Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/66f70d-8975-4b51-a500-87fc27b6ab4b/1/KLq5DsqMJXdPVS6MVeom7JYVdEA.mft
File: KLq5DsqMJXdPVS6MVeom7JYVdEA.mft (raw, json)
Hash identifier: 8Wlz5y8GkGvB81bUiSlYdQ9pDaKkfuLBRLKrPqbIz+U=
Subject key identifier: BB:29:2A:45:76:3F:ED:63:9A:02:E4:1D:30:68:8B:61:13:FE:82:54
Authority key identifier: 28:BA:B9:0E:CA:8C:25:77:4F:55:2E:8C:55:EA:26:EC:96:15:74:40
Certificate issuer: /CN=28bab90eca8c25774f552e8c55ea26ec96157440
Certificate serial: 018AAD1A45D52322FE9DFF111F9020131062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLq5DsqMJXdPVS6MVeom7JYVdEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/66f70d-8975-4b51-a500-87fc27b6ab4b/1/KLq5DsqMJXdPVS6MVeom7JYVdEA.mft
Manifest number: 01CE
Signing time: Tue 19 Sep 2023 11:01:34 +0000
Manifest this update: Tue 19 Sep 2023 11:01:34 +0000
Manifest next update: Wed 20 Sep 2023 11:01:34 +0000
Files and hashes: 1: KLq5DsqMJXdPVS6MVeom7JYVdEA.crl (hash: vfFurgfjG4tSK3Qu4hvsm8U0GuUl3fyusifkRe0ONkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:1a:45:d5:23:22:fe:9d:ff:11:1f:90:20:13:10:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bab90eca8c25774f552e8c55ea26ec96157440
Validity
Not Before: Sep 19 11:01:34 2023 GMT
Not After : Sep 20 11:01:34 2023 GMT
Subject: CN=bb292a45763fed639a02e41d30688b6113fe8254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:4a:35:bd:62:88:54:3d:0d:78:83:b1:46:
00:c4:25:12:23:07:80:6c:27:32:de:f2:7c:61:2e:
82:ea:fd:4d:a6:4c:2f:74:db:13:a2:e0:d1:73:e0:
82:74:34:20:8c:58:a5:b7:be:7a:9e:d0:c9:2e:a2:
6f:3a:8a:67:c4:12:ea:18:2e:1b:50:ba:50:c0:53:
0f:e2:5f:3f:20:b4:38:72:bc:9d:c4:82:c7:dd:21:
88:2e:16:cd:fc:ca:9c:84:ad:df:0d:6a:63:28:f0:
8e:c9:bd:65:71:8e:d5:e3:ad:7e:de:22:4d:bb:d2:
84:52:78:4d:6a:bf:8e:3e:ea:49:a0:83:7e:db:3a:
76:76:cc:cd:32:68:90:45:5c:87:2c:da:b7:e4:64:
b1:75:a0:34:8b:d3:0b:8b:77:e4:ac:77:82:fe:3c:
87:27:c8:18:43:e0:51:a4:7b:c3:b9:84:51:22:88:
34:c2:b5:cf:a2:ad:e7:1e:93:dc:da:f4:1d:dc:37:
d3:e1:e7:bd:34:b6:1a:44:32:a8:00:06:bf:c2:39:
52:15:8a:35:54:46:ea:8d:af:52:78:7e:a9:b7:ce:
41:d8:67:17:71:b0:a5:77:f2:91:12:00:ad:04:46:
12:03:16:a2:c1:94:3e:3b:41:6e:bd:79:42:8c:f0:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:29:2A:45:76:3F:ED:63:9A:02:E4:1D:30:68:8B:61:13:FE:82:54
X509v3 Authority Key Identifier:
keyid:28:BA:B9:0E:CA:8C:25:77:4F:55:2E:8C:55:EA:26:EC:96:15:74:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLq5DsqMJXdPVS6MVeom7JYVdEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/66f70d-8975-4b51-a500-87fc27b6ab4b/1/KLq5DsqMJXdPVS6MVeom7JYVdEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/66f70d-8975-4b51-a500-87fc27b6ab4b/1/KLq5DsqMJXdPVS6MVeom7JYVdEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:88:8b:3b:6a:3a:40:68:6e:73:f8:b4:97:06:5a:3e:d2:21:
a1:cc:ec:f0:ac:7e:d9:8b:f6:6e:d3:ab:8f:3c:8f:9e:0b:a2:
ec:35:e7:d2:cf:44:2f:26:82:a1:b0:12:fc:7c:8e:ea:38:08:
85:2f:6f:a2:79:a4:b9:11:96:96:cc:0f:86:06:54:2c:07:14:
a0:20:b2:1b:e8:1d:9e:db:ec:84:90:85:70:e1:d7:cb:8e:aa:
ad:55:db:d0:95:d8:7f:65:ed:eb:58:60:13:64:ed:de:8a:f1:
d9:b3:97:29:b6:b8:f7:3e:d2:b9:9d:35:9c:f3:c0:b2:6c:1f:
0a:55:78:9e:06:8f:41:d3:1a:03:4c:ec:1f:aa:40:fc:50:10:
3e:27:93:9c:ba:66:ac:da:db:65:d2:94:ca:c9:ca:f8:98:a9:
ae:19:8e:e1:86:3d:b8:f7:e0:8b:34:62:cc:a4:30:1e:98:c9:
0a:f4:62:88:fe:d8:23:a5:36:ab:93:24:94:fa:9b:7d:3d:71:
9e:5b:a1:1f:e6:97:c4:21:e2:bd:d6:81:50:61:15:ef:39:ce:
db:3d:b6:c0:29:03:8e:58:d4:e5:dc:6b:c9:d6:48:e8:10:bb:
c7:52:5b:0b:44:4c:4c:a4:ca:3d:f2:37:18:76:96:7c:28:dc:
ad:30:de:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:46:11 2025 by rpki-client