Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File: K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier: jrTd/Sn1B2lBoGPYWvT86FMJgS0h+eTUQa30nb+Y8UU=
Subject key identifier: F1:EE:94:19:B5:2A:B7:6D:DE:28:82:EA:8F:17:68:AD:F1:49:62:F9
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer: /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial: 0194BC3C90A5647A1104705B709C4DE5C6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number: 0955
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: 7Df7wWhG4ruKhSS9W1MIJUyxIdrBBOWW5R9FWax4X9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:90:a5:64:7a:11:04:70:5b:70:9c:4d:e5:c6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=f1ee9419b52ab76dde2882ea8f1768adf14962f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:97:6b:10:d2:9d:2c:c8:53:37:16:66:db:
b4:04:37:6f:d1:51:26:7c:b1:e7:ac:6a:a1:bd:c9:
79:ab:b4:b2:1b:ba:94:2d:c7:bf:97:5f:b2:c7:10:
4c:d8:54:13:5f:81:03:d8:92:66:8e:f4:8b:6f:ef:
d7:85:cf:50:38:63:2e:fd:ee:8e:13:2c:b3:53:b0:
60:d3:98:02:23:fa:61:f7:ce:ed:82:28:c3:dc:dd:
db:68:03:fe:a0:93:75:11:4a:7c:35:6d:f8:c6:eb:
f3:2c:51:97:9c:06:4f:21:76:c9:40:56:41:41:83:
1a:3b:b6:cd:eb:cd:f3:37:16:3d:d4:96:74:4b:ae:
26:54:58:09:ca:cb:e3:ef:c5:85:a6:fe:b5:3a:c6:
66:0e:4e:db:76:76:e8:a8:0f:1c:8e:ca:2d:0e:a9:
82:72:01:db:dd:38:d1:0b:d7:31:3b:bd:91:88:0c:
a9:97:d7:f6:d0:9a:f5:42:c6:ed:6e:7d:e9:48:c9:
dc:44:20:5e:15:3e:73:5c:93:16:eb:f4:1a:4a:e0:
ce:f2:dd:59:58:4b:cd:a4:11:b3:f0:e9:56:0d:64:
1b:7a:27:3d:7b:db:0d:c6:8f:0a:a5:d8:c5:15:77:
8b:8e:44:ca:c7:d9:db:43:2e:25:cc:f2:fa:b7:f7:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EE:94:19:B5:2A:B7:6D:DE:28:82:EA:8F:17:68:AD:F1:49:62:F9
X509v3 Authority Key Identifier:
keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b4:a0:72:f5:6e:0a:57:73:9c:3c:52:4b:96:14:9d:60:48:
0e:7a:72:bb:6a:a5:22:de:a1:11:be:b0:76:40:c4:5f:a6:5a:
70:c6:bf:68:d7:77:3c:09:02:c9:93:01:e9:8e:d1:cf:52:3d:
ef:8a:49:ea:84:e2:51:43:fb:03:ef:5d:43:d3:bc:81:f7:c3:
3c:4a:14:20:6b:f2:34:03:97:30:bc:91:90:5f:52:3b:59:18:
60:26:28:85:4d:22:ed:e4:1a:56:70:e8:08:cf:98:1f:06:65:
3a:e5:28:54:a8:11:a6:a0:c2:11:5c:32:dc:3b:e8:11:55:aa:
b1:bd:03:2b:97:11:fa:89:93:69:bf:de:ca:c5:12:9c:7e:9a:
dc:ad:bc:43:3f:b3:f0:a9:d9:b8:58:b8:9f:b6:54:00:e4:39:
86:b0:f7:40:c2:56:40:48:b6:7b:82:de:08:d4:8c:06:ff:9f:
a0:7d:3f:e5:a1:a5:5b:c6:9e:be:ff:9d:b7:a3:77:96:92:5c:
00:b1:64:5c:30:ba:2a:a9:55:64:f8:07:94:e8:93:eb:96:23:
0e:12:e3:3f:9b:30:1e:c1:51:5c:67:9f:fe:76:5f:b1:57:26:
14:03:4a:fc:7a:cd:d6:a3:c2:30:ac:bd:ec:5d:8c:35:4a:0b:
3e:06:83:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:21:04 2025 by rpki-client