Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier: fZ5PcnCsr6yiN3U7HD2eT/1fQel5s6xcW0yJObTeuok=
Subject key identifier: 7C:0B:76:B4:ED:6D:E2:86:A0:F2:8F:04:F6:59:50:4F:C1:41:E2:0F
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 0194BD179887BD9842D37D7C7F3A6D81B778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: WEZtfnj756bpDedAUtb3r+c40ESsqyLWTtbBKXXxmiQ=)
2: xWy_WK3zN7U168-WlDV1tLOFxms.roa (hash: 1F+oH+DvxsXdBv6L+suStKLkTpWpU6OO0n2cflrUK4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:98:87:bd:98:42:d3:7d:7c:7f:3a:6d:81:b7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=7c0b76b4ed6de286a0f28f04f659504fc141e20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:2f:02:77:e6:c1:d3:85:3f:92:48:f6:a9:
a1:ae:34:c6:f1:68:96:b7:49:52:12:fa:8a:fd:f9:
f2:70:81:58:d5:4f:9d:b2:d2:cf:95:25:0a:52:79:
d1:06:48:dd:37:04:6b:2b:43:14:85:7e:41:e3:b9:
0c:75:5f:16:2f:46:f3:80:d6:9f:b8:9b:89:39:47:
4b:2c:f8:ed:c5:1a:e1:37:ca:f2:68:cb:6f:fd:0d:
94:be:bf:e6:2f:b5:f0:0f:d7:d7:36:76:e8:05:d6:
e6:b8:4a:cd:f8:fe:a7:4e:a5:db:37:fe:31:2c:bd:
7f:1a:8d:fc:d7:af:16:de:15:e3:24:e2:f8:ed:f3:
9a:8a:00:f3:65:b3:95:b1:ec:71:64:59:e6:44:e6:
38:c8:63:08:5b:7f:a7:05:51:d7:55:4c:b8:77:4d:
85:47:8c:84:e4:26:79:cb:67:aa:f2:eb:9c:ec:43:
d0:a7:23:1e:6f:4a:80:56:82:a5:34:73:8a:2c:b6:
9f:3c:60:38:9d:81:c3:33:f9:de:b8:c2:fc:b6:e7:
5d:92:a3:cb:aa:f6:82:8a:6a:98:62:e5:04:91:a6:
1d:79:a8:8a:89:7a:eb:60:93:8c:41:ce:55:2c:e9:
a1:b3:05:69:b7:fd:98:2c:10:43:ca:15:43:dc:44:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0B:76:B4:ED:6D:E2:86:A0:F2:8F:04:F6:59:50:4F:C1:41:E2:0F
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f0:8e:07:06:58:a8:a8:ce:8c:54:c9:8c:59:59:35:f1:f4:
09:b5:96:2c:56:16:bf:f8:4b:42:ef:2a:5f:01:2f:5e:20:01:
f7:82:af:60:69:fd:bd:fb:4c:88:8e:c1:32:0c:2f:d5:fa:3a:
61:ff:86:2e:e3:74:78:64:f0:06:3b:96:77:91:d5:2c:ce:59:
8c:84:bd:8c:21:b8:56:d5:f5:b4:95:f7:0b:47:2c:60:39:da:
b6:9d:21:65:ed:04:26:38:12:dd:87:46:c6:e8:6b:35:87:15:
85:7e:e7:95:32:ca:93:6a:2c:55:df:23:70:5b:ce:5a:8d:4a:
dc:71:fa:00:b5:51:87:a7:5d:8d:5d:a1:5c:3c:3b:1a:bd:0c:
8f:a3:92:c1:8e:02:1d:2d:1c:a5:1d:dc:3b:ad:20:eb:10:75:
e2:47:3d:f4:64:26:d1:ed:a7:fb:81:ee:a5:43:49:06:5c:5f:
a5:ae:6c:c9:2e:e8:70:23:09:07:f9:a9:55:40:36:cb:53:8c:
79:e2:9f:95:05:b5:70:6e:23:5d:13:40:4c:41:2a:76:6c:42:
72:39:39:a0:7a:43:40:9f:65:10:63:87:3b:b6:93:4a:ef:46:
c3:1d:2f:d0:a9:93:29:c8:52:63:06:da:9b:14:98:17:a3:71:
10:4b:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:43 2025 by rpki-client