Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
File: Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft (raw, json)
Hash identifier: 3j5F7sS+bNU6yjkG6Ps+HmVXJtKkQAW82Wwdbcq5MPk=
Subject key identifier: 2F:2A:AE:08:F3:DF:38:CE:AA:D8:FB:66:5F:F9:9C:AB:C4:EA:8F:FF
Authority key identifier: 2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC
Certificate issuer: /CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
Certificate serial: 0194BBCE6FDCFEF9957D1ABCFD69C9A3EB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
Manifest number: 0CDF
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl (hash: 4F3jtzt6+ahgcdo9vGvjqvzUa2oLzidEfhJ1AlZbcp0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6f:dc:fe:f9:95:7d:1a:bc:fd:69:c9:a3:eb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4f2af8437e7193d57885fb63bdb03c03ba19bc
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=2f2aae08f3df38ceaad8fb665ff99cabc4ea8fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:98:3d:7b:dd:9c:8f:bc:c7:76:83:0d:ba:
18:df:4f:cf:e9:9e:e4:aa:0a:d7:bb:50:d4:bc:b2:
07:49:9d:7f:b6:06:ec:7c:57:3e:af:86:42:fd:47:
23:58:99:48:b9:7f:6d:f1:14:25:56:e1:41:cc:b7:
b4:19:33:f9:c5:3e:f5:13:c4:1e:a8:fd:c1:8b:1f:
1c:a8:b9:6e:ea:f2:7d:ea:a9:ae:c1:c0:7d:31:4a:
c7:bd:18:9c:46:38:1a:7b:2f:af:a3:95:04:90:e4:
1d:46:aa:6a:9f:2d:7f:d7:9b:01:41:c4:84:b9:a5:
49:58:90:df:0c:aa:bd:11:b6:bc:d1:a5:75:af:8b:
a1:6c:00:b0:96:62:eb:e3:49:85:1c:6c:2a:be:f8:
48:d9:5f:52:7f:93:6e:7f:52:b2:c9:4d:11:c1:d7:
d0:9f:65:e9:d2:ae:fc:76:1a:6b:05:3b:d7:cb:09:
49:9b:80:27:68:36:8e:21:37:85:67:f6:3f:f1:a6:
23:3e:29:e0:1f:ff:e3:72:a8:56:d2:de:2b:5e:3f:
ec:f4:8a:15:ac:81:7a:ab:31:b6:94:a7:01:10:d4:
17:a6:83:44:b0:09:2d:12:04:3d:33:4f:1e:de:14:
7a:20:11:f3:86:92:e0:14:d2:cf:24:25:eb:68:b0:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2A:AE:08:F3:DF:38:CE:AA:D8:FB:66:5F:F9:9C:AB:C4:EA:8F:FF
X509v3 Authority Key Identifier:
keyid:2A:4F:2A:F8:43:7E:71:93:D5:78:85:FB:63:BD:B0:3C:03:BA:19:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e718db-2e45-4c0c-973f-dfa538428e8f/1/Kk8q-EN-cZPVeIX7Y72wPAO6Gbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4e:0f:83:fa:48:68:2a:65:5b:27:fe:37:36:78:1e:44:39:
66:d1:2c:14:4d:0a:3c:d0:a0:5c:a5:94:ff:5a:7f:8e:05:34:
7a:c2:cc:cc:ba:7a:0f:df:42:64:83:d9:60:dd:57:73:0a:50:
81:0e:44:bc:a9:fc:02:da:58:eb:a6:a2:7b:75:38:d7:f5:9a:
2c:ac:c5:ec:cd:62:ed:4a:a0:c8:49:28:85:6d:45:8c:ab:7e:
91:11:22:de:e5:52:aa:15:85:bf:65:83:4c:87:d6:0c:b8:35:
39:59:83:0b:c8:15:4e:dc:af:f8:03:89:9e:2a:d7:d8:e5:7c:
5b:a2:9c:31:e5:23:75:85:6f:85:2e:0b:ee:7b:48:23:d2:6a:
9c:26:5d:6b:c9:c4:e8:b0:a7:c4:e0:a3:1a:53:3c:73:bc:e0:
86:05:ae:10:d2:5f:fa:8a:fa:60:22:74:0f:e5:a4:23:a3:25:
26:f1:56:6d:37:cf:3e:1b:a0:e3:b7:a6:d2:9f:0d:8f:fb:7e:
e6:6a:8b:71:66:9e:5d:ec:e9:8f:6a:c2:52:75:ea:d9:cf:ae:
66:70:5b:e4:db:47:4f:2a:6f:99:8d:28:f5:b8:c5:3d:81:a2:
5c:f4:f3:5f:7a:b7:eb:b8:e0:29:8b:56:23:45:3b:f9:39:48:
9a:16:60:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:11 2025 by rpki-client