Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
File: KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft (raw, json)
Hash identifier: 6ZUWEFxAml0tVkDDI6hAlmrmGNeoV7xSHwQqaLSERyY=
Subject key identifier: 95:69:75:C3:D9:68:99:4B:00:A2:C9:0B:AA:F7:7B:72:0B:AD:77:B1
Authority key identifier: 2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
Certificate issuer: /CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Certificate serial: 0194BD17C3851C9F80704F780DF508E060CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
Manifest number: 05BB
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl (hash: e83c1xH858OnTwpJgF8q0ZIxBoFozWJvBNdZkEv9HRw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c3:85:1c:9f:80:70:4f:78:0d:f5:08:e0:60:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=956975c3d968994b00a2c90baaf77b720bad77b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:83:b8:fa:6c:42:fd:2b:98:d5:d9:85:f6:
6b:1e:3b:df:27:f7:1d:a4:85:5e:b1:de:46:5c:6e:
80:13:75:0c:dc:e6:45:73:d9:c6:1b:da:c2:0d:fb:
3d:22:22:64:0c:b8:c5:7f:a3:c4:61:98:3e:55:98:
57:44:13:51:7c:68:d7:d6:f0:c6:22:98:ab:a4:bd:
1f:18:ff:f6:75:52:dc:88:0c:26:c5:9b:ed:41:d9:
e5:83:71:91:b3:7d:a8:42:72:00:ee:11:08:9f:b4:
fd:cc:50:bf:a5:b2:a0:33:f1:50:c5:fa:fe:c4:34:
43:c2:4e:ec:56:1f:1c:59:98:25:6c:2b:e3:30:4a:
19:ae:ed:98:7d:6f:15:e8:0c:39:54:7a:d3:d3:8b:
10:42:1f:94:b7:02:2a:ef:74:ee:4d:36:62:cf:a3:
f2:9d:b1:03:e0:db:0a:45:54:d5:8e:bb:db:7c:2e:
c2:b5:5a:5a:7f:33:af:bd:44:d7:a0:c7:4f:84:bb:
79:92:e6:43:28:3d:7e:45:c6:2c:5a:98:14:36:5f:
69:07:26:84:72:dd:94:06:0e:66:58:0d:45:0f:0a:
70:41:b9:3e:85:44:c8:aa:14:4f:24:b9:63:b8:42:
8b:9b:20:d4:26:23:e6:c4:f4:3f:62:eb:55:ea:6d:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:69:75:C3:D9:68:99:4B:00:A2:C9:0B:AA:F7:7B:72:0B:AD:77:B1
X509v3 Authority Key Identifier:
keyid:2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:30:1f:60:a3:ba:18:9f:45:44:73:68:39:c0:fe:80:73:20:
89:82:89:36:94:02:be:f5:1f:fa:84:03:ab:97:c7:38:f1:16:
a7:4f:ec:a2:fa:1a:09:ce:ce:c9:d1:98:e7:63:cf:94:d6:9c:
21:6c:2b:3f:e9:c3:07:2d:57:46:3a:86:a2:4c:c4:a7:e2:8c:
21:b4:94:28:56:8c:2d:ff:48:8d:45:9e:aa:cc:06:e2:a3:db:
8a:81:1c:3d:96:a5:5d:6b:2b:5f:16:cc:dd:b9:ac:f6:a4:66:
6a:ba:e0:82:4b:40:2b:d5:73:c2:d4:94:92:1e:17:31:79:fc:
0e:1a:67:bd:05:64:03:ba:9f:50:27:e7:08:e7:e6:a7:dd:29:
aa:38:ce:79:27:be:b2:ca:40:86:c2:dc:2d:a2:f5:fd:75:11:
11:18:71:7c:d0:c7:ae:31:27:59:91:9b:33:1d:0d:3b:3a:3e:
bd:89:6d:16:19:9e:b1:29:ec:a6:2b:ca:1b:87:63:93:47:9b:
dc:f2:4f:39:c6:65:fb:a6:af:c9:49:62:0d:49:90:b9:92:d1:
cc:95:f5:58:b7:50:f6:17:32:c9:00:8f:28:6c:20:00:6c:dc:
e4:83:b4:0d:a2:da:32:10:43:7c:0f:73:74:2c:75:93:df:76:
12:80:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:59 2025 by rpki-client