Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.mft
File: kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.mft (raw, json)
Hash identifier: 8m1eollMnQkUhdjM0/ZgS0Do5kQo52TnuMmUfTKti0M=
Subject key identifier: 2C:AD:C7:8D:9A:17:63:E8:0E:CF:2C:09:56:FE:64:8F:0C:48:A3:AE
Authority key identifier: 91:2A:82:B0:E5:8A:27:ED:87:A2:DE:55:E5:E1:B6:02:90:36:56:D4
Certificate issuer: /CN=912a82b0e58a27ed87a2de55e5e1b602903656d4
Certificate serial: 0194BD85503087F651A3692AF0B371537E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.mft
Manifest number: BC
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.crl (hash: 6SUKfTKo9YD60imFIIwaNlxKbJWod+s74VYjt/xWtQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:50:30:87:f6:51:a3:69:2a:f0:b3:71:53:7e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912a82b0e58a27ed87a2de55e5e1b602903656d4
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=2cadc78d9a1763e80ecf2c0956fe648f0c48a3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:f5:05:fa:1a:cf:89:15:95:42:63:cc:96:
d3:b8:62:f9:05:aa:ff:de:32:d3:3b:c3:16:32:f2:
75:2f:a0:0b:65:5d:64:13:41:6a:c2:06:a8:64:d6:
d1:2e:a1:ab:47:10:98:c9:b0:35:25:47:ed:1b:a8:
f3:87:49:5a:a9:d8:10:ae:20:d5:d4:3a:2d:6f:a3:
ae:6d:d0:04:e4:5b:b8:35:30:63:cb:d5:fa:eb:9e:
db:29:1d:89:d7:17:9f:d9:83:54:1d:81:5b:de:b6:
ee:4c:a7:b9:7d:78:b3:42:54:42:b0:ca:59:0e:c1:
4f:6d:c3:73:4c:02:93:62:36:83:3c:4d:e2:2d:91:
3a:7c:7d:83:26:de:0c:66:fb:f8:18:b8:ed:a4:45:
15:aa:f5:2e:23:f1:8f:c0:b7:25:5e:c2:b3:c2:58:
5a:22:75:d3:4f:72:8b:77:1d:30:ce:2d:36:58:4e:
2d:d0:08:a6:2c:fb:8d:a1:cf:83:e4:6c:65:a8:6b:
6b:e5:86:44:e1:5f:b7:77:37:d3:70:9a:c8:f0:e1:
e0:7e:dd:1b:8e:b0:ac:fc:39:d3:b1:b2:1e:d2:6d:
5e:c0:77:17:f0:a1:87:68:85:1c:29:d8:dc:3a:12:
69:c4:47:18:3b:6f:33:3a:94:18:4d:1a:33:cf:67:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AD:C7:8D:9A:17:63:E8:0E:CF:2C:09:56:FE:64:8F:0C:48:A3:AE
X509v3 Authority Key Identifier:
keyid:91:2A:82:B0:E5:8A:27:ED:87:A2:DE:55:E5:E1:B6:02:90:36:56:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e0:34:42:e8:32:a7:37:fb:91:77:64:f7:0c:e0:6a:eb:29:
7b:50:c4:8e:ca:bf:5c:22:1e:0b:c9:54:f1:b0:df:70:9e:35:
68:1b:68:3b:10:93:88:fd:37:68:e9:5c:f0:0a:0b:76:d3:61:
f3:01:df:ad:4e:61:84:50:4b:79:75:67:2d:1a:e9:87:22:29:
51:0a:a9:c6:8d:44:39:b7:c3:fb:80:d7:4c:89:66:e9:25:b2:
a8:b0:f2:59:d2:2e:1e:89:00:dd:6d:a3:b0:a4:f5:b0:34:20:
81:01:b2:22:ef:96:12:0e:f9:a7:b7:a9:6f:87:e3:87:5d:24:
62:94:91:d7:21:bf:4e:43:11:20:cd:82:da:3c:05:40:4b:1a:
9a:5e:04:18:a3:c2:09:ea:ac:b2:4e:f1:ae:62:fa:b6:6a:fa:
fe:2f:4e:b7:26:f9:f9:6b:07:af:d4:ca:94:73:db:06:12:97:
8e:dd:26:4d:25:ba:3d:73:d3:1d:48:88:42:d9:ed:06:6d:38:
52:2b:f7:f1:97:3f:17:ee:38:23:d9:b2:00:09:ff:6f:89:a2:
f7:6f:9e:7a:78:dc:fa:47:65:06:73:ee:d0:4b:10:50:82:e2:
a5:ef:da:53:d7:50:91:12:3b:71:01:a4:1b:20:09:4b:77:91:
86:b9:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:43 2025 by rpki-client