:11:a7:ef:bc:68:22:b8:50:a0:7f:3e:c4:
52:96:d2:2a:44:23:c7:13:73:ca:f5:b1:8f:59:c2:7c:4c:5f:
8f:9e:ec:6c:e1:0a:28:86:23:b3:bf:c2:1c:dc:b1:f3:12:4c:
7d:6f:6d:58:98:e2:e5:9a:19:a0:ab:68:a7:61:c6:47:4f:7c:
ea:0b:3f:3e:47:31:65:cd:7a:1d:ee:ff:3c:0b:be:ee:7b:3e:
81:72:64:cd:32:5f:f4:9f:80:d8:82:f3:08:bd:b3:9e:7f:f4:
22:e5:59:58:a8:99:a9:c6:bb:d7:e4:a9:86:47:73:e0:10:18:
2e:ff:24:5c:0c:cb:f0:f1:04:cf:c0:5b:dd:28:ca:5a:78:2e:
c7:da:7f:63:18:bb:8e:40:ac:7b:6c:a3:aa:c3:fb:c7:86:08:
40:b5:e5:66:66:56:2c:fa:05:16:21:a4:56:f7:69:fc:95:3a:
3b:5c:e2:b9:f5:c3:56:a9:f9:55:3b:0b:47:02:cf:ab:67:c3:
e7:2f:5f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:46 2025 by rpki-client