Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
File: k2BVYMsfU9aYunp4WwLySOoqLHs.mft (raw, json)
Hash identifier: 3Ql8lwYfIPrsFQkiZ1oApLdtPK2cbWER04kJ23WHhTA=
Subject key identifier: 83:FD:9A:32:7D:05:C9:2D:FE:2F:FD:B3:FD:70:27:FD:E4:24:4F:E2
Authority key identifier: 93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
Certificate issuer: /CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Certificate serial: 0194BD17724794190E0806F093251062AC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
Manifest number: 11E6
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: k2BVYMsfU9aYunp4WwLySOoqLHs.crl (hash: fq9VV8PqlsneCMHjWamlBh4l9wwadRzB39SNeUSH/wg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:72:47:94:19:0e:08:06:f0:93:25:10:62:ac:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=83fd9a327d05c92dfe2ffdb3fd7027fde4244fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:46:91:e5:01:c7:93:dd:8b:72:ae:f2:15:
a7:35:5e:70:92:80:b8:88:f1:3a:11:9e:3f:bb:18:
df:85:27:3c:37:90:6b:ef:ee:75:f1:d2:f0:b3:74:
6f:25:7f:23:26:10:e6:fa:85:8c:17:5b:68:93:76:
8a:37:97:6d:7c:dc:ea:81:95:61:71:a6:70:6c:14:
a7:35:37:3d:52:ee:aa:76:63:86:ec:4c:8f:d5:d4:
c7:c3:6d:34:a6:c0:c7:6b:69:54:6e:64:f7:75:1d:
1c:a5:13:bf:8f:dd:f5:07:ba:6b:5d:e9:1b:d5:20:
fd:69:70:5c:71:df:31:9c:03:78:6c:e5:be:f1:0a:
30:18:e6:b5:ff:35:c8:d1:7e:d6:2e:6d:8b:4b:c0:
3e:8e:f3:46:e9:a6:27:e6:8e:75:76:79:12:c9:3d:
eb:51:f3:ca:eb:75:db:be:24:f9:2a:ba:8b:78:76:
de:f8:ee:47:45:42:f2:5c:62:7c:2f:29:0f:e6:d3:
d7:e8:77:de:13:c4:8e:ba:a1:dc:19:16:1c:ea:83:
d5:fe:2f:34:f4:8f:ae:e7:ba:8b:bd:25:b7:01:47:
e4:80:09:db:f9:b4:2d:fd:68:45:18:a8:96:8d:0f:
f0:12:ea:b8:d4:f5:dd:2d:a5:47:b7:10:ba:7b:25:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FD:9A:32:7D:05:C9:2D:FE:2F:FD:B3:FD:70:27:FD:E4:24:4F:E2
X509v3 Authority Key Identifier:
keyid:93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cb:54:82:3b:6b:31:75:b7:ce:fb:df:3a:3e:68:39:17:1f:
39:db:dc:1f:e8:f6:8d:81:b8:11:a2:a8:ad:37:6f:a1:72:6a:
07:ae:6f:d4:2b:2f:04:0a:d1:b4:b3:87:a2:0c:24:d2:3e:27:
f2:e4:d9:cb:14:0b:aa:3f:fb:e2:f2:0a:68:75:95:69:07:1f:
0e:42:d6:34:5f:84:7f:53:eb:c4:79:ec:6a:8c:ef:55:11:fe:
8f:c1:87:1f:9e:21:c9:66:b0:c3:5c:7d:a4:95:4f:73:d8:c2:
30:ce:5a:45:ae:91:67:d9:10:a0:d3:32:ef:ef:53:0e:96:2f:
1d:3e:5a:75:13:3d:aa:a9:b1:03:c4:63:15:76:b8:34:f0:37:
5b:ab:83:32:92:f0:93:89:a1:1f:05:0a:8c:ec:4c:95:73:d5:
1e:75:44:ad:64:c3:ab:35:62:79:d5:80:0d:31:3a:a0:88:28:
f6:35:ff:37:80:d1:35:5e:6b:35:8d:87:c3:52:5b:24:a5:05:
c6:62:9b:f2:7c:6d:ad:ac:42:9d:a7:2c:f7:be:a5:9f:47:4d:
82:6e:82:e0:91:26:50:1d:87:99:1f:a7:62:5a:5e:b4:8a:70:
c0:00:80:88:f9:03:d1:6c:89:af:1a:44:46:1a:87:47:d0:01:
71:df:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:37 2025 by rpki-client