Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/83775c-03f8-4289-a1e6-a49279209f4c/1/kx3346_4-uFd8MZmA6uz1wyUaao.mft
File: kx3346_4-uFd8MZmA6uz1wyUaao.mft (raw, json)
Hash identifier: oTmwuByU91F6v2viFNePw1vO3yFU7Pf1nYeME3msfCw=
Subject key identifier: 0A:87:84:66:BF:EC:59:62:AE:E1:83:19:FC:42:2C:1D:D0:38:13:38
Authority key identifier: 93:1D:F7:E3:AF:F8:FA:E1:5D:F0:C6:66:03:AB:B3:D7:0C:94:69:AA
Certificate issuer: /CN=931df7e3aff8fae15df0c66603abb3d70c9469aa
Certificate serial: 0194805E575F5CE98C2E08F27BA93267EABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx3346_4-uFd8MZmA6uz1wyUaao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/83775c-03f8-4289-a1e6-a49279209f4c/1/kx3346_4-uFd8MZmA6uz1wyUaao.mft
Manifest number: 04
Signing time: Sun 19 Jan 2025 21:00:53 +0000
Manifest this update: Sun 19 Jan 2025 21:00:53 +0000
Manifest next update: Mon 20 Jan 2025 21:00:53 +0000
Files and hashes: 1: kx3346_4-uFd8MZmA6uz1wyUaao.crl (hash: r99A6gNz4rhVLRTgTVdmX9rkRW/4G5n2bn2CKvCoPRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:80:5e:57:5f:5c:e9:8c:2e:08:f2:7b:a9:32:67:ea:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931df7e3aff8fae15df0c66603abb3d70c9469aa
Validity
Not Before: Jan 19 21:00:53 2025 GMT
Not After : Jan 20 21:00:53 2025 GMT
Subject: CN=0a878466bfec5962aee18319fc422c1dd0381338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:06:ae:35:8a:75:ad:a5:af:f0:9e:43:b2:
a0:de:0b:d6:ac:e7:5a:bd:a8:d8:0a:93:da:11:2a:
7b:f7:d6:5c:f3:89:47:59:e0:8e:be:58:da:8a:5e:
8f:01:97:7f:6f:7c:dc:f1:b9:77:75:22:dd:3d:ca:
68:45:f6:f2:ce:f9:49:96:c3:0b:34:47:09:11:89:
8f:da:0c:13:f1:63:5d:a7:1c:62:27:b9:12:1b:55:
7f:8e:60:48:45:e1:b3:fa:90:fb:46:1c:73:0b:f8:
54:e2:c7:dc:da:89:e7:04:00:a0:c0:f6:f5:8a:4e:
68:4a:4d:85:4b:cb:e3:52:0a:86:bc:8d:41:38:b8:
e7:bb:89:05:12:48:9d:e7:d2:f7:f0:8f:e5:79:e6:
ae:f4:ed:fa:52:5f:dc:7a:04:38:da:b7:15:99:8a:
61:bc:9d:54:bf:ea:00:19:64:9d:64:53:8a:d1:e7:
00:bd:d1:16:ed:ec:12:d5:c4:f6:bc:09:61:8c:61:
03:10:07:5e:44:21:ef:12:f8:24:a9:aa:71:cf:29:
74:33:78:eb:db:46:1e:1e:bf:61:88:61:51:bc:a1:
44:98:24:f8:01:9e:77:58:23:31:f4:c5:dc:31:9c:
a2:c0:68:74:27:7b:b2:e6:63:89:eb:59:98:31:5b:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:87:84:66:BF:EC:59:62:AE:E1:83:19:FC:42:2C:1D:D0:38:13:38
X509v3 Authority Key Identifier:
keyid:93:1D:F7:E3:AF:F8:FA:E1:5D:F0:C6:66:03:AB:B3:D7:0C:94:69:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx3346_4-uFd8MZmA6uz1wyUaao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/83775c-03f8-4289-a1e6-a49279209f4c/1/kx3346_4-uFd8MZmA6uz1wyUaao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/83775c-03f8-4289-a1e6-a49279209f4c/1/kx3346_4-uFd8MZmA6uz1wyUaao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6d:bb:f2:af:87:39:57:00:18:86:ab:9e:b4:ce:c8:c7:45:
57:45:5c:b5:a3:25:38:2a:3d:8a:f1:28:2f:1b:19:89:ac:eb:
5b:09:e3:63:10:b2:07:dd:d8:21:69:17:ba:d6:a1:38:8b:01:
a3:0f:f4:ba:86:de:98:13:3e:00:c0:3d:b4:7e:8e:62:cc:42:
5e:46:c3:c0:82:a5:21:0b:b1:c6:63:91:cd:f7:1d:3c:39:bb:
dc:9c:74:d3:47:89:46:01:76:87:74:23:1b:90:e2:8a:34:bf:
fc:06:fe:34:29:06:3d:38:ac:81:8a:69:4d:23:48:7a:fe:20:
dd:75:fd:44:5f:31:64:2d:af:80:d5:34:09:96:38:f5:cb:43:
c9:aa:fc:6a:2e:dc:b9:ef:5d:c3:13:d6:40:33:fd:71:4f:a2:
8f:e5:f1:82:82:15:8f:b2:86:6f:69:62:8e:80:7c:a7:67:5b:
e3:80:21:e4:3c:63:c2:a7:30:51:dc:27:d7:7f:00:b3:b5:bc:
77:6f:df:e7:42:1c:14:eb:df:f8:52:ec:19:e2:3b:02:88:fe:
c2:05:44:84:b7:89:8a:a3:1e:1c:c7:6b:21:ef:bb:a2:1d:fc:
76:8e:b8:b1:28:a8:8e:d0:d8:f9:cb:19:34:81:53:a8:a7:af:
a6:48:88:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:34 2025 by rpki-client