Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
File: kpZChU_lYFL93BRr9y57xpSFC2M.mft (raw, json)
Hash identifier: u4glmP3okWsb/7a3BBO0f3U58xZMPGC9Zm3xl0TQWjY=
Subject key identifier: 51:BE:23:19:C2:57:81:82:70:6D:A4:B6:7C:15:45:FB:6A:D2:36:F0
Authority key identifier: 92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63
Certificate issuer: /CN=929642854fe56052fddc146bf72e7bc694850b63
Certificate serial: 0194BBCEA69FFE2C1DDEFE0E32A2BEA035A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
Manifest number: 0513
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: kpZChU_lYFL93BRr9y57xpSFC2M.crl (hash: 0QtMi/tTa5iUiXLsgUrbU5Vau7DEdPXJTycKvMPI25w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a6:9f:fe:2c:1d:de:fe:0e:32:a2:be:a0:35:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929642854fe56052fddc146bf72e7bc694850b63
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=51be2319c2578182706da4b67c1545fb6ad236f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:6b:67:97:35:ae:1e:42:e7:b2:0c:e2:7c:
65:2b:38:a0:a7:75:f9:7e:4e:40:16:18:42:2a:db:
0c:af:76:a4:ff:d6:39:eb:ab:1a:0d:eb:87:a4:3f:
6e:06:24:15:e4:54:d3:ec:c0:f9:44:c8:80:4a:7e:
22:de:07:ad:a1:5b:29:d6:87:23:9f:56:31:02:ee:
c1:09:2f:e0:fa:09:97:08:a6:b2:d6:26:54:25:35:
2b:bb:ec:8d:63:7e:df:09:09:4a:49:2e:d8:ae:ab:
fc:1b:95:88:05:c8:0e:55:f0:6f:52:55:30:71:1a:
ab:05:a9:52:28:a4:e4:f1:95:ea:7f:73:b8:26:46:
34:ab:84:c9:4b:14:34:fe:2f:27:50:22:62:e7:bb:
ce:e1:37:8f:5e:25:86:94:8a:de:75:d9:8e:f3:e3:
3a:bd:66:3a:cf:5f:be:e6:1c:f4:ca:26:43:d3:46:
36:e3:0e:15:73:b0:3c:f6:f4:51:87:7d:f3:c1:a3:
ea:e9:21:3a:71:af:c5:97:21:7a:51:53:d7:3a:21:
46:ce:c4:59:aa:6e:8a:bd:7c:34:7d:d9:b2:ae:cd:
d2:36:52:17:85:05:0e:78:bd:80:3d:29:d1:64:66:
ee:79:5c:d0:0a:09:a9:d2:d9:0c:e1:c8:63:7b:1f:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BE:23:19:C2:57:81:82:70:6D:A4:B6:7C:15:45:FB:6A:D2:36:F0
X509v3 Authority Key Identifier:
keyid:92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7a:6a:03:19:37:dc:67:46:38:04:f9:1d:65:f3:8d:a6:7c:
ed:dc:1b:84:46:e5:66:83:eb:85:7a:ae:84:c6:92:c0:cb:cc:
89:27:85:8c:51:c8:50:bd:6e:30:48:da:2f:df:90:1b:fc:d8:
f4:e0:c7:d2:0e:4f:37:95:f0:d9:20:b5:ac:fc:ff:48:31:4f:
51:d5:ad:fc:c0:04:03:0d:a3:af:8a:7f:3e:09:4b:0a:e7:9d:
96:ff:55:1c:08:bd:92:0a:95:eb:57:c7:80:31:9d:c0:41:b3:
1e:d9:21:0a:37:f5:7d:97:33:4d:31:a7:13:85:b9:89:c0:ac:
c8:01:62:fb:a1:6a:20:70:42:28:17:50:e9:8f:07:6b:11:cd:
bf:cd:d9:40:d3:56:2a:b9:27:1f:da:61:4f:81:e3:b6:ee:53:
9d:99:da:77:07:b5:a3:ba:fc:85:7b:69:bb:32:5a:d1:49:c5:
07:f0:75:5b:68:8b:6c:91:df:e5:6a:35:21:0b:ff:50:db:c0:
bb:be:b2:54:35:7b:9c:c8:3d:b7:84:76:c2:c4:de:f7:f5:80:
48:03:77:3c:46:4c:8c:06:2d:f8:a3:6f:2b:ea:be:b3:56:67:
25:6d:16:24:08:0a:82:b0:7f:55:f2:df:f9:4c:7a:ee:1c:26:
f2:d4:a2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:20:50 2025 by rpki-client