Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
File: kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json)
Hash identifier: wZSn6UukhaA92S8TrEgbXiFYZLyxQ+ZbCpyCCWRKgN8=
Subject key identifier: CF:13:A6:19:70:6C:C3:F3:17:2F:E9:A2:92:3A:E4:92:AD:1B:03:BA
Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
Certificate issuer: /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Certificate serial: 0194BC732B67917F90CD33F0A3ACB152011A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
Manifest number: 02EF
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: P+uMQFtVpg7rd8hdhaBnSDS3GXqXkJYyVioqbb91qK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:2b:67:91:7f:90:cd:33:f0:a3:ac:b1:52:01:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=cf13a619706cc3f3172fe9a2923ae492ad1b03ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:70:29:f2:97:a0:c5:c8:86:6f:f7:21:42:1e:
c5:d0:50:6e:b5:d9:35:c0:32:6c:85:88:16:72:0e:
e7:b5:3d:f6:20:a0:dc:27:cb:e2:ae:2b:b9:15:e4:
22:b2:2b:13:ec:76:d2:48:0f:58:fd:62:b5:b4:f0:
48:81:40:30:62:f1:e4:dc:80:e4:6b:14:8a:64:95:
0b:a4:32:ff:11:82:96:7f:6c:ad:07:35:d7:0c:ce:
f6:78:d7:89:b5:f5:b4:b7:7e:fb:d9:b6:87:e4:5b:
7a:30:07:be:d6:e8:43:f8:a7:f3:7e:49:62:c4:13:
04:82:25:b0:5d:98:4c:f5:62:05:47:bd:d5:8b:41:
7d:3b:7e:35:76:6e:fb:6f:12:59:7b:10:db:40:57:
c6:97:93:bf:94:0c:80:25:e6:76:e6:50:3f:c1:4b:
b9:bb:05:8b:4e:15:08:a8:88:0d:ef:8b:4d:e4:b3:
e1:8c:dd:13:5d:6d:fd:7a:a5:72:48:0c:41:bc:80:
6e:85:dd:9b:cf:9c:e1:0a:73:da:ee:cc:b9:e2:45:
15:71:b3:76:a3:24:d6:6f:f4:8b:c1:a9:a5:54:9c:
86:07:a4:3f:06:45:d3:3b:ac:85:b7:43:8d:5f:60:
75:1a:9c:2f:58:55:75:90:f0:bd:00:e4:f3:e0:f9:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:13:A6:19:70:6C:C3:F3:17:2F:E9:A2:92:3A:E4:92:AD:1B:03:BA
X509v3 Authority Key Identifier:
keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c2:0c:d4:11:f1:a0:a5:83:0d:6b:ed:d9:01:c8:91:92:f0:
a5:34:e2:f8:20:ef:35:a1:cc:95:b9:a4:3d:bc:b5:52:80:82:
32:5d:15:f1:cd:01:16:19:43:08:70:5a:36:34:ad:f5:29:cb:
52:c3:d4:32:e3:c0:e4:8e:d6:22:f1:7b:bd:d9:e8:99:49:24:
50:42:1d:d3:ee:a6:b8:15:ce:c4:5b:3d:2c:d8:f6:f5:62:92:
4d:cf:1e:45:08:9f:32:ea:57:8a:7a:dd:a2:55:a0:7e:40:98:
64:f2:13:6f:17:af:29:90:52:79:2a:cb:43:82:94:f8:dc:36:
bc:c3:a7:3d:d0:11:e7:b6:39:3b:2a:fc:b9:99:5d:4a:bb:cd:
b9:03:dd:32:66:f9:6e:c1:15:86:a0:97:66:ca:1c:28:f7:b8:
1b:f8:59:93:9c:fa:df:e8:45:34:51:29:63:b8:bb:bc:f5:a2:
a8:9b:5b:17:1f:e2:fa:46:81:da:2f:61:56:43:73:4a:a5:62:
63:50:1a:43:86:c3:18:81:f0:eb:54:57:97:19:0c:98:3f:70:
86:03:87:25:ab:c9:1b:22:c4:64:8b:6f:79:9c:8f:c5:8a:9a:
7d:54:d8:c1:7b:b3:15:36:39:96:cc:ea:1a:6e:a1:12:80:0b:
80:07:57:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:34 2025 by rpki-client