Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
File: KMWxDr1MOSkgFDB-h_prHJtCFn0.mft (raw, json)
Hash identifier: 2+JjELpU0ZPDhtdj3dsbXrEpvgqfWx9bXMwJxH8xkes=
Subject key identifier: 58:20:38:71:44:4B:C1:18:C6:BF:CC:24:D0:09:DB:1F:BE:47:C8:D6
Authority key identifier: 28:C5:B1:0E:BD:4C:39:29:20:14:30:7E:87:FA:6B:1C:9B:42:16:7D
Certificate issuer: /CN=28c5b10ebd4c39292014307e87fa6b1c9b42167d
Certificate serial: 0194BBCEA2C8C9F249B12728EDD23D84EAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
Manifest number: 04C9
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: KMWxDr1MOSkgFDB-h_prHJtCFn0.crl (hash: XBePC3krkkNVxedpaXrxy6WAKCZulbwsQ/t2lpUoLWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a2:c8:c9:f2:49:b1:27:28:ed:d2:3d:84:ea:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c5b10ebd4c39292014307e87fa6b1c9b42167d
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=58203871444bc118c6bfcc24d009db1fbe47c8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:cb:d8:5f:64:37:75:94:19:f0:09:d6:df:
e8:bf:d8:11:e8:1b:cc:6d:8c:2d:16:78:83:37:cd:
ca:c9:da:7f:08:91:b0:58:c0:37:1c:84:71:1b:49:
5b:ef:2b:ff:60:a9:4a:b7:c8:fd:72:8c:d5:41:c0:
2d:2e:d8:4b:7b:cc:1d:92:87:1a:df:6b:ad:56:4a:
4b:6d:58:32:ed:6d:7f:ba:7e:9a:6d:9c:9d:84:cb:
64:27:1e:ba:52:eb:74:8f:22:be:dc:a9:2f:9a:27:
f4:3d:6d:cc:82:a4:4c:61:90:f3:2e:35:de:9d:59:
51:35:fc:17:8c:81:ac:e7:43:26:71:18:16:62:74:
b9:cc:2f:d2:3b:55:a3:9e:c0:77:d8:aa:f8:3d:4b:
bd:e1:c0:96:4a:71:7a:71:a3:92:46:ab:50:8a:b2:
6b:db:92:7f:72:ad:c7:16:9d:04:fc:8d:c1:65:37:
9c:bf:a0:ea:f0:23:fe:26:dc:8a:e3:99:e8:54:73:
69:2d:45:95:a8:a6:0b:c2:88:72:f6:6a:3c:f7:81:
99:f1:4f:fa:3f:1e:e6:8f:a1:e0:bf:96:b5:f6:f5:
79:84:16:f4:03:85:27:f4:ee:81:da:45:92:06:1c:
d7:20:be:a8:ec:30:0a:27:ed:9c:d4:5c:fe:f2:b8:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:20:38:71:44:4B:C1:18:C6:BF:CC:24:D0:09:DB:1F:BE:47:C8:D6
X509v3 Authority Key Identifier:
keyid:28:C5:B1:0E:BD:4C:39:29:20:14:30:7E:87:FA:6B:1C:9B:42:16:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f0:cf:ed:55:5d:37:73:d0:b7:43:71:23:60:57:5e:7b:bd:
54:50:8f:51:be:c7:e0:85:24:08:9f:4d:f9:97:a4:0e:f5:c3:
f1:d2:fb:7d:9b:15:86:4c:b1:5d:f0:b2:5a:ee:08:df:53:38:
16:29:5b:d9:ad:ab:e9:b4:8e:92:d8:5c:37:ee:bd:91:8e:5a:
d4:71:f9:3f:22:0d:f7:97:b2:e3:b2:1e:ab:ed:24:19:fa:f8:
26:ce:3d:0d:36:e9:6f:f9:a5:30:25:1a:de:06:4f:56:45:09:
8a:f8:95:ff:60:f1:b4:bc:11:c5:9d:85:af:5a:65:f2:27:76:
8b:a0:cc:dd:1f:4f:ba:2e:57:5a:c6:24:bc:bb:98:86:ac:e0:
64:d7:a0:54:a8:4a:ef:39:0f:f9:e7:b1:5b:1a:ce:b7:7a:7b:
e2:42:45:15:c1:67:85:0b:8d:3d:11:be:8a:d5:06:18:07:63:
0b:80:3c:02:db:df:94:dc:4c:2e:ff:b4:3b:92:1b:2b:1d:21:
8c:ae:a4:d3:6e:3f:87:31:56:49:6f:99:42:76:26:ae:07:e6:
91:85:bd:5f:2b:c0:95:4f:34:ea:81:47:b0:49:78:db:8a:7c:
8f:fe:d6:85:77:bf:a6:ab:c8:1a:2f:df:fd:ae:fe:bb:d7:b0:
10:46:20:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:38 2025 by rpki-client