Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
File: Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft (raw, json)
Hash identifier: fsS/Ix5T9aZXi3c3NAvo7KDAcDX8o776ThMyLOzj0ho=
Subject key identifier: E6:94:C9:88:4A:57:EE:FE:A7:93:E5:2D:C0:02:43:C5:A0:A8:D0:2E
Authority key identifier: 2B:0B:77:19:C7:0D:DA:59:F9:33:A6:C6:70:3C:31:B6:85:08:9B:4A
Certificate issuer: /CN=2b0b7719c70dda59f933a6c6703c31b685089b4a
Certificate serial: 0194BCA9FBF1A729D1687CB4DC131B02F041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kwt3GccN2ln5M6bGcDwxtoUIm0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
Manifest number: 044E
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: Kwt3GccN2ln5M6bGcDwxtoUIm0o.crl (hash: UaKX1iEzlm5kNPxqKzzpiGMbuf5T7Gw3EifigZfV9G0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fb:f1:a7:29:d1:68:7c:b4:dc:13:1b:02:f0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0b7719c70dda59f933a6c6703c31b685089b4a
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=e694c9884a57eefea793e52dc00243c5a0a8d02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:fe:eb:c9:af:bc:ce:2e:d0:ad:5a:ab:85:
5f:4d:d6:5d:51:a8:14:5b:52:d0:9f:77:a2:52:a6:
03:9a:4a:b7:8d:83:87:0e:c0:af:b8:23:bc:e8:b7:
b9:c7:f4:1b:11:46:0b:90:4c:aa:f6:ac:29:d6:00:
14:a5:89:4b:f0:1b:96:8a:93:da:60:c6:f7:ec:44:
57:ce:02:50:a3:2a:92:ef:92:7e:76:51:2d:89:d6:
36:d5:14:83:0d:26:8f:40:63:f5:d6:17:fd:98:05:
51:9d:a2:45:b2:65:69:5a:a6:1d:56:c9:c3:1e:8d:
81:e6:d3:a8:7f:87:c5:72:5b:aa:1a:e6:d2:e7:bf:
7c:d3:d5:29:2a:d4:34:e1:92:c0:7d:eb:22:06:b8:
f5:72:ae:97:36:9b:73:0f:7d:5f:e9:9f:a4:6b:31:
58:9f:fb:16:73:e9:fb:91:d5:77:b8:78:d1:60:e2:
ef:bf:2e:d8:38:0d:52:ca:bf:43:e8:15:2d:a4:a8:
71:52:dd:15:6d:7f:94:26:e9:62:26:cd:e5:cc:66:
dc:c2:47:f5:76:98:a9:9b:f9:73:39:e2:0d:de:e4:
f1:d8:f4:19:9e:7c:82:97:2e:03:0d:00:fe:a9:d9:
b3:db:a4:f4:90:20:f8:82:73:96:01:74:ca:9a:ea:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:94:C9:88:4A:57:EE:FE:A7:93:E5:2D:C0:02:43:C5:A0:A8:D0:2E
X509v3 Authority Key Identifier:
keyid:2B:0B:77:19:C7:0D:DA:59:F9:33:A6:C6:70:3C:31:B6:85:08:9B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kwt3GccN2ln5M6bGcDwxtoUIm0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/Kwt3GccN2ln5M6bGcDwxtoUIm0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2c:5d:9e:e2:c2:43:e5:ba:8d:7c:67:fa:27:22:db:cd:4b:
a9:18:bc:67:66:a1:b4:f4:b4:8f:52:4b:35:a4:d2:a3:b8:aa:
c2:11:81:23:5d:f0:84:43:bb:14:1a:05:fc:47:27:d4:a8:fd:
fc:0a:fb:06:cf:da:12:40:4f:a6:d6:fb:e4:ce:4e:37:d5:60:
38:21:58:a0:41:91:06:42:9b:a3:3c:3f:e0:90:f5:52:fa:f6:
f4:83:ab:2a:d5:d2:c4:03:53:72:ef:09:c4:a2:43:5f:d2:a9:
e1:a9:2c:a7:67:73:b5:a7:66:38:39:78:9e:99:4e:9e:28:43:
ca:28:0c:81:a1:97:d4:ec:3b:9f:d6:2b:4c:c7:20:07:60:27:
1a:c4:5d:f1:c5:3e:5b:1c:52:7c:37:b2:3c:ba:f5:a1:5a:a0:
2f:46:be:90:05:b8:a2:1e:64:38:f1:14:fa:1a:08:9f:a6:78:
54:48:d5:98:3b:4a:81:87:62:45:c2:cb:f8:a8:d8:a3:2b:f6:
da:92:be:3a:db:a7:5d:42:4d:aa:bd:5c:bd:c8:55:90:8a:49:
b4:16:67:33:46:9b:cd:53:8e:ae:36:45:2e:a6:12:cc:7b:11:
41:b7:19:93:e4:20:17:ed:0f:f5:0e:53:fd:56:ee:38:1d:48:
7c:c6:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:36 2025 by rpki-client