Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
File: kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft (raw, json)
Hash identifier: 6WeO5+yGuwOHCT1Oi7KsPyi3QhSd8gDD9CqEpQe3eV4=
Subject key identifier: E8:CA:9B:0B:53:6F:36:75:40:08:7F:D4:15:18:84:40:FA:CE:BB:BA
Authority key identifier: 90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D
Certificate issuer: /CN=90f5928c752ad9a08cfeb1b88f463c3c0dd2e85d
Certificate serial: 0194BBCE7DC12FA148E418B8269CCACEF2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
Manifest number: 057A
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl (hash: vj/kTXdnn34eYe9eUVaunB/FsVMMvz/6/BnWgqe3y5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7d:c1:2f:a1:48:e4:18:b8:26:9c:ca:ce:f2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f5928c752ad9a08cfeb1b88f463c3c0dd2e85d
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=e8ca9b0b536f367540087fd415188440facebbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ef:6d:f2:48:a4:f9:a4:7c:42:32:14:d1:af:
15:40:26:ec:96:d1:61:f7:6e:e1:80:ba:31:f5:25:
a0:2d:ae:e9:15:86:18:93:39:ce:08:ae:01:d9:75:
a6:0c:44:e4:1c:f2:74:7d:7c:94:92:ca:f7:d2:4a:
b8:2a:77:c2:92:80:fb:38:a0:2b:de:4e:a6:12:2e:
66:5e:6f:bf:b5:cd:85:83:f5:b2:fc:c3:a2:fa:38:
54:29:89:ac:a7:9a:7b:85:b2:bb:3f:1a:c9:b1:f5:
55:32:00:89:80:16:e2:6d:2c:86:53:f9:b3:2e:01:
e9:be:59:51:b2:00:38:c0:72:14:c2:61:2a:53:ae:
a3:06:23:91:35:32:27:b8:0c:0e:df:11:a3:16:21:
f3:17:9c:d4:21:85:aa:ef:f4:90:8d:ee:af:9d:1e:
88:a1:9f:da:ab:cf:b8:73:2d:c5:d8:dd:b4:ce:b3:
c9:eb:cc:a6:8a:57:4a:a6:b7:62:e9:5a:e3:b2:f5:
ad:37:35:10:a8:94:bb:51:4d:57:1f:de:75:bd:96:
7d:ba:89:c8:44:8d:80:16:85:cd:da:e2:fc:de:e1:
00:5c:38:80:72:7c:9b:4c:0d:4c:9d:83:6b:3b:aa:
50:96:da:9f:41:79:58:35:ad:d5:b6:36:7e:72:a2:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:9B:0B:53:6F:36:75:40:08:7F:D4:15:18:84:40:FA:CE:BB:BA
X509v3 Authority Key Identifier:
keyid:90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:55:b6:59:fa:82:f7:45:2d:9b:ea:b8:4e:15:38:6f:3a:54:
bf:b4:27:9b:d9:da:05:3a:16:2a:ac:6b:38:d5:4c:85:c0:f4:
eb:43:67:fd:11:06:49:3c:41:2c:16:49:e2:37:d6:9d:4e:ac:
38:eb:81:15:b8:9a:f2:0e:08:e9:14:32:2f:fc:9b:b4:17:c5:
a2:23:4b:c7:af:37:27:75:56:20:0b:0e:cf:0d:47:7a:b5:c5:
c4:6b:1b:5d:16:e1:73:af:0b:a7:01:58:2c:5d:b6:00:46:7b:
60:66:14:90:4f:99:96:f9:50:05:49:48:b9:51:d7:2c:e8:ae:
ce:63:88:42:a5:58:d5:64:91:fd:78:ba:46:ec:3c:6c:58:f7:
75:20:9e:e5:e1:97:f5:a9:59:bb:ff:13:59:fa:77:af:02:cd:
40:15:05:88:20:12:00:58:61:f7:a9:3b:09:06:a0:71:55:18:
b9:27:d5:ea:8d:86:93:28:7f:55:33:1c:cd:f1:a8:a9:d5:2c:
59:fc:12:43:4b:d8:d8:08:cf:00:02:2a:61:52:b2:5c:a4:65:
0a:65:38:a8:77:1d:c5:24:e4:47:1d:27:3e:4d:dd:28:e2:06:
7e:a2:e5:bb:9d:c4:d9:46:97:9c:d7:61:df:49:da:ff:71:24:
ed:2f:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:14 2025 by rpki-client