Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: So/rmtnyQtbmB17vFQE2b79lDMaahk26Y1bFDYAT1IM=
Subject key identifier: B1:63:D5:14:C4:61:05:30:CC:8B:DD:F2:21:B6:EB:EF:D7:46:D9:EE
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 0194BBCF0235A7A4BC1D8A5845ECAA4FBFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 0398
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: Y/rqzy0jZYOz+ZneM80d+nOfUUZ2AakYnnk4pRKSTpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:02:35:a7:a4:bc:1d:8a:58:45:ec:aa:4f:bf:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=b163d514c4610530cc8bddf221b6ebefd746d9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:c9:07:3c:1d:59:69:c5:23:71:be:93:33:
86:42:ef:89:09:54:80:84:79:69:06:ec:a3:e2:a3:
d1:0d:eb:be:98:5d:ef:e0:f8:fd:98:a1:fe:75:e1:
b8:74:ef:d8:b2:28:c9:2d:08:47:c6:e5:6b:68:21:
18:83:92:0c:b8:52:36:9c:97:73:45:8b:d7:a8:a9:
2a:3c:81:c8:10:24:f8:f6:f2:8f:b9:1b:87:6b:44:
10:b1:c8:c8:02:ed:44:81:ab:89:5e:37:9f:10:49:
a7:2a:25:46:09:38:13:16:48:2a:79:11:63:ac:1f:
2e:e8:a1:e5:11:e7:9b:23:b6:6f:bb:fe:d4:6a:38:
cb:f2:49:16:4b:17:c2:0a:eb:cd:50:89:db:fa:08:
8d:e9:2d:ba:dd:bb:3a:34:76:41:29:78:f3:07:b3:
d0:7e:d8:aa:98:50:1b:f5:b6:ee:95:9c:65:ff:c7:
88:83:00:06:0f:9c:68:05:4a:fd:63:42:95:75:52:
56:fa:ec:9d:24:80:2c:5b:3a:df:58:34:06:b7:85:
df:5d:df:cc:7b:ad:12:09:96:d0:8c:f6:a0:f5:4c:
fa:5d:9a:de:1d:64:52:51:d7:d0:89:40:03:3d:00:
59:e2:38:be:84:02:58:be:43:0a:6d:11:7a:dd:35:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:D5:14:C4:61:05:30:CC:8B:DD:F2:21:B6:EB:EF:D7:46:D9:EE
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8f:d2:2b:1f:78:23:1c:96:62:d1:0a:73:70:59:bf:78:53:
86:53:22:b3:87:ec:49:ee:ba:d2:6c:2e:3e:fa:73:37:f0:0f:
cb:b9:ad:38:32:e2:9b:a2:c2:31:aa:96:9a:7c:97:67:2c:b8:
d9:5b:ab:0d:17:92:61:d9:b4:f2:e6:83:5c:f1:3c:87:64:9d:
d7:d5:d8:e2:0d:c1:ed:01:5d:c2:e8:9d:26:93:49:6d:6c:5c:
9d:ea:3c:29:3e:be:9c:17:2b:5f:bf:9a:18:49:e0:4a:60:9e:
44:3e:fc:9e:7b:24:c0:9c:74:01:53:ea:30:b6:f0:20:0a:8d:
56:1f:fb:f9:73:0f:fd:9b:1a:92:1b:ca:41:40:b1:5a:9d:bb:
cc:c9:87:d0:f0:ab:69:44:b5:a9:b3:e6:37:9c:db:6e:79:28:
12:3a:d1:8b:a0:4c:31:c1:24:e9:60:7f:a6:83:0e:fc:94:65:
2c:c8:11:a6:8f:43:69:b1:93:df:39:3e:4f:d9:ec:02:8e:67:
d8:dd:d9:60:4e:51:d3:42:a2:93:49:df:cd:de:5d:51:7c:42:
7f:cb:4c:e5:2d:77:e9:7b:fa:0d:ed:00:95:6a:14:b7:2c:5f:
8b:c3:c5:11:7f:2f:84:7b:43:d7:f8:4f:19:7f:5a:01:ff:6f:
1b:b8:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:01 2025 by rpki-client