Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
File: K1ATo25hvsQKEqDkHEjxkYYwca8.mft (raw, json)
Hash identifier: JkzqZen9GucwcdaaD/G3qM7ITgzP+7K1g5LUmFGo4hU=
Subject key identifier: 5F:2F:AA:7B:E0:9E:DD:CF:A6:7F:FB:3E:75:87:90:D6:A3:61:6A:A0
Authority key identifier: 2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
Certificate issuer: /CN=2b5013a36e61bec40a12a0e41c48f191863071af
Certificate serial: 0194BBCE04BCE1ACCEDC2043CC6CB20FBB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: K1ATo25hvsQKEqDkHEjxkYYwca8.crl (hash: qyJbf8KzArf0xs/ct6tokpCsYpvi4S3qAmDPvUyR+BQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:04:bc:e1:ac:ce:dc:20:43:cc:6c:b2:0f:bb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5013a36e61bec40a12a0e41c48f191863071af
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=5f2faa7be09eddcfa67ffb3e758790d6a3616aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:54:d7:03:fb:47:7a:b2:bc:9d:7f:d0:d4:
9e:5a:c5:81:fb:79:54:c6:75:80:e1:9a:d8:dd:7f:
6f:30:7a:2b:4d:a0:40:17:f2:1e:ba:b4:d5:cb:a3:
db:10:35:df:3e:ba:cc:ef:37:11:ff:c9:c5:67:77:
28:83:ab:07:a8:4e:9e:2c:5e:fe:46:42:62:e3:a8:
1d:92:f2:9b:df:15:0e:fa:b8:2d:b5:10:a6:07:fc:
59:b3:d2:0c:65:f2:a6:cd:ff:bb:1c:6f:ec:03:3e:
b5:cd:82:0a:aa:36:4e:5d:81:7e:ee:7e:85:63:7f:
5b:72:1b:02:a4:e0:31:a7:f9:3d:c5:97:31:97:53:
9c:39:67:70:fb:f5:8c:58:73:dc:ab:5b:bb:b6:e6:
22:da:40:aa:0a:b3:b0:4d:71:f5:36:79:12:43:f6:
90:22:44:e9:5f:f3:10:a0:cb:65:6e:bb:b3:8d:d9:
ad:d9:45:1c:1a:46:4d:92:cb:6c:d4:ab:65:27:d8:
80:d3:86:49:6b:82:a8:15:6f:ec:f5:34:b0:2c:5c:
b8:9c:3a:e5:89:11:cf:82:3f:a2:53:32:0a:c3:71:
3c:55:9f:f0:e9:80:ba:7f:20:a9:b7:03:e7:8e:49:
94:94:b5:57:40:36:94:5b:3e:62:fa:77:91:49:ce:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2F:AA:7B:E0:9E:DD:CF:A6:7F:FB:3E:75:87:90:D6:A3:61:6A:A0
X509v3 Authority Key Identifier:
keyid:2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:68:23:62:3b:7a:c4:74:16:0d:c4:89:9b:3b:cb:66:60:07:
d6:95:99:8e:17:bf:7e:26:9d:f7:4e:a6:d5:10:3c:0f:96:b4:
6f:ed:04:8f:c8:5f:0e:57:53:a8:09:bd:c9:e9:69:16:83:97:
e9:c7:a5:aa:77:39:90:a7:18:05:7c:b0:da:cf:a3:2d:50:2d:
95:86:9a:a9:2f:99:ec:3f:38:28:37:c6:e6:75:7d:b2:ed:0a:
e6:f8:9d:cc:7a:e4:2f:a4:58:11:f6:45:cd:52:43:ce:0d:18:
cb:41:e1:c5:22:bb:47:a4:fb:21:9b:ab:ec:05:17:17:16:c7:
7a:99:d7:bc:4a:b3:d5:b5:12:e2:16:c1:4b:9e:ab:d6:c6:60:
1f:93:20:e4:82:dc:35:37:4d:78:3f:d3:34:ff:cd:3b:27:fd:
99:6b:82:35:e7:cb:96:04:cb:5a:01:17:65:13:6d:03:b7:fa:
7f:f2:ec:ac:08:e8:cb:88:cd:47:6e:80:59:e7:f4:29:b6:fc:
04:42:04:96:b4:4b:3b:10:90:18:47:22:3a:77:81:44:d7:3a:
d3:3b:2d:b6:44:71:75:78:9f:96:92:35:30:5a:5b:f1:73:8c:
38:9b:67:b4:0c:ce:14:ed:37:80:b6:a8:1c:75:a8:7b:af:a6:
f6:fc:96:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:56 2025 by rpki-client