Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File: kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier: ep4HeVXQAuAwEws7c9BbcYajbkEFL4qn1pba16xVTjo=
Subject key identifier: B8:13:1B:89:C3:38:CF:7D:31:C4:98:9C:D3:C4:79:8D:D2:BE:54:52
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer: /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial: 0194BC3C089DDFC603CC77C72F2D232D2904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: 7M3UlXvNDGyud7UsLwwJuElmtQTerrEhOaUvc1TxqT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:08:9d:df:c6:03:cc:77:c7:2f:2d:23:2d:29:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=b8131b89c338cf7d31c4989cd3c4798dd2be5452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:04:87:5d:44:01:b2:f5:9f:42:e1:91:68:2a:
6a:23:ed:9c:3a:4b:c9:f8:71:b2:6c:43:3b:19:80:
ec:8d:41:e0:64:49:d4:b3:6d:c5:e1:c9:2a:cc:9a:
60:1f:b8:ca:f2:31:94:9e:60:d2:d1:97:1f:b3:87:
69:f7:ff:d1:d7:25:c7:54:49:3d:3b:62:d5:13:60:
e4:4b:19:a5:75:25:fd:3d:de:99:2a:98:24:28:49:
ca:6c:21:ad:4a:6b:d6:1e:04:89:73:cc:42:a1:57:
bc:ea:af:6c:97:ae:34:72:dd:6f:49:cb:4e:b7:07:
15:84:b6:de:97:75:b8:a5:87:55:b9:91:2e:d7:29:
fe:e3:bc:2e:35:85:9f:c9:61:64:d7:ec:25:0e:e8:
90:57:02:2e:ba:32:98:29:21:d8:92:f3:df:8d:46:
5b:0a:f6:c5:8a:9d:b4:2b:18:82:88:0e:56:16:94:
9f:d2:71:c8:44:92:01:b8:3b:d5:4f:64:30:e1:a7:
7f:65:6c:9d:e9:06:9f:a6:97:6e:49:e2:0f:32:e4:
0e:80:8e:a4:02:14:12:59:b6:39:65:41:49:05:15:
d7:94:c4:6b:10:16:07:c6:aa:7a:2c:11:0b:89:a8:
ff:37:87:27:a5:cf:9b:a5:61:01:27:4a:61:ff:ff:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:13:1B:89:C3:38:CF:7D:31:C4:98:9C:D3:C4:79:8D:D2:BE:54:52
X509v3 Authority Key Identifier:
keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d2:86:3d:bf:9d:53:1a:7d:7b:25:3e:02:0a:e3:8f:09:19:
66:58:ac:7a:38:a0:97:89:72:8a:18:1c:03:1a:f4:bf:b0:e8:
72:0c:db:19:c4:16:d5:ca:22:60:10:52:29:e0:5a:c9:b1:ea:
39:d3:54:fb:a6:54:a5:5b:f5:42:0d:15:62:f9:fe:22:a3:77:
2f:22:95:d7:fc:1f:96:a4:67:78:4d:d5:33:07:ac:81:37:e5:
25:a2:b4:a3:d4:aa:ff:cc:52:11:ce:b9:a6:33:13:cb:bc:f7:
5c:f6:30:d8:c8:aa:87:c4:52:9f:9e:9c:c5:4c:99:17:c5:75:
ff:01:8e:2f:15:22:d8:1c:fb:10:cf:27:8a:2b:03:c3:15:80:
81:24:e8:95:69:32:f8:41:cd:3e:e8:bc:be:d9:fc:31:61:75:
9b:26:de:ed:50:9b:a5:d3:17:39:f7:c2:70:f2:a6:2d:90:95:
1b:23:8b:08:44:ab:ea:3e:6d:71:55:8b:d8:7c:e5:97:80:e8:
15:8d:58:d3:0d:78:d7:c2:2a:93:e9:b0:93:d7:32:40:92:5d:
60:1a:cc:eb:eb:94:51:3f:98:36:62:7d:2b:04:1e:f9:cd:f4:
a2:3a:d9:e8:e2:30:21:8a:f2:0e:3d:00:05:3c:19:8c:2f:ac:
28:87:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:38 2025 by rpki-client