Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/52dc3d-5c57-4c38-a439-2516c7e19674/1/Ksd-gAHw1KITg3ucZa2aHzPdi80.mft
File: Ksd-gAHw1KITg3ucZa2aHzPdi80.mft (raw, json)
Hash identifier: NCuu0MWAbQ2wLGD4w3OoUBW8acxtFiF0wxdvIPEzOHc=
Subject key identifier: B2:1F:A2:6E:4F:88:7D:02:77:01:E5:63:4F:6C:4E:F8:4B:7A:81:BA
Authority key identifier: 2A:C7:7E:80:01:F0:D4:A2:13:83:7B:9C:65:AD:9A:1F:33:DD:8B:CD
Certificate issuer: /CN=2ac77e8001f0d4a213837b9c65ad9a1f33dd8bcd
Certificate serial: 0188043990B48173320EBE59691CDB8EC0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ksd-gAHw1KITg3ucZa2aHzPdi80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/52dc3d-5c57-4c38-a439-2516c7e19674/1/Ksd-gAHw1KITg3ucZa2aHzPdi80.mft
Manifest number: 0D46
Signing time: Wed 10 May 2023 05:54:21 +0000
Manifest this update: Wed 10 May 2023 05:54:21 +0000
Manifest next update: Thu 11 May 2023 05:54:21 +0000
Files and hashes: 1: Ksd-gAHw1KITg3ucZa2aHzPdi80.crl (hash: gBI8P1gfDsY2PDzNch4ti5+mis0O1cfY/2MTHBJUrno=)
2: dlPkyof4ApNub8Vn8DnNSzZ8BCw.roa (hash: S/R8o56A31EqTLEk7FWeKKCvtBaNjSRyeEIs/ah/2r8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:39:90:b4:81:73:32:0e:be:59:69:1c:db:8e:c0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac77e8001f0d4a213837b9c65ad9a1f33dd8bcd
Validity
Not Before: May 10 05:54:21 2023 GMT
Not After : May 11 05:54:21 2023 GMT
Subject: CN=b21fa26e4f887d027701e5634f6c4ef84b7a81ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:8e:ea:b9:cc:ae:14:18:7d:0b:2b:09:b9:
c5:0d:57:b3:35:df:1e:ab:af:81:af:88:4e:fb:52:
58:5c:5d:c1:15:ce:28:50:dd:7d:d3:68:2b:c8:5d:
f6:a8:76:e3:4f:d6:c3:68:6a:73:0d:e2:06:dc:05:
63:a8:3b:b2:49:c5:c6:c6:d8:23:61:50:85:a7:07:
6e:19:f2:2b:b1:90:80:48:0f:52:50:ab:15:c4:dc:
43:54:89:41:ac:31:b6:7d:4e:7a:6b:65:6b:92:f2:
22:1e:43:29:3b:c3:5e:36:a7:09:02:b1:2b:b9:59:
c5:43:d0:2c:92:79:bd:b8:a0:79:ff:05:2e:f2:18:
8b:43:0e:e6:12:8b:24:9a:31:2b:86:f6:33:dc:15:
76:fe:2b:5c:b5:d7:09:93:70:f4:b0:8d:ef:24:63:
57:cc:a4:ec:b5:f8:e5:d1:2e:53:b9:d8:bb:5e:97:
c4:37:23:a5:0c:e9:29:19:65:f4:49:15:1e:7e:d3:
ac:cf:6c:12:47:a8:cf:df:49:82:be:43:61:7b:bf:
e0:e7:0f:5c:6f:d2:be:ed:d3:a0:d4:c3:03:a4:f5:
8a:59:b1:3d:32:f5:5b:8f:b0:02:79:c1:bc:40:1d:
15:07:49:8b:23:ce:1e:24:44:36:91:8e:55:83:65:
e2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1F:A2:6E:4F:88:7D:02:77:01:E5:63:4F:6C:4E:F8:4B:7A:81:BA
X509v3 Authority Key Identifier:
keyid:2A:C7:7E:80:01:F0:D4:A2:13:83:7B:9C:65:AD:9A:1F:33:DD:8B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ksd-gAHw1KITg3ucZa2aHzPdi80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/52dc3d-5c57-4c38-a439-2516c7e19674/1/Ksd-gAHw1KITg3ucZa2aHzPdi80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/52dc3d-5c57-4c38-a439-2516c7e19674/1/Ksd-gAHw1KITg3ucZa2aHzPdi80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d5:13:01:f4:6f:67:61:d1:a6:f9:aa:eb:59:71:71:5f:0e:
f2:9d:21:43:70:d3:61:7f:7b:1a:4d:08:e1:91:28:a7:6e:dd:
2a:24:71:14:da:1f:a6:f9:1c:de:b8:e2:0a:48:9c:c0:de:4e:
ff:d0:e6:a3:e1:a7:31:09:8a:a7:cc:c9:77:bd:7b:89:9b:2a:
34:8f:44:1d:a7:25:ee:a3:79:e3:5c:76:f3:03:32:c0:67:44:
9d:c1:ca:5f:4f:56:24:26:82:c2:d0:f4:10:4b:92:23:f7:3e:
b2:90:e4:36:f0:61:a5:2f:7b:a3:bb:dd:10:69:aa:88:27:35:
6c:98:ca:f9:11:06:e7:f6:81:c0:3c:77:24:d7:ac:90:f0:3e:
80:af:0e:4b:62:90:26:c0:5f:40:d5:5c:84:f3:32:ff:db:d5:
57:6e:e0:bc:b8:50:c5:54:47:cf:09:32:44:96:40:93:8c:14:
1b:08:5a:18:9b:04:31:8b:d4:1e:75:b2:6f:0e:b5:9b:f1:04:
fe:e6:cf:25:bf:ba:2b:60:fb:b5:66:35:b6:6b:56:93:78:d1:
e4:3e:60:9f:d1:4e:3d:28:f2:ab:c3:5e:9b:dd:64:92:f8:8b:
36:27:60:61:2d:a7:e0:ee:db:57:7f:25:6b:80:7d:87:b2:81:
de:24:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:16 2025 by rpki-client