Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft
File: KPXiqEB6tD1tJkGkeP-UkGUlb40.mft (raw, json)
Hash identifier: bzRi2udoP2NgBc3wJwjVw91zmMfHavBX7BkTbOm2+q8=
Subject key identifier: 51:87:1E:34:C4:DC:F0:E8:28:7E:08:53:82:35:CA:86:4B:65:9C:74
Authority key identifier: 28:F5:E2:A8:40:7A:B4:3D:6D:26:41:A4:78:FF:94:90:65:25:6F:8D
Certificate issuer: /CN=28f5e2a8407ab43d6d2641a478ff949065256f8d
Certificate serial: 019638409E551658AA3079FF96DFC996451E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPXiqEB6tD1tJkGkeP-UkGUlb40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft
Manifest number: 0FBF
Signing time: Tue 15 Apr 2025 07:01:20 +0000
Manifest this update: Tue 15 Apr 2025 07:01:20 +0000
Manifest next update: Wed 16 Apr 2025 07:01:20 +0000
Files and hashes: 1: KPXiqEB6tD1tJkGkeP-UkGUlb40.crl (hash: j6GJCzy+lFedZRrrquNBnItTJonqXbEmcAB0NBH/yIE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:40:9e:55:16:58:aa:30:79:ff:96:df:c9:96:45:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f5e2a8407ab43d6d2641a478ff949065256f8d
Validity
Not Before: Apr 15 07:01:20 2025 GMT
Not After : Apr 16 07:01:20 2025 GMT
Subject: CN=51871e34c4dcf0e8287e08538235ca864b659c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:ab:4a:f8:c7:0a:c4:ec:fe:73:fd:bc:3f:
d5:ac:5e:e2:19:54:0f:96:dc:62:61:2d:fa:e5:c0:
00:bb:cf:10:75:43:3e:15:08:95:7d:0e:4d:1d:0f:
45:5f:e3:b3:da:c7:fe:c3:31:5c:4e:f3:e5:d3:9a:
22:86:ea:04:69:e3:29:60:2e:d0:6a:a2:ef:7a:b9:
50:28:79:f4:5c:78:08:cc:62:e1:a3:2a:47:f1:7d:
bd:7b:22:b4:02:fe:08:32:30:d4:45:4c:1c:42:cd:
cb:f2:9e:4e:62:55:95:05:ff:a6:bd:64:bb:85:8b:
c0:80:ac:78:fb:10:2b:db:b0:94:2c:cf:75:60:ef:
5d:2f:c2:bf:ea:6f:62:8c:c1:c3:ad:37:aa:15:13:
a0:fc:63:8d:98:b1:32:02:9b:b9:36:6e:70:4c:2e:
26:ad:c7:40:99:22:7e:02:c5:2d:19:9e:61:12:8f:
c8:d8:b6:f7:e8:81:7a:a7:1e:1e:ee:08:17:b4:fe:
a4:95:9d:2f:0b:22:a0:cc:dd:73:c1:79:e9:6d:04:
73:6f:e8:fc:04:9c:f2:71:08:17:62:7d:98:df:8b:
d5:46:6e:3f:25:ad:84:92:66:23:0c:f3:a5:4c:cd:
df:5b:ba:96:7f:8b:0c:e0:00:b9:c5:2f:e6:6f:28:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:1E:34:C4:DC:F0:E8:28:7E:08:53:82:35:CA:86:4B:65:9C:74
X509v3 Authority Key Identifier:
keyid:28:F5:E2:A8:40:7A:B4:3D:6D:26:41:A4:78:FF:94:90:65:25:6F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPXiqEB6tD1tJkGkeP-UkGUlb40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f0:a9:5e:7a:a1:de:e3:3a:cf:81:4b:9a:f5:b7:b1:f7:81:
48:28:65:19:26:97:96:cc:86:c3:8c:e6:60:fa:bf:cd:36:d7:
22:cd:45:79:cf:3d:df:8a:23:31:87:77:23:43:3d:28:b5:b7:
15:2d:7f:4c:d4:e8:72:aa:35:46:fc:d4:8f:70:ec:03:1e:0a:
56:7d:dc:85:c9:e3:2a:e4:3e:1b:af:05:02:2d:a4:a5:78:93:
8b:47:8a:18:db:30:84:49:53:3f:b3:3a:74:0c:80:ab:11:c1:
eb:c7:e2:6d:be:58:15:1e:d6:d8:21:12:2c:0e:72:3f:45:74:
bc:13:1e:87:38:71:92:8f:06:c3:93:15:33:30:f6:b3:b9:02:
b9:15:7e:e4:fa:c0:85:3d:b1:fc:b2:14:ca:79:65:06:cf:ca:
f3:65:9b:a0:e6:6d:5f:0a:27:65:ef:40:13:a9:dc:f7:1a:4a:
85:c9:2e:bd:b1:ca:c1:15:20:3f:7d:af:53:7f:c4:5c:8d:fc:
23:08:6a:2b:e3:a8:63:8b:e3:ed:4c:d7:ea:9e:fc:fb:54:f4:
22:6b:19:c0:2b:bd:f9:5f:7d:68:0b:5f:de:5b:fb:63:54:ae:
a7:63:e0:02:ee:33:a3:1e:2c:ca:ac:a4:ab:90:2c:63:ec:a0:
c0:08:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:30:56 2025 by rpki-client