Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.mft
File: mk6XscuztWK0k7LTD4yaKW6fE8E.mft (raw, json)
Hash identifier: RXYVmfSJNHicYPiA9NiF009ExTCM70N/cICvLpmRQJI=
Subject key identifier: 87:D1:4B:CF:D7:55:ED:62:3B:86:9C:BF:CF:D9:CD:98:8B:18:E9:0B
Authority key identifier: 9A:4E:97:B1:CB:B3:B5:62:B4:93:B2:D3:0F:8C:9A:29:6E:9F:13:C1
Certificate issuer: /CN=9a4e97b1cbb3b562b493b2d30f8c9a296e9f13c1
Certificate serial: 01951C5DA89BF860D533B6EDDA025121FBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk6XscuztWK0k7LTD4yaKW6fE8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.mft
Manifest number: 145D
Signing time: Wed 19 Feb 2025 04:00:54 +0000
Manifest this update: Wed 19 Feb 2025 04:00:54 +0000
Manifest next update: Thu 20 Feb 2025 04:00:54 +0000
Files and hashes: 1: mk6XscuztWK0k7LTD4yaKW6fE8E.crl (hash: i+/zHCzx+BUTgZpvNZ5vCMLhxqmHV/i1lAxvZl283Wg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1c:5d:a8:9b:f8:60:d5:33:b6:ed:da:02:51:21:fb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4e97b1cbb3b562b493b2d30f8c9a296e9f13c1
Validity
Not Before: Feb 19 04:00:54 2025 GMT
Not After : Feb 20 04:00:54 2025 GMT
Subject: CN=87d14bcfd755ed623b869cbfcfd9cd988b18e90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:20:bc:79:4d:53:cb:19:ed:56:ee:47:82:
e9:1a:7b:72:cb:e6:3a:64:bb:bc:04:ed:44:91:e8:
39:1d:1d:53:fc:a2:3c:3e:e0:7c:c3:59:b1:79:65:
82:e4:ca:65:fe:62:9e:53:32:de:38:84:98:81:8c:
5c:41:e8:18:90:dd:31:e6:2f:d0:ec:fc:1e:aa:d7:
f1:0e:07:1b:9a:aa:67:f2:c6:44:4f:50:e2:a0:7f:
ee:b5:b0:0b:22:d5:31:77:ef:0e:b6:f5:90:a9:e5:
34:af:70:b4:91:e1:ea:a2:a0:c3:14:c8:40:f5:fb:
32:f0:95:e7:a9:d2:dc:5e:19:d0:6e:1e:df:b3:d0:
3f:b3:cc:dd:c4:2c:38:85:48:b0:cb:e3:95:5f:d2:
25:e6:d7:e6:bc:43:dd:50:7a:77:1b:c7:08:8c:1b:
2b:6e:70:2b:47:d1:9b:49:2a:1e:d9:68:0f:3f:46:
8d:9a:b4:36:07:6a:2b:60:bd:6f:59:36:20:6e:dd:
cd:47:74:d1:f7:50:62:10:42:dc:78:9e:25:b0:6c:
46:15:77:1e:f9:51:bf:60:73:e3:e7:3c:0b:9c:22:
eb:d5:49:92:55:10:82:f8:57:11:21:02:67:86:a7:
c4:73:15:2c:3f:1e:e8:a0:1b:d3:c1:51:00:c3:39:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D1:4B:CF:D7:55:ED:62:3B:86:9C:BF:CF:D9:CD:98:8B:18:E9:0B
X509v3 Authority Key Identifier:
keyid:9A:4E:97:B1:CB:B3:B5:62:B4:93:B2:D3:0F:8C:9A:29:6E:9F:13:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk6XscuztWK0k7LTD4yaKW6fE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/339cbe-b85e-486d-8f5e-1ee24d88b357/1/mk6XscuztWK0k7LTD4yaKW6fE8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3b:db:e6:28:11:97:cf:a8:d7:1e:8d:d2:80:b5:64:e3:d5:
f0:3e:93:71:f3:64:fa:c5:74:ad:52:5d:71:ad:75:01:af:4e:
a3:c3:1e:b1:b9:1b:68:ce:a8:c4:3d:27:96:ef:83:bf:56:56:
01:7a:5c:7b:50:ea:90:64:69:1b:f2:c8:76:8e:3b:61:5a:40:
ca:9c:2c:02:6f:e8:b2:c7:20:c6:d5:c2:28:c8:21:c7:43:cd:
f9:ee:68:7b:3f:3f:86:a2:1a:b4:11:aa:6f:77:71:52:1a:93:
5e:e7:66:95:c1:8b:f8:28:5b:87:08:6d:0a:2d:06:4b:c3:bd:
86:db:db:7f:e0:d6:29:66:19:85:3f:53:27:d6:61:29:17:c4:
94:6b:1e:8d:af:d6:6e:7c:11:a5:d3:35:64:4d:14:64:0f:04:
38:a6:20:7e:6f:71:9f:e2:6e:80:4d:70:64:3f:3b:00:9f:de:
ef:5a:b7:7b:6c:e0:bd:ec:23:a7:3e:0b:d9:13:ee:6c:66:cd:
56:45:06:ba:ae:a3:b2:ca:e4:6a:da:94:2f:d5:a4:ec:fe:f3:
72:2d:3f:c2:ba:98:3e:3c:fe:f6:e1:d8:f4:02:56:8f:b5:fb:
e8:2f:4c:36:bc:08:1e:30:f0:d3:df:f1:db:81:68:04:99:aa:
f1:f3:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:44:54 2025 by rpki-client