Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
File: ksrhHed02u8FJ0JGPOlU9SHG0nI.mft (raw, json)
Hash identifier: NS9jOKGBONfHADr9zWzG/hyiYgMg7guh46lwM9zk7u4=
Subject key identifier: 89:DB:77:11:DB:69:F6:A4:58:73:9B:8C:8E:DF:A9:92:DC:6B:58:87
Authority key identifier: 92:CA:E1:1D:E7:74:DA:EF:05:27:42:46:3C:E9:54:F5:21:C6:D2:72
Certificate issuer: /CN=92cae11de774daef052742463ce954f521c6d272
Certificate serial: 0194BBCE41C2261FF8DD9DC47D4A5851F9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
Manifest number: 0E22
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: ksrhHed02u8FJ0JGPOlU9SHG0nI.crl (hash: 6JmN6gCGS5pYcoWBrLU25LDL7/WbOst0XJ0qSVcCelQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:41:c2:26:1f:f8:dd:9d:c4:7d:4a:58:51:f9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cae11de774daef052742463ce954f521c6d272
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=89db7711db69f6a458739b8c8edfa992dc6b5887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:42:07:15:b8:41:b3:e6:74:bc:7a:f2:19:c4:
c5:a6:c3:5b:9c:b4:40:fd:24:aa:76:20:3a:d5:62:
0a:e8:1a:f3:2b:30:72:4c:09:ad:bd:05:61:fc:a7:
fd:da:d4:69:31:87:5e:da:31:66:bc:48:ae:5f:49:
5b:3e:b2:43:e0:80:c2:2c:f3:ab:48:2b:a0:16:a7:
3d:98:de:e7:77:d2:4d:ea:fe:99:00:18:ad:2a:f9:
01:c5:ed:30:94:57:45:47:f6:87:56:21:c6:21:0c:
f0:7d:14:62:0a:75:e5:27:08:49:39:40:47:80:5e:
b9:4f:cb:ad:13:7f:72:a5:b5:2e:ec:f2:91:c2:a4:
51:69:e2:fd:dc:00:cd:db:5c:81:8f:6e:f8:01:81:
57:45:32:eb:18:0e:d7:a9:f2:79:97:3f:ce:3b:df:
39:bb:ac:e1:ac:e9:08:e9:d2:66:6f:12:ef:8b:0a:
2b:8b:17:c8:f6:b3:cf:f4:50:ba:38:72:42:5b:d4:
d7:4b:a8:a4:92:f5:97:b8:9f:1d:6f:a0:11:46:1c:
d1:de:5b:aa:2c:a3:ec:13:1c:f0:c2:88:44:66:d0:
f4:00:13:98:d7:93:4f:0a:23:1e:ec:4f:bf:66:ab:
79:d2:a3:b6:96:7b:0e:0f:32:01:40:f4:2a:71:f7:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DB:77:11:DB:69:F6:A4:58:73:9B:8C:8E:DF:A9:92:DC:6B:58:87
X509v3 Authority Key Identifier:
keyid:92:CA:E1:1D:E7:74:DA:EF:05:27:42:46:3C:E9:54:F5:21:C6:D2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:56:7f:71:e1:1b:72:55:4e:5f:bd:05:76:3c:7f:64:35:11:
e2:16:db:58:89:39:87:74:49:81:be:ed:d7:2e:78:67:61:3e:
9d:6a:0a:fb:f9:25:cc:ed:57:85:47:25:1e:ee:a6:ab:c4:2d:
d8:47:ee:97:90:9f:e6:98:7e:38:c8:a2:5a:7a:17:ec:c0:c5:
a7:e1:14:ad:e3:59:46:65:fc:7b:3b:74:d7:ff:65:bf:d8:05:
04:58:14:88:02:cb:7f:3e:a2:81:07:fa:5a:a2:3d:ff:b4:9d:
43:fe:15:74:f1:f1:ef:1d:e0:03:4d:09:64:79:99:25:5c:1b:
3b:ae:6e:61:3b:a3:a4:7b:09:d6:52:6f:ef:48:86:7f:7d:ec:
a4:c8:71:84:34:0c:7f:6d:78:63:b4:44:2a:ec:12:19:9e:1a:
59:55:97:c7:bd:3d:82:f0:1e:bc:70:0e:14:45:87:60:e9:10:
da:c6:8f:95:2a:fe:20:a6:0f:d9:81:27:f9:a0:ee:82:dd:1d:
a3:99:dc:62:21:9e:ea:16:a9:ee:f5:6f:ef:85:d3:c0:36:dc:
72:84:c5:bb:38:a2:b6:3d:a6:2e:a4:c1:bd:54:a7:a6:cd:1c:
12:c8:d4:86:0b:fa:c7:13:6a:85:b3:25:35:9f:db:be:2a:38:
a3:c1:12:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:40 2025 by rpki-client