Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
File: kyIxLx0huzs4bKOqlzrGzSVLcDk.mft (raw, json)
Hash identifier: Uxj7EdhTtJxLiVlQ4KbicDYFiWrLY6phffXTQPZei9I=
Subject key identifier: 8E:CF:9B:2E:C8:75:22:60:EA:F6:40:67:EF:51:F0:0C:53:4B:7C:FE
Authority key identifier: 93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39
Certificate issuer: /CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039
Certificate serial: 0194BC72F1BE0F0A1B74252C2051C75758EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: kyIxLx0huzs4bKOqlzrGzSVLcDk.crl (hash: J40jyFaiRbgforEq0b4kOztEC4BTqtE0FT631mdDRk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f1:be:0f:0a:1b:74:25:2c:20:51:c7:57:58:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=8ecf9b2ec8752260eaf64067ef51f00c534b7cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:68:6b:53:40:2a:94:4f:23:0c:8e:74:b8:
d0:42:04:ae:a6:2e:e7:6f:a4:a0:8f:f6:4c:ac:a6:
26:e7:97:c5:4c:71:2e:23:2d:eb:ba:3a:b0:c8:2a:
53:0d:77:f9:a3:08:42:a1:ed:3b:18:cd:fa:b0:23:
4a:1c:16:05:24:5d:09:b4:0a:c4:57:17:08:85:8f:
51:6a:a7:21:ee:a9:cf:28:b5:6c:cf:6d:5c:a6:ee:
1b:05:37:30:ab:ed:e8:de:9b:a1:14:cc:5d:32:c6:
7a:3d:e1:cf:15:cd:c9:a0:f9:62:96:ff:2b:e1:a0:
27:5d:e3:d5:70:50:c6:78:13:a2:17:3c:e9:0e:fd:
3f:74:a8:ab:8b:b6:4b:be:b1:c1:b2:bd:ad:d4:c6:
c2:1a:87:cc:1f:65:87:a3:51:2a:53:50:be:11:93:
78:b2:d4:8e:0f:2d:e3:e0:48:4e:19:50:d3:f1:4b:
86:14:1e:b8:62:c3:c5:89:c7:31:52:4e:94:4f:f4:
41:7f:39:53:42:28:27:34:05:05:5c:e9:6e:f4:81:
b7:bc:2e:9c:c9:24:da:51:59:ea:86:24:d3:38:9a:
87:3c:62:2f:62:3e:64:7e:1e:c8:6c:b0:c4:ab:19:
7c:9b:65:c6:0e:a6:8f:8f:f2:ec:6e:8c:e8:39:c0:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CF:9B:2E:C8:75:22:60:EA:F6:40:67:EF:51:F0:0C:53:4B:7C:FE
X509v3 Authority Key Identifier:
keyid:93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:83:05:98:c7:1c:9f:0a:06:50:3c:6e:a7:66:0c:a1:0f:83:
5f:35:63:c6:9e:fa:92:2c:77:77:9d:88:30:3a:5f:38:42:cb:
7a:4d:9e:c4:c6:c5:07:07:ee:59:c9:7c:51:2e:49:5d:65:10:
9b:85:28:29:d6:66:ba:ad:61:0d:3e:04:d6:92:fb:ac:b7:f1:
7e:53:06:7f:67:67:aa:53:f9:cf:79:16:6b:9b:ed:58:af:bf:
f5:07:e4:73:3a:c2:f8:74:79:96:c9:29:1b:e3:38:32:eb:63:
63:8b:14:c4:24:67:42:2a:fb:76:1b:f9:3e:b3:ae:a8:20:38:
8e:ac:4f:c1:11:f9:17:dd:c4:cf:5d:91:86:cd:10:77:20:d3:
b1:5b:6c:d1:77:68:f7:91:d5:1d:fd:1f:f8:67:c8:9a:e2:b7:
16:6c:ed:c2:b4:2a:ae:d6:13:8a:09:91:06:d4:a4:e1:53:e8:
32:06:e1:b1:e7:c7:27:57:c1:6a:74:62:94:2b:0c:0a:8c:44:
e3:1a:86:c8:d1:ae:f8:6e:8a:5d:53:e0:57:db:2e:46:35:ff:
c3:0c:6d:ee:c1:cd:e9:f7:93:23:df:7d:4d:1e:77:cd:27:e5:
ad:d0:72:5a:1b:aa:0b:54:46:95:7f:f5:73:4a:63:07:7b:d4:
7d:41:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:26 2025 by rpki-client