Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
File: KVYK0P3bQyabfm1bSEMopHbw6mg.mft (raw, json)
Hash identifier: DPrNxJPHQIiTbCzT+Vq11VX5fjqwUiqNVAjmPajdUKA=
Subject key identifier: 17:B8:D0:2D:EB:55:B2:5E:62:E9:9E:BE:15:80:93:86:A9:3B:29:E3
Authority key identifier: 29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
Certificate issuer: /CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Certificate serial: 0194BD4E47B1EF20309D02AEBDE47EF6A6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
Manifest number: 0152
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: KVYK0P3bQyabfm1bSEMopHbw6mg.crl (hash: HzL+B9dFJ96b9ypYW4k+AOpAgxlrS0Ow7rvaBBj0mmk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:47:b1:ef:20:30:9d:02:ae:bd:e4:7e:f6:a6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=17b8d02deb55b25e62e99ebe15809386a93b29e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:e1:f3:7b:09:04:dc:67:4a:55:97:a5:7f:
c0:c3:c3:73:7f:01:a2:c2:8d:80:93:ea:ee:60:5d:
fc:ec:df:83:af:de:ff:88:72:c0:e8:93:d0:3d:49:
bb:b4:11:d9:84:44:6a:1c:a7:5f:39:be:b5:a6:4f:
d3:cb:8e:b0:9d:bf:c3:3f:49:65:08:f1:3e:4f:3d:
b3:1d:2b:df:51:4d:69:7d:9e:8e:79:e9:b0:0a:24:
fe:a0:5f:19:dd:5b:de:1a:e2:04:20:9a:2c:03:0b:
8f:84:ee:56:f8:76:4a:cf:71:03:1f:3b:fb:46:f8:
bc:fe:d3:d4:a9:8a:68:dd:e2:ee:9c:75:9b:d6:f8:
5b:ca:9b:cc:1a:fd:2e:0c:71:4d:37:23:a2:48:4d:
74:15:2b:63:6f:46:ea:5d:55:86:1e:e1:d1:4d:36:
db:81:17:ab:92:f2:51:1d:83:93:35:9e:4f:62:5d:
6a:e3:81:c3:f3:15:dd:48:38:cc:44:a2:e4:03:45:
89:13:d0:90:33:bb:ec:65:f7:5e:27:42:42:48:78:
73:45:de:a2:45:48:30:fd:d4:ba:c2:1b:0b:24:82:
61:4b:5f:7a:dd:ab:c7:a4:1c:75:dc:ce:89:50:fe:
c7:80:51:f8:9c:60:6b:64:10:64:de:80:62:75:e4:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B8:D0:2D:EB:55:B2:5E:62:E9:9E:BE:15:80:93:86:A9:3B:29:E3
X509v3 Authority Key Identifier:
keyid:29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:13:31:29:d6:48:3e:c5:92:b9:b5:94:37:1e:08:b7:30:d6:
c7:8f:78:e9:a8:e3:8d:7c:2a:e8:43:92:81:bc:46:af:b7:03:
fb:6f:1a:69:b6:6b:76:46:73:d0:17:aa:56:5e:81:ab:8f:6f:
7f:da:d6:05:6f:da:88:15:6b:33:b3:11:13:38:43:b1:09:0b:
a0:da:60:2b:4a:c7:33:63:d1:32:5a:64:7b:e3:cc:be:1d:a1:
b8:54:be:af:ac:2d:d7:b2:77:ec:3d:a3:24:d4:c1:a0:9b:f4:
10:2a:ff:79:2f:46:f3:03:e7:28:a8:af:5a:e3:c7:67:6c:e6:
a1:4f:af:85:e9:7e:41:ca:fd:9e:96:a9:8c:6b:a9:dc:bd:2a:
ef:fb:88:50:fa:0c:d3:8c:70:02:c6:0a:fb:bf:7f:49:d6:95:
81:e2:bd:b2:9e:05:24:80:b3:16:ef:45:45:02:d7:15:e6:74:
e8:f1:23:2c:30:70:59:1d:c0:98:52:5e:2f:7d:83:8f:82:2b:
ea:57:96:2f:0a:c7:77:ed:10:dc:dc:0f:53:3a:82:bb:1f:d4:
a4:4e:c5:27:60:6d:8e:11:d9:10:6f:00:98:e1:54:c0:38:7e:
3e:5c:ec:6b:f4:60:15:2c:8b:02:41:bc:4a:cb:25:b0:f8:a8:
be:50:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:26:09 2025 by rpki-client