Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/883838-d53d-4004-b765-559ed317bf7e/1/kbXNRkxowMOro2kdk8UaPsfl7iE.mft
File: kbXNRkxowMOro2kdk8UaPsfl7iE.mft (raw, json)
Hash identifier: qBlFr5yhwdwCCtB+L1+VskY1VyIrI/e1Egvw/VPylUY=
Subject key identifier: F8:7C:55:C9:B5:B1:7E:EB:3D:C2:15:91:3B:5D:C6:A3:F8:5A:AB:CD
Authority key identifier: 91:B5:CD:46:4C:68:C0:C3:AB:A3:69:1D:93:C5:1A:3E:C7:E5:EE:21
Certificate issuer: /CN=91b5cd464c68c0c3aba3691d93c51a3ec7e5ee21
Certificate serial: 018528AE28CA5937796A305447DA14C74BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbXNRkxowMOro2kdk8UaPsfl7iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/883838-d53d-4004-b765-559ed317bf7e/1/kbXNRkxowMOro2kdk8UaPsfl7iE.mft
Manifest number: 08B5
Signing time: Mon 19 Dec 2022 04:39:40 +0000
Manifest this update: Mon 19 Dec 2022 04:39:40 +0000
Manifest next update: Tue 20 Dec 2022 04:39:40 +0000
Files and hashes: 1: kbXNRkxowMOro2kdk8UaPsfl7iE.crl (hash: THno78NGP5VhoA/wpHCgM7tpJpHjNIHXhGgU+JEPvHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:28:ae:28:ca:59:37:79:6a:30:54:47:da:14:c7:4b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b5cd464c68c0c3aba3691d93c51a3ec7e5ee21
Validity
Not Before: Dec 19 04:39:40 2022 GMT
Not After : Dec 20 04:39:40 2022 GMT
Subject: CN=f87c55c9b5b17eeb3dc215913b5dc6a3f85aabcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:5a:44:cc:79:68:43:ee:e0:1f:03:5d:6c:
9b:6d:ab:ab:e7:07:49:92:31:2d:c7:a2:03:9c:7a:
e4:0d:f1:82:c4:00:d8:b6:18:65:0b:58:8c:f4:72:
b9:c5:ea:ff:dd:ea:1e:06:43:a2:78:32:d0:62:58:
63:08:7a:9c:3f:47:2b:f4:b7:02:af:0d:6c:88:f1:
50:d1:ba:07:11:29:57:fc:38:3c:05:82:ea:bf:6a:
6f:68:ee:62:93:fc:94:ca:9b:56:7d:7c:76:3a:38:
87:da:58:d3:dc:5a:25:50:59:e7:c6:71:ac:ed:20:
0b:13:7d:20:d6:1d:a6:45:97:c4:3a:9b:04:3e:34:
91:f0:2f:da:2d:fb:46:90:de:00:96:ea:ee:e1:21:
43:66:f3:0c:17:a2:70:8c:72:77:d6:f6:fc:a0:12:
a6:41:f6:ed:36:ba:f7:14:1d:b5:81:d7:e0:34:4e:
fe:94:3f:c8:93:08:5a:e0:60:29:f1:b3:93:c5:fc:
d8:9b:4b:7d:f9:b2:9d:76:75:6d:d5:8e:0d:fe:70:
73:fd:90:31:eb:f5:11:ab:cd:0f:4f:9c:92:11:21:
b5:fb:fe:0e:2c:1c:1d:e6:c2:36:c9:de:e8:f6:a2:
d9:ab:7a:ca:0f:af:37:7f:cc:28:39:a2:1c:b1:01:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7C:55:C9:B5:B1:7E:EB:3D:C2:15:91:3B:5D:C6:A3:F8:5A:AB:CD
X509v3 Authority Key Identifier:
keyid:91:B5:CD:46:4C:68:C0:C3:AB:A3:69:1D:93:C5:1A:3E:C7:E5:EE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbXNRkxowMOro2kdk8UaPsfl7iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/883838-d53d-4004-b765-559ed317bf7e/1/kbXNRkxowMOro2kdk8UaPsfl7iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/883838-d53d-4004-b765-559ed317bf7e/1/kbXNRkxowMOro2kdk8UaPsfl7iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:40:e8:0e:2e:1b:b2:b7:58:d9:15:6b:5d:bf:16:29:05:78:
96:0d:bd:6a:82:b6:4c:03:24:dc:5c:68:a8:be:fe:d8:71:5c:
71:6e:47:ca:ae:63:3f:4e:71:14:07:65:1c:08:07:ee:ce:13:
3f:ec:16:cb:af:2e:ff:a8:75:52:e2:ea:6f:08:12:64:1b:28:
83:a2:a1:fb:01:60:eb:63:77:a4:8d:79:5b:31:1f:1a:df:d4:
25:c1:7e:19:2c:b6:2b:8d:c9:09:33:3a:1f:48:fc:8f:b3:3c:
d6:53:fc:4e:39:26:bf:f4:e8:95:57:95:d6:e0:34:21:3f:55:
3b:7d:e8:e6:7b:7f:13:e1:2e:bb:a1:3c:8a:ee:25:75:d5:68:
e4:21:75:db:25:e0:e4:ce:0d:d0:42:af:48:f7:33:a6:50:5f:
f9:07:4a:db:bc:55:cb:b0:ad:24:5b:80:71:19:0b:d5:f2:8f:
6f:b4:32:5e:20:02:3f:77:a0:22:b2:45:21:f4:eb:26:e4:97:
75:a5:e0:e6:b0:47:a4:4e:60:77:bc:36:78:83:f0:6e:f0:27:
13:4c:20:ed:91:e0:68:46:93:f5:48:5b:db:c3:9b:d3:96:a4:
42:3b:ba:81:f5:9f:ed:c9:4e:ae:61:60:cb:3e:df:fb:35:69:
8b:4b:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:05 2025 by rpki-client