Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
File: KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft (raw, json)
Hash identifier: VKPCqu7496TxXRfzM0s1z1QhgQeKLTlsZ+icOXGNK1w=
Subject key identifier: 01:99:76:52:A1:72:ED:5E:16:2B:99:CD:63:CA:22:3A:E8:0C:3D:33
Authority key identifier: 28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
Certificate issuer: /CN=28fa456d1c23678621954ffbf493a323de2c4484
Certificate serial: 0194BBCED4B0967F5349F1FD6BE36A6BBB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
Manifest number: 0965
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl (hash: mIK9o9vdaU9Y4co2vEo3+CDQNKoaY+gLS5KHRQOmpck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d4:b0:96:7f:53:49:f1:fd:6b:e3:6a:6b:bb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fa456d1c23678621954ffbf493a323de2c4484
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=01997652a172ed5e162b99cd63ca223ae80c3d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:f2:84:61:d6:12:1a:c7:a5:2e:25:3c:cd:
17:69:a1:37:41:5f:5b:4d:b2:74:2a:86:2e:b7:67:
4d:81:d1:8b:c8:32:12:ee:3c:37:98:28:8d:09:f0:
7b:5c:5c:65:f1:9c:47:34:9f:fb:24:7e:7e:f6:ca:
8d:3f:9b:ee:fb:67:7a:8b:83:c0:20:8a:69:50:89:
fb:7d:86:2b:0f:21:dd:cf:e4:38:5f:62:8a:ed:9e:
df:ae:f9:49:44:c7:11:44:80:10:17:59:ed:f5:2f:
15:3b:b9:52:af:89:e8:c7:78:27:bf:fa:8c:a3:65:
6d:46:7e:b1:a0:1b:4e:e3:a8:06:80:b4:b7:88:1e:
61:00:00:9c:f6:e3:75:85:54:a9:2c:3d:d9:3c:b0:
62:b3:9d:23:55:b5:69:87:c5:a1:df:92:6e:e2:d5:
35:d4:b3:df:a2:a8:3f:a9:a3:91:ee:f7:5d:09:ff:
bd:1b:60:34:72:dc:5e:ae:31:6d:54:1d:cf:99:c0:
79:8c:0b:4f:df:5f:be:34:20:e0:d4:56:5d:c0:73:
08:0d:6e:d6:05:12:8f:04:56:14:4e:a2:aa:b1:74:
5e:3e:a5:31:c8:11:77:bf:79:ec:af:cf:8b:05:5b:
d2:01:2c:72:06:6a:01:65:40:87:1c:0e:1d:5c:33:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:99:76:52:A1:72:ED:5E:16:2B:99:CD:63:CA:22:3A:E8:0C:3D:33
X509v3 Authority Key Identifier:
keyid:28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ec:9e:1a:cc:2f:9b:b8:68:ad:88:24:21:34:01:7a:8f:f1:
a7:1b:58:65:e9:2a:54:84:73:1b:42:9b:51:88:00:0c:34:01:
6f:72:2b:4c:4e:1b:8a:46:3c:2e:65:61:4b:65:b3:6e:0b:9b:
6a:fc:15:c8:e0:68:d4:80:50:57:f3:5a:92:b0:f5:fe:91:8c:
98:24:83:32:7d:e0:de:dd:49:ee:c5:a0:69:1a:03:5a:f3:2b:
b6:c9:1f:5f:9d:a0:c0:52:e0:0f:ff:28:8c:9e:21:7b:03:fe:
74:2c:80:75:df:9e:1b:eb:22:d9:66:5a:ac:7b:21:44:e4:90:
04:87:54:ee:86:19:fb:23:2c:23:bb:e1:43:0c:a9:db:7e:70:
74:73:8a:84:09:14:59:8b:40:e1:3e:6b:ca:ed:64:73:5f:f1:
4c:09:2f:1a:fe:9f:14:15:52:2d:6c:6a:be:15:7e:95:a4:70:
e5:0e:2c:da:43:8d:1d:f0:79:98:81:3d:b4:90:d6:f8:3c:75:
9f:1d:f2:35:6c:8e:54:88:33:c6:a2:59:74:ca:5b:ea:85:81:
43:2e:50:9e:1a:af:a2:fe:f0:ea:4a:ea:af:a2:27:41:47:c5:
20:6f:b8:25:f7:e9:b8:3f:32:00:20:35:d0:c7:eb:5a:1f:96:
49:48:92:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:45 2025 by rpki-client