Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
File: KEo1xF93T6_4QkXOEkvcZVx0Uos.mft (raw, json)
Hash identifier: torpdOsL7iGETjrt/uuwLrQIvFBZZzQZTQ3vE4JfRaE=
Subject key identifier: 6D:B9:69:62:14:18:F6:87:7C:FD:95:7C:07:5F:92:0F:C0:5D:03:BE
Authority key identifier: 28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
Certificate issuer: /CN=284a35c45f774faff84245ce124bdc655c74528b
Certificate serial: 0194BC3C1195B7B65C6379DD3C3A7890A776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
Manifest number: 04FB
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: KEo1xF93T6_4QkXOEkvcZVx0Uos.crl (hash: /RgcANm8K58pbfyVYXb0sEoz10lc/2aX2YW5pclw/IQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:11:95:b7:b6:5c:63:79:dd:3c:3a:78:90:a7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284a35c45f774faff84245ce124bdc655c74528b
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=6db969621418f6877cfd957c075f920fc05d03be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:29:f9:d3:3d:17:e5:de:64:a2:5b:b8:cc:
fe:ae:f8:06:e8:18:38:80:5b:a0:0c:10:04:95:ef:
94:f3:9b:47:b4:be:e0:0d:89:9c:f0:db:4f:0d:33:
0a:b8:a1:d7:40:55:3c:85:1d:da:00:83:cf:22:54:
9b:9b:b5:5e:c8:92:25:7d:f6:7c:20:f2:3f:fc:30:
85:fa:ff:07:7f:61:f3:5b:4b:28:f5:2a:70:a5:e9:
fa:24:91:25:32:2d:9d:7f:a8:46:ed:e6:f9:fe:97:
ed:72:36:21:29:da:ae:89:35:bd:eb:55:fa:95:73:
ad:14:6b:7c:a0:07:92:58:24:44:a5:84:89:94:e9:
9c:89:49:6b:92:4f:80:26:cf:19:65:63:ae:a1:df:
8d:90:10:ae:68:7f:96:4c:ae:ec:4e:c5:d0:65:fc:
d0:63:b5:3f:cc:b2:a0:da:75:48:cf:c2:eb:ed:8e:
f8:bf:27:fe:53:33:f8:92:d3:2f:2f:a0:e4:a1:b7:
6a:e1:27:ff:d8:ba:ed:e4:2c:a7:5f:ee:8e:d7:70:
eb:33:ed:68:31:7b:27:59:78:30:e4:e8:53:fc:93:
f4:cd:d1:56:d5:d4:2d:b6:f3:ca:ee:00:78:b5:ae:
78:59:ca:b2:e2:b2:f5:3c:e7:95:0f:1a:5e:56:a7:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B9:69:62:14:18:F6:87:7C:FD:95:7C:07:5F:92:0F:C0:5D:03:BE
X509v3 Authority Key Identifier:
keyid:28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e2:86:f4:92:44:05:16:b6:12:3e:8d:22:f0:28:05:9a:a0:
87:75:2d:b1:cb:15:f1:79:8b:9f:f9:4b:67:7a:94:8d:ab:e6:
31:34:44:a1:eb:e1:ad:41:7d:4c:29:16:46:28:1e:1d:28:6e:
a1:17:a7:0e:c1:40:33:19:c2:ee:2f:ab:e3:58:b8:db:42:49:
9e:f3:e6:7a:f9:a1:36:45:c7:d7:43:ad:84:74:4a:9f:f3:38:
c5:2d:21:91:8a:1b:b9:71:07:a4:2e:11:4f:3b:d3:0a:4c:a7:
50:06:4e:e8:bf:b6:38:76:4d:d7:6c:0c:2a:c3:f9:fe:85:e0:
50:b0:4e:45:36:3e:15:1b:2e:ad:a9:25:13:45:3e:e1:23:47:
32:47:ef:4b:9a:54:f8:d9:35:1b:f0:aa:75:9f:ef:9e:8f:b1:
78:5d:92:9a:17:33:e1:16:f6:03:09:5e:c9:54:c6:87:87:3f:
c3:90:1b:3e:41:8d:ea:49:2a:af:f8:1a:ad:ce:24:2c:0b:e3:
f3:b2:15:19:78:3d:7d:95:89:23:14:9d:ad:23:da:05:5e:9f:
33:2d:41:f3:fd:e6:d9:6b:b4:b6:1c:01:d4:b0:ec:3e:9e:d3:
62:61:c1:ff:b7:0b:b7:37:03:d2:80:64:03:37:77:32:ef:48:
2c:33:f0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:48 2025 by rpki-client