Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/018b6c-7825-453b-bd79-69ce05a328e9/1/kbjY-KcZRyxzHyRE_DFLRB6LK7k.mft
File: kbjY-KcZRyxzHyRE_DFLRB6LK7k.mft (raw, json)
Hash identifier: o/KWPOYnYOWJFC0umaLsRGqX07fNeAKOwrhNMjqVq2g=
Subject key identifier: 0E:DC:5B:7A:E5:8C:77:0C:A0:FB:AD:87:05:D5:90:CE:30:3A:15:CD
Authority key identifier: 91:B8:D8:F8:A7:19:47:2C:73:1F:24:44:FC:31:4B:44:1E:8B:2B:B9
Certificate issuer: /CN=91b8d8f8a719472c731f2444fc314b441e8b2bb9
Certificate serial: 01856134360F2319AC7B568E8059AB646DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbjY-KcZRyxzHyRE_DFLRB6LK7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/018b6c-7825-453b-bd79-69ce05a328e9/1/kbjY-KcZRyxzHyRE_DFLRB6LK7k.mft
Manifest number: 0BEF
Signing time: Fri 30 Dec 2022 04:04:49 +0000
Manifest this update: Fri 30 Dec 2022 04:04:49 +0000
Manifest next update: Sat 31 Dec 2022 04:04:49 +0000
Files and hashes: 1: kbjY-KcZRyxzHyRE_DFLRB6LK7k.crl (hash: AaSdGv+owDZJ/XDBIHo+9QCmExKyJEaX3C9DMwP3SFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:61:34:36:0f:23:19:ac:7b:56:8e:80:59:ab:64:6d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b8d8f8a719472c731f2444fc314b441e8b2bb9
Validity
Not Before: Dec 30 04:04:49 2022 GMT
Not After : Dec 31 04:04:49 2022 GMT
Subject: CN=0edc5b7ae58c770ca0fbad8705d590ce303a15cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:8d:73:4d:30:8a:4b:d0:11:c1:95:8b:7a:
ac:0d:f9:8a:fd:97:3a:7e:82:11:f4:07:44:f1:37:
57:e1:0e:93:b7:ee:90:9f:3c:46:d9:8b:05:cb:18:
5c:97:fa:77:68:03:04:2e:53:54:72:c5:86:1c:19:
c6:c6:7e:35:82:1c:12:75:ac:96:6c:3e:40:82:7e:
5a:2a:6c:68:8b:12:a1:40:d0:38:9b:11:b2:3c:c4:
d6:33:7d:18:25:8a:83:11:e0:a7:72:2f:92:ee:0d:
11:b8:4b:0d:72:75:77:63:e4:78:9a:9e:7b:7f:43:
63:9c:a5:9a:c2:06:ce:be:fb:69:f1:b7:1a:55:45:
65:d7:c2:9e:eb:05:c8:39:f1:46:e3:a2:e2:a8:e1:
7a:82:c1:a4:3b:76:6a:37:40:c1:34:46:d7:2e:0a:
42:b6:d0:dc:a4:b5:47:d1:df:3c:22:54:4b:91:29:
ea:70:eb:8d:aa:01:a2:c2:83:e4:ac:c7:f7:bd:d2:
0e:cf:61:13:dd:39:86:38:b6:39:f0:24:a3:d6:ab:
e6:4e:47:eb:52:74:1d:e9:bd:16:e5:23:a6:03:31:
3c:ac:8d:65:c3:9b:82:13:0d:15:47:8c:6b:ab:77:
f0:1e:7d:db:13:bf:84:da:70:20:97:76:0a:df:7b:
ab:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DC:5B:7A:E5:8C:77:0C:A0:FB:AD:87:05:D5:90:CE:30:3A:15:CD
X509v3 Authority Key Identifier:
keyid:91:B8:D8:F8:A7:19:47:2C:73:1F:24:44:FC:31:4B:44:1E:8B:2B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbjY-KcZRyxzHyRE_DFLRB6LK7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/018b6c-7825-453b-bd79-69ce05a328e9/1/kbjY-KcZRyxzHyRE_DFLRB6LK7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/018b6c-7825-453b-bd79-69ce05a328e9/1/kbjY-KcZRyxzHyRE_DFLRB6LK7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:af:81:20:36:f1:b9:b9:b7:f3:83:7b:21:97:d1:d0:89:0f:
bc:c8:1b:01:ae:4f:38:60:ce:16:2d:27:42:56:6f:21:87:63:
b7:00:a2:4d:32:fb:2e:4b:72:ec:19:71:47:74:56:54:01:77:
62:41:9a:d9:92:54:1a:be:1d:e0:fe:a3:51:f9:38:5f:89:52:
ca:13:67:1d:52:de:5f:db:0c:7f:56:69:96:ad:8c:98:98:cf:
38:72:a3:0a:4c:41:70:84:17:43:cf:42:3c:b2:30:d0:2d:75:
cc:dc:80:72:29:a2:0f:7c:a0:ab:75:88:b7:64:a9:a8:c1:ab:
ad:4d:c5:07:44:a2:a3:05:30:f2:42:05:9c:62:42:b5:36:42:
29:4f:f4:37:46:71:40:f1:2d:f7:60:9b:49:49:c6:ce:5d:8b:
9d:95:0d:d6:08:70:c8:bc:91:8f:c1:23:a0:20:02:8f:28:4b:
da:2e:86:2b:46:73:8b:d2:b7:d2:65:ed:7e:2c:d9:9a:32:bf:
b9:ef:8c:05:4d:93:37:36:0d:25:2b:8e:6a:31:71:f9:d9:7f:
06:7b:f1:49:cf:05:34:06:b0:d2:e9:76:55:47:f2:44:4c:64:
43:7e:26:97:ba:83:bb:9c:a6:47:36:51:e4:9f:c4:b3:05:ec:
c7:ba:87:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:07 2025 by rpki-client