Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
File: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft (raw, json)
Hash identifier: RvmHBUvCKzQBq1H7V16OcH9yeVBATeHsD1LjsdMAU6k=
Subject key identifier: 0E:C6:53:89:E0:18:61:4D:1F:DE:3C:81:0B:37:9B:E9:06:14:D8:CD
Authority key identifier: 33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
Certificate issuer: /CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Certificate serial: 0194BC3C228E3A89BAA0C143DC7D31388557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
Manifest number: 0786
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl (hash: c+TlH5P0fNtb6Xf4+aAA2+jSAe37bNhs0hqQ5aVFJMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:22:8e:3a:89:ba:a0:c1:43:dc:7d:31:38:85:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=0ec65389e018614d1fde3c810b379be90614d8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:a6:45:2d:ac:75:f0:4d:f3:0c:19:95:63:
23:c4:5c:85:36:06:9e:a4:06:83:1b:83:d0:d0:61:
b1:fd:f3:25:1c:2e:64:88:22:11:76:bd:b2:f3:48:
bb:60:7d:a7:da:1a:dd:4c:cd:30:94:54:e3:0a:dd:
a0:84:80:b0:4d:0b:ec:65:ef:73:f1:42:a8:0e:b6:
f6:fa:b2:38:46:42:56:bc:f7:8a:49:21:0f:c7:57:
8a:07:10:23:c1:09:8d:c3:f1:73:1a:98:da:fe:f6:
16:f3:18:41:26:84:63:62:de:68:b4:b1:ad:7d:19:
5d:66:47:ec:e7:6a:6d:01:fe:59:b1:66:81:f2:2d:
18:77:da:7d:ba:5c:36:8f:cf:7a:bc:ce:45:9e:56:
31:ae:bd:56:3a:ab:31:c4:11:c7:2c:77:2d:ec:06:
31:96:7c:16:83:d2:b3:87:13:e7:65:d3:a0:f0:95:
77:cb:c8:d5:e8:cc:f2:c8:4e:d8:29:63:59:72:9c:
de:87:26:5e:85:ed:3f:4c:7b:94:77:e9:6c:ab:82:
35:ca:96:df:bb:8a:d5:b0:ee:13:86:e9:38:64:9f:
03:fd:59:44:33:55:a6:a5:50:16:58:99:6b:1a:8c:
53:b5:88:a2:22:ff:62:c2:2d:6d:ed:93:62:3a:dc:
2c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C6:53:89:E0:18:61:4D:1F:DE:3C:81:0B:37:9B:E9:06:14:D8:CD
X509v3 Authority Key Identifier:
keyid:33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6a:1e:07:ab:0e:fa:72:0c:61:53:36:7d:1d:1d:31:e8:2e:
e6:d5:b9:5a:3b:07:ed:65:dd:bd:53:6f:67:20:b2:94:78:da:
be:07:d8:2e:57:d0:67:a9:24:c4:b4:50:7f:72:e7:56:7d:53:
db:9f:7c:eb:f6:e9:d6:b3:6a:77:2b:83:ff:7b:ee:9f:86:1c:
c4:5d:db:dc:2c:9a:37:7e:b1:9b:7b:3c:1b:e7:69:ed:01:98:
89:bf:a2:fa:9a:bf:50:57:4d:c2:a3:e0:c2:72:fc:47:c3:dd:
2d:9c:a8:38:ef:1d:94:e4:96:2c:34:7f:5d:f2:39:59:9c:22:
30:38:32:73:f9:88:94:0e:a2:c6:10:16:cc:05:48:a0:1d:fd:
0b:74:ee:af:bc:0a:74:aa:a3:74:bc:68:0d:e2:d1:dc:73:76:
ff:c6:eb:3f:b3:2c:f0:21:ca:b1:e1:ad:8d:43:43:7f:77:29:
5e:7c:13:14:3f:f0:6a:54:da:b6:08:5b:74:7d:d8:bd:cf:3c:
5a:06:88:a2:0c:c6:da:fc:cd:38:86:e4:d5:e2:78:87:77:1f:
e3:77:7c:12:8f:67:a6:49:af:60:4d:56:97:a6:be:22:de:e8:
12:0b:b7:a0:82:c7:8f:ec:ce:cc:51:6f:25:21:72:77:85:6c:
7f:ca:df:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:16 2025 by rpki-client