Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
File: K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json)
Hash identifier: 23tyOUg264+VftrsmbEk4vsosx/Nncq86d78++aR6Sg=
Subject key identifier: 3A:0C:3E:98:FE:3E:20:60:0B:33:D2:BD:3A:78:C9:55:24:75:64:A5
Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
Certificate issuer: /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Certificate serial: 0194BC72A707E8D19FB2B5BBF025B0BC05AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
Manifest number: 10DB
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: mWDC8i8vj62WxXyhOgMbuiw4uvG7yfgDlPRd3z6wY1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a7:07:e8:d1:9f:b2:b5:bb:f0:25:b0:bc:05:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=3a0c3e98fe3e20600b33d2bd3a78c955247564a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:54:9a:18:f2:29:69:3a:6b:8e:a1:82:67:
fe:7a:7c:b1:38:0c:d8:f6:00:0f:32:01:5e:cc:9f:
a9:5a:c9:e9:94:7f:ce:13:ea:99:50:aa:87:d9:6a:
6a:ca:0b:18:f7:7c:8a:59:b1:73:c4:d6:93:dc:0a:
4c:01:03:f2:12:52:03:a1:8c:ff:ee:3c:b2:5d:b8:
1b:f2:08:69:b4:0d:0d:d6:ae:78:c7:1c:85:e3:65:
24:b6:08:a9:0f:48:1f:2c:37:fe:b5:1e:3f:a4:61:
1e:67:b5:7c:de:da:d5:11:45:c0:8d:a5:9a:0f:da:
2c:b6:4f:e0:55:be:1b:e2:87:84:2b:ab:92:f8:1b:
94:d1:e4:82:0c:cd:16:76:cc:4c:ef:7e:41:70:e8:
02:cd:b8:74:c4:49:61:ba:53:48:d3:7f:05:b7:c9:
d3:7f:23:b1:58:21:e4:95:4f:02:51:00:b4:a3:bc:
99:0b:f9:9e:3c:d4:b4:99:c3:2c:c5:37:4c:a7:d2:
2d:62:9f:1b:fe:59:cf:f0:38:74:48:9a:10:6e:b4:
cb:65:f4:4d:a6:eb:59:b6:74:7d:84:be:11:64:39:
63:2a:4b:f4:f1:2a:53:8a:c1:41:e5:59:be:93:20:
31:c3:66:d3:27:f8:b6:16:d0:c5:3f:78:61:06:45:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0C:3E:98:FE:3E:20:60:0B:33:D2:BD:3A:78:C9:55:24:75:64:A5
X509v3 Authority Key Identifier:
keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0e:f3:66:fb:2f:f6:1a:14:48:f2:6e:82:10:74:a9:d0:b9:
3b:23:5c:2d:79:49:fc:2a:da:cb:e6:36:ec:02:c3:3c:8f:aa:
6c:55:80:98:20:c7:a2:09:11:26:d0:b8:4d:d8:ab:fc:19:4b:
e2:36:de:2b:4a:71:f6:f4:35:69:dd:28:9c:af:9e:3e:11:0c:
cc:bf:fb:b3:c0:58:95:59:69:45:4c:39:af:2a:92:84:4f:f5:
cb:0a:c8:6d:9a:b6:de:09:3a:80:c9:60:5a:29:c8:9d:ed:ce:
f0:88:17:30:09:0d:89:f7:7b:12:88:5e:f2:4c:c7:3e:49:ff:
37:77:7a:4a:f6:bc:75:b4:62:88:b5:5c:6e:a0:18:8e:48:11:
30:ea:98:a0:15:63:ef:cc:34:dd:06:4e:cb:58:c1:c6:02:8c:
4e:29:9b:99:65:e0:46:21:c4:61:c9:0d:58:6f:e5:00:f7:15:
07:94:d5:29:39:a8:7c:64:36:85:ff:53:c1:be:7b:83:2b:72:
e6:c8:f9:bf:c9:4a:57:b7:61:96:7a:91:f4:7c:c7:41:6a:7f:
d0:27:87:55:57:ce:ad:e6:63:05:ce:e4:c5:a2:21:46:2c:4d:
f6:1c:05:7f:75:b4:09:e6:54:44:f4:45:6c:7f:36:1e:1d:d4:
07:f9:fe:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:15 2025 by rpki-client