Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
File: k4KIfhkEky8RhsLDHGqS_17GQ4c.mft (raw, json)
Hash identifier: 4xclBqvu21hlP6OtTQzJXkUIi8XjiorIrfu9Tw5rySs=
Subject key identifier: 39:24:67:7F:DF:1A:8E:C8:5F:C0:5A:F5:F1:97:CC:BA:37:7E:27:37
Authority key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
Certificate issuer: /CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Certificate serial: 0194BD857AD1D6A2BDBF34BF8B2FBFC66442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
Manifest number: 015A
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: k4KIfhkEky8RhsLDHGqS_17GQ4c.crl (hash: OzCcolKBkS37nFA+gB4bXWwZb8ubUfAPVTDlBHxoApk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7a:d1:d6:a2:bd:bf:34:bf:8b:2f:bf:c6:64:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=3924677fdf1a8ec85fc05af5f197ccba377e2737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:2d:b0:75:2f:f4:d9:65:ac:e7:f5:37:04:
06:60:07:8a:4e:40:99:ed:58:d3:15:6c:7a:24:03:
f9:94:16:a8:9c:33:4e:70:a8:de:a8:1d:a7:a3:1f:
9c:40:44:d4:df:0f:a6:68:62:d2:b3:d5:f1:45:20:
e8:f0:b3:1a:7f:53:e0:2a:5d:8e:47:f3:93:53:36:
f1:20:d5:b3:9e:b5:cd:99:85:1f:80:2b:86:7c:23:
ba:f6:9a:c9:48:b2:46:df:77:63:db:61:50:19:71:
13:9e:12:6e:90:b3:33:2a:61:ba:8e:ca:52:09:fa:
17:4f:69:d1:7d:ad:13:aa:41:6b:f6:14:96:e1:32:
eb:b5:39:a0:53:4d:84:b3:2c:dd:0f:ac:7c:c6:b6:
73:2a:c7:87:c6:15:9a:d4:bb:cf:1d:0c:60:f6:ab:
17:57:08:50:94:0d:73:a8:29:30:fe:d1:2c:a1:0f:
4f:9f:da:aa:b7:a0:35:d9:d1:8d:5f:b9:4e:ba:7e:
f5:4e:b7:dd:bc:5a:45:94:92:29:39:39:6d:32:f8:
1d:eb:b5:8b:9b:1a:d3:49:d1:92:4b:ae:aa:cd:58:
ac:c0:55:ba:eb:63:b1:ff:87:29:0b:a2:6f:ce:bf:
59:49:65:78:bc:d3:7a:41:c7:af:a5:23:c4:61:ff:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:24:67:7F:DF:1A:8E:C8:5F:C0:5A:F5:F1:97:CC:BA:37:7E:27:37
X509v3 Authority Key Identifier:
keyid:93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:06:95:0b:7b:2a:c1:b7:3d:56:e2:5b:42:cd:96:8e:7d:0b:
91:ca:16:ad:82:21:2a:02:c4:c3:73:da:90:de:44:3c:91:32:
08:fd:e8:c2:c5:d4:34:46:e5:3d:39:d3:0f:2d:23:24:2a:4c:
03:95:29:f9:bd:f9:5b:b5:37:8a:31:9f:09:51:a6:ef:35:5d:
16:9c:c0:1e:b3:73:9a:b7:87:75:be:96:eb:f7:ff:0a:ff:35:
2e:c5:59:16:f5:96:d5:df:17:81:c8:02:7f:74:a5:f6:0c:55:
50:09:70:7c:54:23:22:69:c6:65:88:8d:e7:5b:9d:46:08:ab:
a2:1b:a3:e4:28:af:66:97:6e:a9:71:58:26:de:c7:38:93:27:
d8:ec:90:1c:e7:83:16:ca:16:8d:91:84:ff:23:88:60:4e:31:
c3:29:83:3e:80:44:59:e2:cb:76:f2:28:d4:af:1d:5e:0b:fe:
7e:f9:d0:26:4c:11:2b:b2:83:26:54:c8:30:b4:28:72:cd:d2:
d8:ed:ee:69:3d:ed:0f:78:52:1a:bc:72:32:a5:4f:78:8f:4b:
c2:96:08:d9:7a:8d:30:3c:3f:e6:d1:b8:e6:fa:88:31:1a:ce:
ed:56:da:5b:1f:f4:5d:53:cc:97:cb:90:e6:ae:7b:7e:33:19:
d3:2c:1d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:34:05 2025 by rpki-client