Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.mft
File: 0KTK5w9yYh0Qn-4PCOLAw6DYfSU.mft (raw, json)
Hash identifier: TTEpVtzHPrlU68RhqB42hf5EibAD8bJWbbofG+uj/GU=
Subject key identifier: ED:4D:F8:3F:98:45:2B:39:1A:0C:9B:B4:2F:D0:08:92:7D:7F:DE:E4
Authority key identifier: D0:A4:CA:E7:0F:72:62:1D:10:9F:EE:0F:08:E2:C0:C3:A0:D8:7D:25
Certificate issuer: /CN=d0a4cae70f72621d109fee0f08e2c0c3a0d87d25
Certificate serial: 0193AFCCFB3623465B717F495AB65AEF4E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.mft
Manifest number: 139E
Signing time: Tue 10 Dec 2024 09:01:06 +0000
Manifest this update: Tue 10 Dec 2024 09:01:06 +0000
Manifest next update: Wed 11 Dec 2024 09:01:06 +0000
Files and hashes: 1: 0KTK5w9yYh0Qn-4PCOLAw6DYfSU.crl (hash: zUUjc/UHY6ekYLKjdkMuFbY9CHgVZKp+cfDALZ2T3Eo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:cc:fb:36:23:46:5b:71:7f:49:5a:b6:5a:ef:4e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a4cae70f72621d109fee0f08e2c0c3a0d87d25
Validity
Not Before: Dec 10 09:01:06 2024 GMT
Not After : Dec 11 09:01:06 2024 GMT
Subject: CN=ed4df83f98452b391a0c9bb42fd008927d7fdee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:a3:ba:ca:a2:5b:45:ca:d1:61:69:4e:2b:
9b:7f:a6:8b:80:bc:d1:e7:51:3c:60:b1:5e:5f:ff:
86:0b:fd:bb:d0:e6:56:12:55:f9:1d:7f:06:60:ad:
b4:11:fe:1d:7d:ed:be:21:de:b3:2c:e1:63:47:67:
1a:be:a3:94:7a:1b:36:e1:da:12:cc:ac:93:d4:b1:
51:7e:e3:c3:d3:48:ea:cf:8f:75:02:36:33:e0:b8:
e2:82:c1:86:b4:09:fd:ae:ed:a7:0c:94:f4:65:62:
59:91:c4:fb:4d:47:7e:e0:00:df:a4:2b:f6:53:25:
3e:93:92:fc:9a:d3:75:65:50:3e:10:42:2f:cc:8d:
99:f2:d1:06:43:5c:26:77:7d:5e:b8:42:b4:f8:0e:
86:b8:d2:93:87:b8:65:89:7c:9c:a2:40:72:23:ab:
46:99:76:20:84:ba:3f:62:b0:85:ff:09:96:c3:a7:
3f:78:ce:a4:ed:35:fd:d1:4c:39:2e:df:05:b0:67:
8e:9d:40:e9:cc:9b:57:88:88:80:44:a7:77:7a:78:
7a:72:1a:71:98:70:17:b3:5d:6e:d8:de:ee:d7:fa:
c5:91:7c:b4:8a:7f:00:8b:47:6e:9a:fb:59:70:34:
80:c8:cd:b8:7f:47:c6:06:88:13:1d:8b:b7:d6:6c:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4D:F8:3F:98:45:2B:39:1A:0C:9B:B4:2F:D0:08:92:7D:7F:DE:E4
X509v3 Authority Key Identifier:
keyid:D0:A4:CA:E7:0F:72:62:1D:10:9F:EE:0F:08:E2:C0:C3:A0:D8:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:93:4a:53:9e:3a:7b:e8:64:4b:e4:0c:30:1f:46:49:3c:e6:
9a:70:9f:92:88:20:81:7c:03:c6:41:4d:36:e6:62:e5:62:74:
04:7e:68:9e:17:de:c3:ee:92:34:98:7c:55:97:d1:23:15:67:
7d:49:bd:d6:74:89:5d:4c:cd:ba:c1:9f:b2:7f:77:5b:92:64:
ab:7d:c5:d0:8c:59:12:8b:bf:52:1d:12:e7:e6:5a:4f:9b:87:
f6:20:ae:9a:15:f6:73:62:47:d9:e0:6a:1a:1e:f0:e9:4a:b4:
06:4d:58:b0:eb:45:71:63:1d:9d:81:07:29:f2:a1:12:33:26:
ca:c3:ee:ca:05:cf:2c:6e:3d:99:29:c4:0c:93:3c:8f:68:33:
da:dd:41:09:c4:93:8a:15:9e:4a:44:ae:02:be:53:45:c2:96:
e7:53:3d:b7:b6:2e:d8:0d:93:d3:b5:34:f4:e2:20:71:26:85:
45:a7:0d:c2:63:b4:b5:d7:c7:55:aa:a1:80:e6:4b:de:94:f6:
a0:02:ac:dd:a0:84:e2:88:b3:91:62:48:6a:d9:3f:bc:7b:ee:
b0:ec:3b:c7:7a:ed:d1:7b:75:54:8e:7d:d1:ad:cd:1b:2c:b5:
e8:61:6c:4f:9c:ab:70:3b:7f:f3:6d:f4:1f:c7:f5:5f:23:ff:
76:aa:56:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:32:57 2025 by rpki-client