Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
File: Kksu12XR1HipbYLxJgEen7dS_Ic.mft (raw, json)
Hash identifier: c+SpzkxGDgzZbdzc347Sexq+qq4TRHqCZuDg2inh7Oc=
Subject key identifier: 47:75:5B:D1:CD:81:AF:0E:4B:E4:AB:72:64:2F:21:52:CD:FA:65:E3
Authority key identifier: 2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
Certificate issuer: /CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Certificate serial: 0194BCAA263263AC08FE2757E3245AE51B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: Kksu12XR1HipbYLxJgEen7dS_Ic.crl (hash: zD2E7Zo7/kpu0VFSQHu5QNBVbeTBkcjCWlvy9AEy2ds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:26:32:63:ac:08:fe:27:57:e3:24:5a:e5:1b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=47755bd1cd81af0e4be4ab72642f2152cdfa65e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c9:3b:16:be:d7:ed:75:10:74:7f:74:d8:a5:
0a:8c:36:87:45:2e:17:07:49:f8:9c:52:08:10:2f:
f6:71:78:8c:6a:cd:40:a4:ce:47:cd:a9:82:c3:79:
d2:59:b8:0d:ab:2f:c5:2e:88:74:ea:2c:3d:9a:b1:
48:cc:2e:35:dd:69:b9:a7:5f:af:a6:5c:59:64:6c:
5a:39:8e:d0:6e:e1:93:35:11:79:1e:02:27:67:91:
c2:c0:31:4f:b2:9b:cd:28:08:7a:6d:38:fc:33:de:
87:8f:47:ea:cd:38:32:2f:aa:2f:2e:62:36:7d:ca:
9b:ab:9b:69:97:d7:28:a5:7c:46:94:e0:67:c2:de:
11:ff:3d:57:67:4e:72:3b:0d:63:66:fd:67:57:b3:
5f:59:5b:ff:99:bd:de:a4:57:43:9a:a2:58:f6:59:
1b:db:b9:e3:4c:53:98:c5:ad:68:ce:d1:eb:6b:9d:
d6:94:c8:38:9a:59:98:78:bf:57:ee:4e:e2:7a:33:
e4:6f:de:ad:11:7f:5f:b3:6e:80:f4:b8:5f:59:21:
52:74:0a:f0:65:8e:61:92:c3:db:a9:f9:ef:55:05:
ab:33:3e:53:91:9d:fa:40:50:89:5d:2a:2b:56:07:
4b:af:6f:af:03:58:07:54:b7:1c:50:3d:bd:f2:1e:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:75:5B:D1:CD:81:AF:0E:4B:E4:AB:72:64:2F:21:52:CD:FA:65:E3
X509v3 Authority Key Identifier:
keyid:2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:77:47:74:a4:ce:f1:4a:f4:da:cf:9a:ef:32:dc:bb:e4:a8:
81:9b:8c:c8:24:8f:18:b8:00:c2:b1:64:46:2f:96:a2:b7:57:
09:2a:86:a9:72:37:d5:22:11:c8:b2:e9:89:27:22:75:44:a6:
f3:64:40:3a:00:5d:d7:4e:d7:cc:60:ba:ba:16:2a:ab:72:0f:
73:fd:d8:24:be:25:98:af:61:49:3a:7d:75:24:19:c9:f9:ab:
2e:8b:96:9f:d8:59:28:f5:63:89:ad:7c:b2:3e:b7:a6:41:b4:
76:2f:6f:f6:28:8d:6c:c5:dc:a0:c3:4a:25:85:5f:21:c7:b0:
b2:20:0b:11:e2:e4:db:37:1e:d4:a0:b4:ad:18:d6:a2:75:c8:
a8:eb:a2:42:a6:e0:c6:ee:74:97:a1:69:1f:2a:d5:61:c0:e1:
56:8f:8c:3a:92:d8:ee:90:4e:b4:15:23:9d:42:a9:ba:f6:7a:
ad:b4:65:b1:13:be:6c:6e:c6:41:9d:72:81:be:23:4d:97:4d:
fc:5a:dc:1b:f4:e7:69:2d:40:51:bc:ed:25:80:74:25:35:7e:
a0:f6:f3:7e:1a:f6:09:c1:0f:83:98:1a:86:70:bb:69:ba:b5:
cb:11:2c:40:5e:cb:a1:49:02:30:fd:04:41:3d:6e:c0:b9:d2:
07:bf:07:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:00 2025 by rpki-client