Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
File: KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft (raw, json)
Hash identifier: gML2MrMkUFHUznQPtDKyWGdsr+oWpGMY/v5vraCW1xU=
Subject key identifier: B7:85:28:B2:61:22:1E:E5:A8:B1:14:35:24:70:D2:9E:C4:CF:F6:DB
Authority key identifier: 29:62:E6:A1:33:4C:9C:A9:C9:3E:D5:7F:F4:AD:72:D9:9C:E9:1A:D0
Certificate issuer: /CN=2962e6a1334c9ca9c93ed57ff4ad72d99ce91ad0
Certificate serial: 0194BCAA37D92E1488A59DB3DD1CE7EDADFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
Manifest number: 050F
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl (hash: 8ZosoZrFgOtnY4L0vhwNB4Q35rAp+OtGO11DpdJPK5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:37:d9:2e:14:88:a5:9d:b3:dd:1c:e7:ed:ad:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962e6a1334c9ca9c93ed57ff4ad72d99ce91ad0
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=b78528b261221ee5a8b114352470d29ec4cff6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:31:db:29:d5:34:ab:67:9a:36:07:75:ed:
e9:0b:e8:ad:a2:ca:c8:6d:0b:57:6e:65:57:52:5a:
75:03:4c:bc:5f:a8:03:55:43:c9:8d:50:ab:0d:78:
cd:4e:f7:a8:60:18:82:7f:1c:b6:72:fa:1a:2f:56:
37:01:af:41:4c:40:de:cb:56:12:11:1b:84:67:52:
87:42:97:b5:4f:bd:84:45:13:a8:3e:c1:06:af:e8:
a4:8f:6d:91:8e:97:d2:b3:58:38:7f:ba:07:20:99:
40:14:fd:b9:ef:a6:31:3e:84:00:6e:ca:a5:ab:1b:
fe:17:8d:74:a8:11:61:d2:ab:1c:2c:49:a0:79:bf:
e8:de:8a:f3:6c:de:7e:df:68:b1:26:c3:bf:9f:7c:
47:82:db:8d:e1:cc:5f:3c:78:cc:bf:d2:80:11:5b:
8d:b6:da:4a:23:1b:29:2c:86:a4:73:e9:28:23:76:
c1:6e:1b:e9:c9:ea:0a:29:e1:4b:61:14:2c:29:ce:
37:c6:75:d9:30:d0:e3:32:94:f8:fa:5d:f1:8f:23:
1e:79:9e:48:5a:03:59:31:92:a9:3a:e2:5a:c7:c7:
bb:c3:91:61:38:5c:d0:b1:89:08:37:d5:f5:66:3c:
66:0c:7c:7d:49:5b:33:71:0a:ec:76:1d:d1:c0:18:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:85:28:B2:61:22:1E:E5:A8:B1:14:35:24:70:D2:9E:C4:CF:F6:DB
X509v3 Authority Key Identifier:
keyid:29:62:E6:A1:33:4C:9C:A9:C9:3E:D5:7F:F4:AD:72:D9:9C:E9:1A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9c:20:1b:8c:3a:99:63:20:4c:6e:ba:85:e0:de:e7:79:fe:
c4:77:07:43:9d:1d:b6:a0:25:cf:26:a9:fe:32:a8:74:a8:69:
fc:d4:cb:b5:82:5d:d1:75:f0:d0:34:e4:26:6b:21:b4:d7:8c:
2c:ef:98:ad:c2:66:72:20:91:b4:ec:3a:6d:c1:91:6b:a1:48:
dc:de:ce:17:33:d4:65:f0:1d:e1:60:ae:42:25:81:3d:0b:71:
52:ab:44:eb:d2:88:9c:b7:86:e4:9d:2e:80:32:50:90:5c:d6:
12:68:57:32:e6:fe:db:25:1a:4a:f5:67:8d:3e:c3:ec:7f:39:
cd:01:1b:ba:e3:7c:cf:61:5c:5b:60:2f:f1:3d:08:b3:fd:17:
48:1a:7b:ff:8e:af:48:1f:d3:0c:f3:5a:02:81:a8:e9:60:06:
83:0d:f0:d9:9c:c0:46:27:f1:d5:80:e1:a2:11:74:41:7c:8f:
2d:f6:26:c1:ee:90:b9:c3:3a:77:40:8d:0d:a8:04:c6:42:ff:
11:59:04:13:8b:bd:ad:a0:11:7e:1f:62:e2:8b:b7:44:10:bb:
9e:05:52:f3:36:3e:d4:cc:d8:ed:77:89:90:75:08:f3:bb:89:
77:f1:2a:62:d5:3c:44:e4:e1:12:bb:27:e0:26:c6:43:c5:af:
3d:44:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:05 2025 by rpki-client