Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft
File: KMvNlssXsh1iT9IXD9DXCBY68j0.mft (raw, json)
Hash identifier: GXLENuMCxWJSWxknFtEwjrrk/YZqf+hjR0tWHl82AzU=
Subject key identifier: 70:20:94:9D:11:BF:5E:7C:03:FA:CF:9A:31:FF:C7:2D:EB:70:45:8D
Authority key identifier: 28:CB:CD:96:CB:17:B2:1D:62:4F:D2:17:0F:D0:D7:08:16:3A:F2:3D
Certificate issuer: /CN=28cbcd96cb17b21d624fd2170fd0d708163af23d
Certificate serial: 0194BBCDDB0F97D28EB542B69AB2A31D885D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMvNlssXsh1iT9IXD9DXCBY68j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft
Manifest number: 0D52
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: KMvNlssXsh1iT9IXD9DXCBY68j0.crl (hash: f/97W0NxdjyBoZNB2H5wBQ3EaRetx24gqwey8uiN5TY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:db:0f:97:d2:8e:b5:42:b6:9a:b2:a3:1d:88:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cbcd96cb17b21d624fd2170fd0d708163af23d
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=7020949d11bf5e7c03facf9a31ffc72deb70458d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:11:ad:a0:4e:d8:b5:c8:3c:38:90:2d:5f:f7:
65:ac:51:28:09:c2:9b:36:08:eb:e6:72:1a:70:50:
f6:64:5c:51:da:09:d5:cb:0e:4c:79:e5:6c:ea:81:
9f:aa:12:3c:ab:c6:dc:71:30:84:f8:84:2c:44:22:
eb:26:f0:5d:ff:ee:59:15:55:95:c3:fd:04:5b:f6:
dc:be:7b:8c:7b:4f:e5:2a:42:3f:25:d0:df:8c:31:
36:29:08:93:86:14:67:27:14:df:c4:52:67:5e:2d:
04:78:00:2e:63:5d:51:d2:73:c5:ac:24:e2:05:9c:
83:a7:85:f9:9e:39:3c:70:5d:02:f1:46:e6:b3:da:
fe:e5:9f:9a:ec:11:ca:5d:31:7c:a7:58:10:58:00:
56:ff:46:3a:fb:2c:e4:8f:38:ac:1d:69:91:24:71:
9f:6d:c5:53:52:aa:24:71:44:cf:69:d2:13:ea:64:
2d:ec:d8:40:ff:79:99:c2:82:30:19:cd:52:a0:a3:
24:4d:ac:fe:35:79:cf:23:2d:8a:79:9f:1a:96:da:
ea:24:a7:a8:71:d5:fc:f4:93:51:98:e4:5f:c2:8d:
d4:2a:3d:d4:c7:b9:f8:30:fe:66:e0:2b:63:ae:d8:
02:66:1a:53:6e:f9:ab:ef:02:c2:4a:74:6c:20:11:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:20:94:9D:11:BF:5E:7C:03:FA:CF:9A:31:FF:C7:2D:EB:70:45:8D
X509v3 Authority Key Identifier:
keyid:28:CB:CD:96:CB:17:B2:1D:62:4F:D2:17:0F:D0:D7:08:16:3A:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMvNlssXsh1iT9IXD9DXCBY68j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2f:b5:cd:a6:8a:9a:91:80:c9:da:a3:3c:f2:b6:67:d1:3a:
5d:70:fd:26:66:d9:d0:d2:c2:ba:7d:7f:b9:f9:a3:65:09:cc:
f9:30:9e:e9:f9:5e:03:03:67:2a:12:e6:8c:94:20:9f:e8:84:
81:6f:46:9c:11:6f:33:ce:21:54:75:b0:65:44:ba:fb:03:b8:
c3:1f:36:c8:5b:29:6f:ea:4c:01:e6:f3:75:d9:55:33:b8:f6:
d7:09:3d:c5:83:8d:af:e9:4e:50:2f:6e:18:d1:ca:ef:3f:45:
58:01:2b:c3:d2:ad:6e:53:7a:69:46:14:00:34:e5:5f:76:9f:
30:03:0e:84:dc:84:cc:43:84:2c:b1:b3:2e:6d:77:ab:5d:9e:
f1:cf:c3:66:33:22:71:6f:e9:d5:e0:6e:bf:c7:2c:78:1a:f7:
e3:93:aa:b6:71:9f:dd:9b:7d:aa:53:91:5a:aa:fb:9f:30:e7:
c1:4c:4a:ed:59:cf:80:17:ea:7c:97:1e:d8:c6:7e:f5:22:8a:
86:af:c2:6d:0d:e3:d8:0d:21:3f:5c:bd:df:5a:a1:70:b2:68:
e9:ea:3e:6c:a4:10:e2:57:db:2b:da:c3:cf:7f:f5:e7:c2:07:
fb:70:9d:dd:c5:2d:19:2d:43:01:d1:c8:e8:70:43:a5:35:35:
ae:f1:0f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:34 2025 by rpki-client