Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft
File: KrmiSem1jILhRV6yM5RVsDHn3d8.mft (raw, json)
Hash identifier: Jd8lPLPo2h4yIzHn77gp7xEeO7X/vKf5u19wGCA+rgk=
Subject key identifier: 68:43:45:FB:CD:C5:88:6B:2D:24:99:63:CB:D0:61:31:46:B4:D3:A8
Authority key identifier: 2A:B9:A2:49:E9:B5:8C:82:E1:45:5E:B2:33:94:55:B0:31:E7:DD:DF
Certificate issuer: /CN=2ab9a249e9b58c82e1455eb2339455b031e7dddf
Certificate serial: 0194BC3C7D7830C48B6413A8D7854AF9186B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrmiSem1jILhRV6yM5RVsDHn3d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: KrmiSem1jILhRV6yM5RVsDHn3d8.crl (hash: +u6pIdPX+gj8MMERjasthyCzeKYCiWjmFFgDdTacSXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7d:78:30:c4:8b:64:13:a8:d7:85:4a:f9:18:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab9a249e9b58c82e1455eb2339455b031e7dddf
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=684345fbcdc5886b2d249963cbd0613146b4d3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:65:e7:b4:d9:1f:47:9d:47:00:56:8a:2c:
d4:8a:48:02:67:81:f3:49:22:87:ad:5f:75:98:fc:
21:b3:37:2c:27:4b:6d:1d:62:b9:c1:60:b7:e9:23:
03:bb:f9:d5:63:d4:9f:55:6e:8b:36:45:47:40:4b:
9b:5c:cf:f9:05:4b:95:cc:52:7e:0f:f0:1b:d2:8d:
1e:96:15:ee:7c:cf:cf:fb:91:5a:d7:31:43:1d:ad:
1f:79:a1:70:91:ec:08:23:18:5c:68:1d:00:5f:58:
3f:c1:4d:aa:83:1d:2b:d6:f8:11:5c:ee:e6:d3:4e:
7c:ac:68:71:67:16:22:c2:be:61:1b:b4:ac:61:70:
03:f4:fe:7e:af:d6:9f:fe:83:26:a9:c5:87:48:78:
ad:36:f1:46:48:77:2e:9d:d0:09:7f:46:82:f0:48:
35:b1:42:1d:86:d2:97:b4:6a:56:f4:c4:93:80:9f:
85:6f:5e:83:d6:6c:04:47:ce:6a:20:69:e0:95:6d:
93:21:c4:77:e8:4d:1b:91:79:b6:dd:82:06:a2:76:
04:89:90:fe:e8:97:5d:d4:e4:75:4a:4a:4b:4a:75:
db:a7:87:27:3a:6e:ab:c4:02:00:02:a7:f6:2a:9f:
dc:bf:33:77:3f:22:1c:39:c7:70:8b:d6:9c:ff:aa:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:43:45:FB:CD:C5:88:6B:2D:24:99:63:CB:D0:61:31:46:B4:D3:A8
X509v3 Authority Key Identifier:
keyid:2A:B9:A2:49:E9:B5:8C:82:E1:45:5E:B2:33:94:55:B0:31:E7:DD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrmiSem1jILhRV6yM5RVsDHn3d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:33:28:1f:43:5b:9a:4b:25:bd:bf:8b:71:5e:4d:60:6d:8e:
d2:6b:54:a5:ec:66:cc:68:64:2d:9e:db:f2:fb:8f:1c:2a:80:
bd:f5:83:0c:96:4a:47:55:b6:39:a3:3d:8d:0a:59:71:7a:2d:
83:8d:b3:22:0c:65:db:6d:26:78:ba:47:17:26:f8:b2:73:7b:
ce:8b:57:ff:1a:6b:f3:50:16:8e:8b:45:14:9c:fe:da:7d:3c:
4f:29:9c:e3:45:9d:9d:ae:10:d5:aa:7b:49:a1:61:74:d9:fb:
37:9d:83:f1:5f:3f:9f:50:4a:c3:4f:c0:c3:a5:de:bc:0a:51:
4a:16:5e:7d:3b:b4:31:72:73:f5:a6:76:30:e0:b6:2e:ea:e0:
2a:fb:db:b1:34:9f:f4:b8:4b:b6:d5:68:68:c0:0b:65:f4:24:
f4:ac:0c:00:a0:11:1b:e4:2f:41:16:bf:86:4e:66:8f:7b:2a:
6e:90:ff:47:06:07:31:37:f4:01:10:81:a0:f6:cd:fd:bc:14:
20:b4:10:03:4b:24:cd:9a:c1:a1:7b:8e:22:b9:68:8a:46:53:
8b:7d:4a:b2:4c:15:6d:33:9f:8b:c8:4a:d1:04:5a:3c:93:c5:
cc:f2:0a:36:aa:ff:3d:2c:0d:ad:8d:b2:0f:e9:f6:4a:35:1c:
ff:cc:63:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:28 2025 by rpki-client