Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
File: kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft (raw, json)
Hash identifier: qlbsaPRmFkM7wCQXyAW6lKlk1nsNdBAvcJ9rI/9yK+0=
Subject key identifier: 59:9E:56:30:7B:27:0E:80:02:8A:08:62:DC:17:D7:E6:BF:91:4F:72
Authority key identifier: 93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
Certificate issuer: /CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Certificate serial: 0194BC3BF8F1B8E876B17C9939BA108C75B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl (hash: tiWiDVEPxtCmw5uKkYEahdja5pvM0oO2DJ4AdiwVSlc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f8:f1:b8:e8:76:b1:7c:99:39:ba:10:8c:75:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=599e56307b270e80028a0862dc17d7e6bf914f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:98:6d:0b:c5:46:4c:89:d6:2e:2d:9a:46:
23:81:fc:7c:a7:45:a1:7e:12:5e:a8:c6:76:9b:f9:
25:a7:31:cb:f7:3e:2d:d2:7c:fb:aa:e1:e4:f2:62:
d3:ad:4e:44:81:c3:f5:63:66:88:3d:50:4f:59:87:
06:0b:76:c3:74:b0:61:05:1d:94:eb:97:5b:a6:80:
61:a4:23:a0:a0:c9:99:40:54:4a:ef:fa:dc:f7:20:
b0:b9:17:81:a0:3b:ee:54:ec:f1:9e:1f:e5:4a:cf:
63:ac:f4:c0:81:4d:52:c3:60:6a:37:65:30:a7:3c:
12:9d:fc:72:dc:b1:d1:09:25:51:0e:42:06:fc:ef:
3c:fa:11:2f:45:da:9c:af:13:8e:b0:89:92:eb:b1:
ff:7e:24:da:bc:14:7b:79:87:04:72:89:94:f0:ef:
8a:e4:d8:d3:22:a5:cb:38:b5:23:25:90:a7:7b:73:
98:04:d7:bb:e7:34:85:d4:24:fa:da:1b:63:44:e1:
18:64:cc:f7:b9:47:61:52:60:d4:9b:e0:65:fd:91:
a3:79:7b:05:91:6c:8d:b8:8d:51:91:31:e1:bc:de:
26:c0:88:fe:54:f5:4e:d1:7a:2d:66:0a:21:e3:80:
78:a6:7d:de:55:e4:3c:84:61:e8:98:f8:7c:b0:12:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9E:56:30:7B:27:0E:80:02:8A:08:62:DC:17:D7:E6:BF:91:4F:72
X509v3 Authority Key Identifier:
keyid:93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:02:ff:1d:96:f1:a6:37:e0:10:66:bd:62:f3:72:9d:ca:14:
31:4b:16:09:12:46:7a:f3:7c:88:29:11:51:c0:d1:96:c1:3a:
1e:75:62:f7:39:76:35:aa:7b:a0:d6:c6:88:32:b0:8d:af:c8:
c7:61:8f:88:4c:40:65:bc:0a:aa:ee:be:b3:68:2a:36:02:6a:
05:4c:79:8d:be:85:ec:97:95:ce:7b:7e:de:06:f7:2d:6a:1f:
10:80:e1:22:5c:b1:25:12:a7:e2:b7:be:bf:7a:84:10:96:b9:
48:16:63:f9:0f:70:1d:b3:f6:a8:09:f1:89:35:ba:be:01:23:
d5:81:ac:cc:bb:ff:3b:d5:1e:37:6f:cc:6c:dc:11:bd:de:e4:
77:cf:d5:35:00:c1:e1:6e:c8:f3:3f:74:f2:d7:bf:af:cc:c9:
5c:eb:b9:be:6d:ac:c6:98:9c:bb:37:77:18:9d:d5:a6:11:f3:
50:b3:8c:af:ad:e4:19:77:67:7f:43:5a:fd:01:11:48:b8:ff:
a5:f2:89:f7:da:32:eb:35:88:0a:6c:9d:a7:19:11:f8:a3:22:
ca:93:b0:d6:0e:35:ee:e7:03:d4:18:88:05:3a:d8:38:0d:ca:
35:9d:2e:f3:44:3e:a8:70:e9:78:ba:1c:c0:50:ae:98:d0:94:
1d:82:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:04 2025 by rpki-client