Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.mft
File: KY2bT7TP4nih65-iA1oInEwlaFg.mft (raw, json)
Hash identifier: kC38KsMLw57E+B18hiyFA0TmNXb1pNLYvLKiEq0sfKo=
Subject key identifier: 95:0E:7A:08:98:12:14:AA:01:FD:C8:1F:4B:E5:33:AD:30:F0:B5:2A
Authority key identifier: 29:8D:9B:4F:B4:CF:E2:78:A1:EB:9F:A2:03:5A:08:9C:4C:25:68:58
Certificate issuer: /CN=298d9b4fb4cfe278a1eb9fa2035a089c4c256858
Certificate serial: 0194BD178719C464694A3556A9C3882B4CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KY2bT7TP4nih65-iA1oInEwlaFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.mft
Manifest number: 09B0
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: KY2bT7TP4nih65-iA1oInEwlaFg.crl (hash: m0VniVjBxqLA8z8p4ZyTQfsl3hjuJQAtfNTl1cva+i8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:87:19:c4:64:69:4a:35:56:a9:c3:88:2b:4c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298d9b4fb4cfe278a1eb9fa2035a089c4c256858
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=950e7a08981214aa01fdc81f4be533ad30f0b52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:13:91:6c:9b:55:52:2d:0e:c3:a1:7f:43:
31:10:71:18:8f:36:32:ba:81:92:ef:0a:1c:c1:5d:
32:e0:d8:e3:af:be:7b:e8:24:72:66:d8:91:c0:f4:
8f:cb:52:8d:ab:4e:74:2e:74:50:f2:e5:21:97:01:
4a:dc:f0:cb:91:7e:0b:78:ab:89:c2:c6:29:59:1b:
f6:75:40:4d:4f:8d:9f:10:cf:25:df:dd:bc:22:cc:
f6:cb:19:4e:51:a1:aa:a0:b3:a8:3a:2c:52:db:27:
83:39:68:16:f9:f1:b4:b6:7c:f5:49:f0:77:86:05:
1a:41:f7:3a:2d:09:37:df:68:20:e6:7b:5c:9a:93:
5b:b9:35:8f:e0:db:7b:95:90:3f:b9:60:d9:02:2f:
50:68:2c:d3:2c:d9:d3:28:9d:f3:0f:ed:5f:fa:82:
28:02:3e:1f:f0:40:ed:05:91:eb:bc:4d:87:f9:c6:
d7:aa:d5:4d:48:8d:67:1d:84:60:1d:2a:d0:1c:15:
a1:bc:33:f7:05:1c:81:04:0e:60:1d:dc:94:7c:3e:
b7:67:c6:80:3e:93:d1:a5:b9:24:97:7b:a1:80:c3:
40:a3:3c:29:05:f7:ce:fd:3d:be:9d:06:16:15:8b:
7c:4b:e7:a4:84:f3:bf:6c:f5:14:b8:05:c8:9d:1f:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0E:7A:08:98:12:14:AA:01:FD:C8:1F:4B:E5:33:AD:30:F0:B5:2A
X509v3 Authority Key Identifier:
keyid:29:8D:9B:4F:B4:CF:E2:78:A1:EB:9F:A2:03:5A:08:9C:4C:25:68:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KY2bT7TP4nih65-iA1oInEwlaFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e7:99:70:65:0e:c1:0d:76:50:96:3a:dc:97:3b:f4:11:4e:
6e:b3:f2:62:2e:b8:c5:ab:37:9c:2f:e1:e2:68:cb:bb:e2:ce:
fd:f1:90:3b:c5:33:1e:78:1a:00:a8:69:0f:bf:9f:17:1e:1c:
0b:1d:c9:7d:d4:0a:af:b0:8c:a3:7a:f8:48:b9:0e:23:e0:e0:
1e:d9:ec:35:3b:1e:8a:be:c9:79:b5:c3:a1:bd:3b:3d:e6:54:
42:52:8c:cc:c1:61:d2:d5:9e:a7:a1:28:d0:0e:6c:6e:d8:d5:
90:4b:61:f2:89:42:17:b2:10:18:8e:cb:dc:1e:47:cc:4c:7c:
fc:c3:ab:c8:4f:0c:46:82:96:3d:28:9f:c9:eb:9f:b4:81:31:
1b:df:11:67:b6:e5:30:3d:55:65:09:52:e3:13:e6:38:5a:8e:
89:a7:20:32:81:3a:8f:9e:52:bc:f6:e4:f5:fa:a8:6d:48:15:
6f:47:5c:af:1a:70:89:19:fc:ea:b3:52:42:d5:3e:b8:50:a7:
d1:df:21:16:be:a3:fd:b0:5a:6f:bb:20:89:2b:17:70:1c:81:
14:55:12:aa:c6:29:03:f9:a3:68:f1:37:14:c1:a5:32:ec:52:
94:6c:e3:95:79:bf:58:51:f3:6b:bf:6d:78:0e:23:3e:00:27:
3b:85:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:22 2025 by rpki-client