Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/KF2zkwU489Eade4GhYSe8DfUwPs.mft
File: KF2zkwU489Eade4GhYSe8DfUwPs.mft (raw, json)
Hash identifier: hGn+WEb2SDy7J/utvq5GHpPbkeSZIbJoftubTtzCNyo=
Subject key identifier: D0:A5:03:84:41:65:6B:0A:D3:68:0F:75:31:43:1C:82:30:B5:BB:E1
Authority key identifier: 28:5D:B3:93:05:38:F3:D1:1A:75:EE:06:85:84:9E:F0:37:D4:C0:FB
Certificate issuer: /CN=285db3930538f3d11a75ee0685849ef037d4c0fb
Certificate serial: 018CAA4B0A4C7D468393830349BA8905A4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF2zkwU489Eade4GhYSe8DfUwPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/KF2zkwU489Eade4GhYSe8DfUwPs.mft
Manifest number: 0FFD
Signing time: Wed 27 Dec 2023 08:01:33 +0000
Manifest this update: Wed 27 Dec 2023 08:01:33 +0000
Manifest next update: Thu 28 Dec 2023 08:01:33 +0000
Files and hashes: 1: KF2zkwU489Eade4GhYSe8DfUwPs.crl (hash: xU7NSc4pwXGChbt/+X2xvMz0ob1xQbuWCeS05KPBtNc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:4b:0a:4c:7d:46:83:93:83:03:49:ba:89:05:a4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285db3930538f3d11a75ee0685849ef037d4c0fb
Validity
Not Before: Dec 27 08:01:33 2023 GMT
Not After : Dec 28 08:01:33 2023 GMT
Subject: CN=d0a5038441656b0ad3680f7531431c8230b5bbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:63:80:ce:42:82:85:71:6b:8a:8c:8e:77:92:
82:4c:75:4d:f7:b3:e9:d5:ec:56:f3:24:96:06:d4:
58:33:90:5e:b1:31:d5:90:28:f4:13:93:13:47:c4:
a1:73:5e:dd:e8:48:c7:18:e9:ab:45:64:8e:02:ae:
a3:d1:57:1d:40:13:d6:85:99:81:d2:ce:54:c2:6c:
ae:ad:f6:c1:22:b7:ed:7b:b2:c9:60:25:7e:7a:3d:
19:75:e9:1a:6f:da:8e:dd:0e:ab:dd:aa:f6:8f:b5:
94:84:ee:8a:f9:df:6b:02:4c:f1:55:b5:2e:7a:b2:
02:d0:22:0c:61:ec:c1:0b:55:1a:30:08:67:54:34:
1a:cc:67:c5:1c:2f:2f:27:6f:d2:ed:de:50:66:34:
61:21:df:d4:a7:bb:7e:a2:59:26:80:a6:d9:e8:5f:
0f:42:d8:6b:2d:d8:30:2e:0e:23:a3:5c:b4:6e:0c:
8c:8c:ca:bb:9f:18:94:eb:9c:a4:9f:03:03:fa:99:
eb:69:8b:01:85:a4:32:89:60:9d:bf:9a:af:3d:71:
82:c5:55:cc:1a:91:9f:8d:1d:87:01:92:ec:42:37:
54:ac:9a:9e:78:8b:b1:78:14:f8:84:52:db:d3:58:
d9:f8:9a:6f:f2:40:22:74:76:fa:0f:8a:74:2f:f1:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A5:03:84:41:65:6B:0A:D3:68:0F:75:31:43:1C:82:30:B5:BB:E1
X509v3 Authority Key Identifier:
keyid:28:5D:B3:93:05:38:F3:D1:1A:75:EE:06:85:84:9E:F0:37:D4:C0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF2zkwU489Eade4GhYSe8DfUwPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/KF2zkwU489Eade4GhYSe8DfUwPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/KF2zkwU489Eade4GhYSe8DfUwPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f5:0d:49:3a:12:ec:79:ca:0b:d7:45:a2:0b:c0:68:59:a7:
af:11:74:1f:8f:6a:42:e8:bd:09:84:14:79:5c:bc:ec:27:b8:
7e:23:e9:2f:2e:9f:35:52:e2:23:ef:c2:84:a1:af:b8:db:2c:
ed:3e:8c:54:95:09:54:2d:91:8e:6b:69:94:db:30:7f:3f:1f:
f1:fe:16:76:af:85:ee:52:47:95:85:bc:2b:d9:dc:07:6c:86:
38:1e:7d:be:08:cc:4f:34:6b:93:a8:ba:25:93:33:0b:87:9c:
97:c6:c6:df:c0:c2:ef:a4:56:4d:62:3e:eb:01:51:22:5d:73:
de:68:0e:77:9a:2f:c6:24:79:98:bb:c8:14:82:85:e5:a7:37:
2c:2a:d1:7d:2b:3c:76:02:27:8e:6c:84:16:d2:b2:d1:bf:e2:
1d:81:30:e5:cb:3a:6d:ca:f5:06:ef:3f:85:60:bc:e4:16:2b:
f7:1a:df:81:5c:81:56:2e:dd:3c:a9:89:e7:54:f3:a7:ae:b4:
af:cf:f5:ba:b9:2d:50:c3:2a:92:d9:b7:67:dc:f3:6f:07:0f:
56:61:1d:64:92:1f:25:25:df:ae:d5:f5:83:03:1b:5a:2b:d1:
5f:6e:0c:09:ea:ed:86:0a:7b:7c:79:4b:71:15:80:5a:e7:ed:
0f:58:be:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:34:18 2025 by rpki-client