Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
File: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft (raw, json)
Hash identifier: M+P4XwmMvEiMHMJRo4RlurK0IhBLlZHOh8lcuukinMk=
Subject key identifier: F6:84:22:73:DF:AF:03:FB:64:66:E1:54:60:80:6B:D9:2D:1C:58:46
Authority key identifier: 29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
Certificate issuer: /CN=2947987768647eeb8a0f3860c44176247ce6fc59
Certificate serial: 0194BD17ED459D406616D8FEE6250015A70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
Manifest number: 0C42
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl (hash: Xpyg1drf/CrhBQfxcTgPRAcLyzgNQCzTpYgt6ikl1Xo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ed:45:9d:40:66:16:d8:fe:e6:25:00:15:a7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2947987768647eeb8a0f3860c44176247ce6fc59
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=f6842273dfaf03fb6466e15460806bd92d1c5846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:17:19:92:86:73:6d:6c:13:0b:03:80:3f:
2a:82:ba:73:ec:06:aa:19:e9:aa:fb:39:4a:9b:ca:
71:9d:ff:55:d9:82:be:85:00:04:45:dc:09:ba:83:
ce:20:42:94:fc:37:05:bf:02:a0:c9:e7:e9:f0:bd:
36:79:35:29:74:11:da:0e:75:4f:12:ce:30:64:02:
5d:97:76:c3:e7:2e:a8:1f:b1:89:b4:7a:32:70:c5:
2d:3d:0c:33:52:1d:11:4c:96:9d:3a:16:ad:a7:a0:
02:a1:66:b1:c3:01:1e:9d:4b:14:66:74:a3:19:dc:
c6:2e:55:73:da:fc:8f:ba:52:3c:6f:dc:e5:af:21:
f1:71:86:27:82:2a:4d:73:4e:8e:98:96:1d:c9:f4:
8e:6e:52:2a:c6:99:e6:2d:cb:8f:a2:60:69:75:96:
b3:b3:c3:c8:f1:e5:8b:ad:7c:d0:e5:ee:1a:83:6e:
70:d2:02:43:b3:12:ca:1d:dc:13:d7:f5:0d:36:c6:
d7:6b:b6:a4:82:a3:b5:36:46:e6:c4:84:85:9c:09:
1b:40:8e:3c:7f:67:c2:d1:b4:7b:1f:3f:2d:da:04:
5d:cb:a0:71:17:61:98:4b:cd:75:e8:ec:ee:47:f2:
57:68:a4:eb:c7:d1:df:fb:54:dd:1d:a7:0c:a0:df:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:84:22:73:DF:AF:03:FB:64:66:E1:54:60:80:6B:D9:2D:1C:58:46
X509v3 Authority Key Identifier:
keyid:29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:90:63:92:06:f9:65:84:6e:05:da:9a:b1:9f:84:ce:e2:0a:
c9:62:e2:34:27:ec:cd:c5:61:37:ba:7b:9a:05:c7:60:d1:b2:
ca:ac:3a:45:dc:fb:aa:bd:2f:92:13:dc:d3:7b:7d:61:3e:4b:
4a:af:bf:d3:e0:9e:f7:56:22:6c:49:3c:33:09:0b:ff:e1:82:
ca:2f:b5:80:c4:16:cc:09:c8:94:71:6b:40:39:dd:82:f2:57:
80:a5:d7:f0:1e:ca:04:55:00:7b:9c:64:a5:2d:fa:2c:f9:92:
b2:7f:1c:5b:84:f4:55:50:10:af:3c:14:44:ae:18:d2:44:b2:
d2:ce:c3:dc:40:c5:c3:c5:95:0a:5c:e5:b2:d1:bc:c0:e3:9f:
76:65:eb:c1:08:c0:c2:15:5a:14:40:41:30:01:26:4f:a0:97:
98:df:eb:75:a8:75:f5:82:f5:03:30:9e:17:ac:8f:5c:63:84:
91:51:36:b2:8c:2f:e6:ca:8c:5d:38:34:53:70:08:7d:8e:f3:
23:e7:ce:a1:eb:b1:ab:34:c5:98:bd:ae:a1:8f:9e:93:96:d5:
94:b2:23:11:1d:aa:93:86:48:76:81:47:41:e5:76:09:2c:ec:
15:4a:41:0e:70:86:4d:d2:a9:6e:4d:53:90:4d:b1:0c:a9:e6:
f6:20:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:39 2025 by rpki-client