Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: /+8cOp7RJ3TV1cmAZv4AJka3gZbgAJpcza2qDNJZKZE=
Subject key identifier: 71:3C:EF:8C:C4:67:A2:C5:66:BD:35:DB:9E:E4:11:DF:84:44:FC:53
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 0194BBCE9FD219676D5E7655AB67EDF9702A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 0D86
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: i37UI1PwpXiTTIsyWw48vf5YIPvuCykUO0qV/kz2U7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9f:d2:19:67:6d:5e:76:55:ab:67:ed:f9:70:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=713cef8cc467a2c566bd35db9ee411df8444fc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:c0:a8:f2:e1:74:ba:2e:96:65:e9:07:57:
5d:87:fa:2e:a8:56:35:3f:d9:16:1e:e4:d2:7a:f6:
b2:45:47:08:94:c7:54:1a:7c:45:d8:f0:8d:43:3e:
43:ff:3a:e0:95:18:98:c3:09:84:3e:b3:2b:51:88:
4b:f4:ce:ad:4c:3a:70:d8:87:af:4e:32:ae:8d:96:
48:83:2b:ae:4c:89:1f:e8:8b:86:84:32:6a:13:b5:
f1:33:e0:f9:16:2f:ff:75:8b:56:78:ce:4c:ec:49:
1d:48:35:07:69:2c:41:cf:bf:68:1e:5d:25:58:89:
0e:fe:34:26:9e:b5:d5:8f:11:5a:fc:3f:80:f1:e7:
73:56:98:d1:ce:94:3f:b6:65:ad:03:9d:1b:1c:ed:
ab:a5:11:c5:b5:59:f0:0f:cd:86:cc:42:30:6a:db:
24:b3:87:95:ab:05:8f:16:aa:b8:41:06:ff:9b:7f:
2d:9a:bf:a2:79:f3:fc:81:82:6f:54:25:7a:13:ec:
d2:6e:a7:1d:7a:79:26:d7:87:87:19:a8:b1:db:e3:
53:fb:70:3b:90:6a:d4:85:ed:1b:16:0b:52:a9:cf:
d2:c0:b9:d0:e2:17:fb:0c:87:cb:bf:d9:f3:cd:f5:
85:03:49:00:8f:c2:a0:94:77:bd:15:b0:b3:08:65:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3C:EF:8C:C4:67:A2:C5:66:BD:35:DB:9E:E4:11:DF:84:44:FC:53
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:df:9f:38:ef:a1:53:d2:7e:98:3a:7f:fd:be:41:73:4b:04:
cf:e6:34:3c:59:a7:72:af:73:6d:f5:30:44:86:83:3d:0f:d9:
0b:5d:f5:11:e2:57:58:26:88:2f:9a:12:7c:de:e3:53:26:92:
06:6b:48:42:43:b7:62:65:70:5d:22:c5:44:0f:f5:8c:d1:5e:
2a:8c:a4:8b:5b:f8:05:dd:74:d8:07:85:cf:38:9c:66:25:41:
2d:84:53:cb:12:e4:d8:07:ba:b6:70:21:82:41:0e:41:be:47:
56:3c:f6:0f:0b:e2:63:a4:0e:34:1f:69:0e:44:8e:e8:be:d7:
8f:80:85:ce:6f:71:7a:7a:d4:3e:ca:16:6c:32:af:c4:fc:17:
5f:8c:ed:71:09:6b:69:2e:13:73:2e:c2:b9:21:e4:34:65:d8:
8f:00:69:fe:92:33:6f:03:f7:de:d7:be:84:ad:51:16:1c:7a:
aa:6f:d9:df:aa:fe:b1:1b:bd:3d:71:27:7f:30:50:de:02:47:
25:77:9d:61:2b:bb:89:3d:25:bb:1f:3c:b9:7c:8b:8d:29:62:
f2:97:0a:4e:9c:78:f7:3d:00:ae:5e:53:84:40:c3:66:01:cc:
64:c0:8a:23:11:a2:85:7c:fd:91:00:6f:c6:38:60:3a:b1:4e:
c2:24:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:09 2025 by rpki-client