Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.mft
File: kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.mft (raw, json)
Hash identifier: xFicH/gFPf/ZVBaGkibVyNaPIeJJ/ooC1JHfOWybiE8=
Subject key identifier: E9:9D:84:F4:CE:32:AD:76:C9:8C:42:85:66:33:90:63:04:36:A0:44
Authority key identifier: 91:2A:82:B0:E5:8A:27:ED:87:A2:DE:55:E5:E1:B6:02:90:36:56:D4
Certificate issuer: /CN=912a82b0e58a27ed87a2de55e5e1b602903656d4
Certificate serial: 0195C618FE8D4DDB0FFCE3B3BE89DE677748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.mft
Manifest number: 0145
Signing time: Mon 24 Mar 2025 03:01:21 +0000
Manifest this update: Mon 24 Mar 2025 03:01:21 +0000
Manifest next update: Tue 25 Mar 2025 03:01:21 +0000
Files and hashes: 1: kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.crl (hash: ISFP4BQyC76q9T7xd1eZrW8ALerOFFKr/uqoNuPj6ZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:18:fe:8d:4d:db:0f:fc:e3:b3:be:89:de:67:77:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912a82b0e58a27ed87a2de55e5e1b602903656d4
Validity
Not Before: Mar 24 03:01:21 2025 GMT
Not After : Mar 25 03:01:21 2025 GMT
Subject: CN=e99d84f4ce32ad76c98c4285663390630436a044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:2c:1a:a8:e6:2b:79:b4:cc:dc:19:28:51:
c0:4c:fe:fc:c0:7c:b6:83:36:d0:d4:2e:87:d7:77:
06:be:0c:d3:a8:45:58:54:cd:f9:9c:0e:9f:11:9f:
85:88:53:aa:55:33:3a:e3:8b:f8:5f:3b:e3:ce:fb:
96:ac:16:69:08:d2:47:46:74:23:93:77:06:c0:77:
46:f6:16:a6:9e:e5:51:4f:6d:39:5e:95:b3:22:66:
34:6b:90:19:2e:eb:2c:a5:70:c3:fb:91:50:5b:00:
53:cd:51:da:d0:6b:6f:d5:1c:86:2d:15:b2:c2:6d:
b0:92:c1:a0:37:a1:00:ec:ea:3b:07:17:58:b1:a3:
bd:10:4a:e4:51:24:a4:d2:f6:97:86:be:3d:f6:4a:
ab:60:9a:4c:f1:e3:f2:bf:67:62:50:e3:3a:38:1f:
7b:bc:fa:ba:60:66:38:e0:e9:a1:dd:b2:e8:bc:c1:
8a:19:53:57:bd:42:d2:0f:ab:d3:89:de:88:29:37:
68:b6:79:bc:ae:fa:20:d9:ba:57:dc:ae:25:a9:2d:
4c:2c:e8:90:e6:6e:7d:c2:e8:f8:4b:f4:d6:fc:f9:
99:06:7e:c9:25:3e:ad:f1:c3:3f:c4:a7:58:03:5f:
0f:6b:cd:76:54:70:d6:75:e3:3c:da:b0:70:6d:68:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9D:84:F4:CE:32:AD:76:C9:8C:42:85:66:33:90:63:04:36:A0:44
X509v3 Authority Key Identifier:
keyid:91:2A:82:B0:E5:8A:27:ED:87:A2:DE:55:E5:E1:B6:02:90:36:56:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ec:32:d7:b6:1b:8b:07:e2:c7:ea:16:d3:b6:0d:a4:fd:e7:
51:ff:2c:f2:dc:3f:de:9e:ff:aa:b7:ad:30:d3:35:07:13:68:
1a:71:e4:a7:8c:51:0b:7f:ae:86:79:a5:f6:a8:bc:d2:c1:51:
61:ea:64:78:89:4b:66:fd:cf:22:a0:c2:d9:4d:ca:89:c9:7b:
4d:83:15:1c:ca:85:8f:31:b6:36:d6:86:0a:f3:78:2f:7c:e8:
60:cf:65:45:cd:9c:95:7e:28:7e:bc:a0:ea:46:1d:f7:ed:ab:
78:94:d1:57:0c:1d:cc:c1:13:84:0f:c1:d6:6b:a3:b3:22:0e:
e0:50:6b:c0:b5:40:cc:ab:1e:27:51:44:2d:96:20:aa:30:14:
ee:7c:45:99:f6:aa:d1:14:ee:12:2e:4b:61:b2:93:64:fb:13:
85:0c:6c:c2:55:23:78:dd:6d:28:1b:bc:fe:17:c4:02:9f:23:
3c:55:da:f9:ee:9c:58:18:6c:ed:c5:e8:1a:be:68:44:9e:e2:
fa:ee:ba:4a:b3:f5:23:47:94:8a:42:83:1f:c9:78:9a:c5:77:
e4:36:21:05:ce:88:42:ab:a7:2c:06:d8:1e:f7:24:44:5a:cb:
e5:3e:d4:53:02:77:07:b7:74:92:ac:3c:9f:88:5d:fd:2a:50:
24:cc:76:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:34:22 2025 by rpki-client