Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
File: K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft (raw, json)
Hash identifier: VZokSDf+OseO9wyv5pKP98yPHapm2sH/cRbm34PPUk4=
Subject key identifier: 9D:30:CA:C7:9E:F7:5C:FD:B8:65:01:A7:C0:E9:8F:88:A4:DA:AB:32
Authority key identifier: 2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
Certificate issuer: /CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Certificate serial: 0194BBCDD17E8C9EA4BDF64BEC4029DF4467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
Manifest number: 0543
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl (hash: QpDTOmxFKpjMJ4KGtugUxpJ272bxpuzcYTzGpUjU/XA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d1:7e:8c:9e:a4:bd:f6:4b:ec:40:29:df:44:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=9d30cac79ef75cfdb86501a7c0e98f88a4daab32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:67:63:4f:ef:78:96:1e:b7:84:d7:6d:95:a6:
87:e3:34:d3:3b:76:4f:10:33:cb:24:12:ba:b6:71:
bf:ab:8c:7b:dd:6e:25:44:f9:21:3b:4f:f2:b4:a0:
20:87:97:48:b5:3e:88:e3:b3:3d:9a:89:02:36:d0:
54:f5:28:4e:52:14:9c:2e:eb:aa:bd:48:fb:8a:5f:
31:6e:09:bb:87:d7:de:af:b7:5c:90:fd:71:96:fa:
71:21:45:7c:9d:50:2b:3f:57:7c:36:a7:21:91:2a:
1f:05:84:f1:89:fe:7a:a3:f9:24:3b:6a:04:63:61:
d4:b4:7d:83:c6:a4:9e:86:ed:7e:e7:79:6c:98:f5:
1b:d4:a8:a2:a2:a2:a8:91:75:9e:12:ac:3e:ea:9c:
b8:db:be:88:6e:93:71:6d:47:7c:02:a6:d6:6d:ec:
bc:2f:4f:40:af:f3:7f:89:72:75:12:29:d4:74:f5:
cd:8a:9c:42:87:af:41:68:69:b8:3e:b6:66:db:47:
2f:02:3d:5c:66:98:c6:f8:df:d2:57:df:99:fc:0d:
2b:12:a3:04:74:d5:cc:87:29:f3:21:c3:ae:ae:d2:
ee:5f:94:80:f4:32:9a:69:d9:a0:b6:02:03:cb:fb:
5e:e8:d8:6a:94:c1:cb:f1:bc:3d:1d:b0:73:d5:55:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:30:CA:C7:9E:F7:5C:FD:B8:65:01:A7:C0:E9:8F:88:A4:DA:AB:32
X509v3 Authority Key Identifier:
keyid:2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:76:5c:f6:7f:0b:bb:14:84:c0:f1:9f:fa:39:00:84:02:8f:
ab:8e:62:fc:31:72:02:83:29:0a:fd:31:d1:ee:57:c6:7c:be:
8f:88:16:17:42:ee:43:38:3c:2b:d4:f7:4a:f7:b0:77:3e:f3:
ab:f3:a2:1e:d4:7b:de:ef:95:d8:07:1d:ee:25:90:51:ae:3a:
59:1b:b6:0c:85:c9:73:05:8f:32:7c:1b:0e:f9:b8:64:0f:67:
78:3e:cf:dd:91:81:f9:21:9c:8e:93:c5:3f:49:ca:40:fa:61:
c0:b7:e4:86:45:b0:92:e1:0e:e7:1e:f4:1c:f6:98:5e:08:4e:
af:9a:93:cb:bf:20:66:f6:79:8f:02:52:73:93:17:5a:b7:50:
80:49:60:a4:5d:c2:f9:09:af:a7:75:b6:9f:83:6b:f5:22:61:
f8:e6:80:2a:e0:30:2a:24:3f:6a:5e:19:8b:1f:32:9e:65:e6:
12:e5:7d:96:1e:e3:d0:e8:aa:42:0c:96:7b:4e:3e:90:7a:f7:
39:b7:d5:e4:df:a5:28:f0:cc:c9:16:f6:ac:ce:b0:ae:54:9d:
1f:01:3a:b2:69:15:60:3d:e1:8f:6f:1b:a9:4f:da:d1:74:ed:
d2:08:94:3c:51:4f:ce:f7:e6:71:77:a1:d6:e7:aa:8d:1f:87:
b2:95:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:11 2025 by rpki-client