Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.mft
File: KseXKZzH3xxPAjwgeZYIti_iAsE.mft (raw, json)
Hash identifier: MiDoA6ZKd5HPsiteRfyxOX3166gknvYwkKNNHdxAxsc=
Subject key identifier: 4C:80:83:7C:4D:81:73:59:0C:AA:5B:9C:F9:85:FE:41:5F:35:E3:E1
Authority key identifier: 2A:C7:97:29:9C:C7:DF:1C:4F:02:3C:20:79:96:08:B6:2F:E2:02:C1
Certificate issuer: /CN=2ac797299cc7df1c4f023c20799608b62fe202c1
Certificate serial: 0195B25B34DE31E8391AE09B50C11026FFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseXKZzH3xxPAjwgeZYIti_iAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.mft
Manifest number: 064C
Signing time: Thu 20 Mar 2025 07:01:16 +0000
Manifest this update: Thu 20 Mar 2025 07:01:16 +0000
Manifest next update: Fri 21 Mar 2025 07:01:16 +0000
Files and hashes: 1: KseXKZzH3xxPAjwgeZYIti_iAsE.crl (hash: f6AOcFMzvoXSp0aAU3LjHEpEQZT/Bjp59rPiyqMVam8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:5b:34:de:31:e8:39:1a:e0:9b:50:c1:10:26:ff:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac797299cc7df1c4f023c20799608b62fe202c1
Validity
Not Before: Mar 20 07:01:16 2025 GMT
Not After : Mar 21 07:01:16 2025 GMT
Subject: CN=4c80837c4d8173590caa5b9cf985fe415f35e3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4d:a3:7d:82:41:46:18:ea:09:43:c0:54:67:
c8:21:0d:34:33:f1:57:be:a2:4b:b3:b2:89:27:34:
96:ee:01:f2:e0:0c:70:a5:86:fb:20:12:ae:f2:31:
11:e3:23:f0:0b:92:93:16:0b:45:59:98:53:b5:fe:
d0:32:5d:51:63:c4:14:70:dc:8a:aa:1c:ac:d2:f1:
e1:dd:5b:24:a9:a4:ab:65:31:be:35:40:2e:2c:8d:
55:46:a2:02:e0:cf:8d:dc:72:c5:64:79:45:80:44:
5e:22:e3:59:2a:67:8e:96:e7:2a:7b:eb:02:64:ad:
6e:5e:10:bc:bb:5d:7b:5c:e0:d3:e5:de:04:d6:12:
d9:f5:81:bb:fa:54:77:39:74:6c:fc:bb:a2:7c:f4:
13:96:0a:c8:87:a6:5a:18:80:04:f3:dd:23:54:c7:
89:43:58:6f:e5:15:ab:91:0e:3a:b6:69:be:aa:a7:
fa:41:6c:6b:61:34:f7:8b:10:43:d2:4a:3b:d8:e3:
47:6a:c6:29:35:16:2d:5f:ee:9e:bb:ec:d3:11:ba:
d2:07:33:19:73:f2:4a:5a:6e:ed:f0:4c:44:f0:ef:
44:5f:22:10:63:a0:9e:61:41:aa:bb:fd:a1:d4:0f:
da:8e:f8:5f:f5:56:f7:58:6d:7c:1b:02:25:f7:37:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:80:83:7C:4D:81:73:59:0C:AA:5B:9C:F9:85:FE:41:5F:35:E3:E1
X509v3 Authority Key Identifier:
keyid:2A:C7:97:29:9C:C7:DF:1C:4F:02:3C:20:79:96:08:B6:2F:E2:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseXKZzH3xxPAjwgeZYIti_iAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a4:1f:ed:0b:2a:87:ad:1b:28:ba:66:71:63:cf:b1:8a:4b:
71:64:95:37:5f:4b:f7:92:2b:f8:b5:7e:09:32:80:bd:64:29:
3b:3d:ce:28:2d:a9:aa:80:95:e0:4e:0d:64:02:0b:a4:a2:96:
5a:5a:9e:a7:c5:8e:77:82:48:4b:99:e3:ca:1b:d0:f3:23:17:
62:ff:3d:52:e6:e8:6e:8e:f6:f3:06:b5:ad:0c:84:fc:ff:be:
68:2f:a0:5a:ed:7b:a0:f9:a1:de:4a:0e:a5:f1:08:9e:67:6c:
00:37:f7:02:63:cf:6e:b6:c8:63:91:9d:e6:1b:6e:8b:13:4c:
89:90:4f:1b:35:83:79:b8:93:e2:1e:69:d6:f2:eb:16:bc:2b:
17:e0:a3:6e:5c:93:33:68:ce:6e:ba:b8:ed:76:a5:7a:b0:04:
01:92:19:19:0c:7e:7e:b2:4c:14:07:f9:76:97:a5:32:19:5c:
cd:7c:ba:97:43:c0:a9:46:b8:c9:e6:d8:e9:1c:2e:80:21:21:
63:bc:d3:d3:c3:9e:bc:d6:0f:4d:97:65:18:3e:16:35:a2:2d:
16:99:2e:a1:58:65:19:ae:fe:57:e5:aa:d7:b6:52:bd:d0:02:
2f:f1:7b:d0:5f:0f:aa:d1:79:09:b1:9f:bd:e4:d2:e1:6d:82:
52:c2:83:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:16:53 2025 by rpki-client