Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
File: KAYV5gBqhh9mz3MH0w_JNQx2994.mft (raw, json)
Hash identifier: IdUAc2o36bjTNIA5cPDK40JNuSM3SJEwfTOWv6Nw8YY=
Subject key identifier: 7F:FE:62:D4:C0:09:6E:2D:B4:B4:73:41:AB:61:9F:49:06:79:6E:CB
Authority key identifier: 28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
Certificate issuer: /CN=280615e6006a861f66cf7307d30fc9350c76f7de
Certificate serial: 0194BC3BF31C5C13C0287C977EDBF1411516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: KAYV5gBqhh9mz3MH0w_JNQx2994.crl (hash: 4xMS3kl+JI0a5HE0OKEhDTU9DA62NVgr739NX/VlMZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f3:1c:5c:13:c0:28:7c:97:7e:db:f1:41:15:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280615e6006a861f66cf7307d30fc9350c76f7de
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=7ffe62d4c0096e2db4b47341ab619f4906796ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:0f:42:63:25:83:19:c1:88:ea:d8:e9:9b:
ac:37:58:17:99:b6:17:a5:1f:ac:5f:2a:dd:55:36:
64:7e:9a:7a:cf:27:fd:60:f6:d2:5a:10:c6:f8:87:
44:9e:fc:0d:b9:a6:d7:81:da:9e:db:ff:c5:40:c0:
e2:76:62:1f:cf:02:be:94:ed:8e:71:06:15:83:0f:
24:3c:84:2e:64:39:14:5e:d3:a5:24:3e:f9:20:75:
8e:1a:a4:dd:80:19:33:a5:c9:d1:43:21:9d:1c:8f:
59:e2:d3:2d:db:1d:08:99:2d:58:32:26:ea:c5:24:
13:b1:8f:e6:36:15:a6:cf:cc:cb:12:4a:c6:16:e1:
df:f5:90:d7:fb:e7:31:63:f6:1f:f6:84:ee:06:84:
88:b2:7f:53:99:b9:eb:21:7e:6e:83:20:d8:67:87:
97:1d:9e:8a:ba:8b:bf:a3:e8:b7:f1:7e:9e:1d:ac:
18:cb:f8:5a:2d:18:f0:d2:8a:79:0a:cc:c1:42:a7:
9a:48:89:1f:eb:af:d3:fd:08:c9:a9:a7:39:50:5f:
5f:2a:33:32:c8:54:d5:32:28:f9:61:06:50:c2:07:
51:6d:30:08:f4:21:0f:16:1b:f3:dc:b2:7d:e8:9f:
28:84:f1:92:3a:73:51:0b:39:03:4e:6c:6c:47:1c:
1a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FE:62:D4:C0:09:6E:2D:B4:B4:73:41:AB:61:9F:49:06:79:6E:CB
X509v3 Authority Key Identifier:
keyid:28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d6:ea:31:5d:e4:9f:c6:78:72:5f:70:37:eb:95:95:d2:78:
4f:70:cb:d3:85:4b:54:02:7a:3c:9f:f0:c8:f5:77:9c:c2:05:
d9:dc:d4:33:62:9c:36:fc:ea:da:67:97:d5:bf:c3:34:3f:56:
fa:8e:5a:e8:77:f7:ad:75:67:75:c5:47:2f:35:34:cd:85:45:
63:8a:03:19:2c:77:c3:78:73:6d:fb:00:42:06:32:f5:2c:55:
08:53:25:49:f6:c1:98:d6:85:1b:a1:f2:21:a3:a3:a8:2f:66:
9e:17:e4:ac:28:ae:a4:b1:b1:4e:e9:4d:ff:3d:65:c2:8c:cb:
3e:7a:7f:80:95:ae:f7:00:48:27:4e:e1:eb:9b:ff:3c:9d:29:
37:33:b5:af:c7:53:44:2b:ef:93:d6:75:2b:2a:89:0c:03:00:
d3:8e:52:e0:95:c9:ae:3e:83:96:93:77:4b:3f:72:56:b1:4a:
7d:60:ff:3d:ff:78:9b:89:f2:8e:e1:4d:6c:e2:19:44:c2:a2:
d9:70:c8:62:5e:0e:e5:df:cf:97:f6:16:16:ef:26:f6:df:f8:
30:7c:0d:ce:c4:46:2c:9c:15:1a:7a:96:fe:50:ee:f0:46:64:
69:76:e6:6f:9a:a7:69:7e:18:54:3d:48:5f:81:a9:80:d4:cc:
7f:4c:9c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:50 2025 by rpki-client