Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
File: KGURKILY5sctAiwsPaF7UsKtsHs.mft (raw, json)
Hash identifier: JQe3VWsIRIjRUD0L0Ro87MeaTMXGpCy8bjyCClIEbus=
Subject key identifier: 53:6A:4E:3A:84:01:53:E3:AB:BB:BD:9E:D3:1F:75:39:4F:62:35:AF
Authority key identifier: 28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
Certificate issuer: /CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Certificate serial: 0194BBCEF4CC87F589ECAFCF4F9B700C1BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
Manifest number: 06F7
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: KGURKILY5sctAiwsPaF7UsKtsHs.crl (hash: CGWPfQRJ9nW5FeFHXpy51UPa6OQKl+a88CDBCS/3C5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f4:cc:87:f5:89:ec:af:cf:4f:9b:70:0c:1b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=536a4e3a840153e3abbbbd9ed31f75394f6235af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:ea:72:84:80:7d:d4:e8:3b:75:d9:a9:33:
da:bf:e8:f0:b8:48:c3:c1:70:d5:07:53:03:71:cd:
9a:e1:bd:c6:f0:07:f7:d1:bc:74:62:bc:46:d6:20:
51:fe:f6:b1:b9:c9:95:d1:0f:df:3d:54:11:0c:f7:
c4:fc:89:81:a5:9a:e5:e6:d4:d5:73:82:71:59:f6:
2c:40:ff:d1:aa:d2:f3:cd:43:22:dd:18:cf:0b:b0:
1a:f0:02:dd:8d:6d:13:60:05:12:35:c7:8c:d3:c6:
a7:8a:2c:ff:f7:e9:9f:cb:ab:65:d7:3c:cf:44:cf:
e4:bb:c9:25:e4:5f:b3:9a:df:2c:30:69:ab:da:5e:
c7:02:4e:90:2b:9e:c6:b3:43:2e:49:a0:a6:d2:1c:
8d:55:5a:4c:8f:fa:e7:97:26:4f:58:b5:75:c5:bd:
55:b2:da:95:f5:9b:38:f7:07:2d:43:0f:f4:5b:63:
ae:07:4b:93:ee:57:04:94:07:df:22:cf:ed:92:1a:
33:65:87:d9:f2:fa:fc:9c:6e:cb:89:44:27:27:29:
25:34:27:9c:21:9a:a1:39:6a:23:78:96:dd:46:ff:
49:e8:1e:7f:80:75:2f:41:77:01:d3:31:fb:51:23:
d1:39:0e:23:e6:47:41:1a:2b:20:d3:40:2f:75:01:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6A:4E:3A:84:01:53:E3:AB:BB:BD:9E:D3:1F:75:39:4F:62:35:AF
X509v3 Authority Key Identifier:
keyid:28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:57:2b:ae:48:d5:04:46:18:40:d8:0b:0a:a5:6d:56:4a:fb:
d8:f0:de:ea:91:f4:7f:32:38:6a:48:7f:3e:c0:07:8b:10:d2:
b1:6a:02:2b:44:ba:e9:ee:27:d2:c9:a2:8f:a4:b2:46:20:7e:
20:1b:9d:30:2e:db:91:86:d4:93:de:b9:ca:70:8b:1a:ca:76:
cd:cc:f8:b7:85:e2:0a:34:f5:c9:82:e6:a2:51:6b:16:4c:ea:
b2:ae:3f:01:f1:f7:1d:7a:13:3b:db:14:4b:51:28:42:ae:b7:
f5:7e:c4:ad:67:ad:24:c8:51:ac:58:31:54:e3:1d:94:af:b0:
e8:e8:a6:fc:ae:13:fd:18:02:6b:6a:81:2e:90:ad:62:bb:95:
eb:fd:ce:05:55:8c:ca:db:d1:51:7a:5c:7b:39:9a:f8:e8:e4:
06:e6:40:d5:eb:6a:2c:e7:31:55:23:3a:00:73:7d:cf:84:5e:
c3:a9:6f:d7:4a:5e:65:d0:fd:66:1b:7e:92:65:93:2d:98:3c:
1e:13:81:e9:0a:6f:2b:d6:11:4c:c4:e5:3d:f6:2d:77:8e:3f:
10:ca:f8:5e:6a:37:48:e7:73:94:a5:94:48:94:22:68:1b:2a:
9c:1c:09:c8:24:6f:1c:71:3b:1f:17:87:08:04:f1:58:57:30:
2a:c9:73:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:53 2025 by rpki-client