Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/kjX6qImIoOVJ0vmepc0A2KPOhiw.mft
File: kjX6qImIoOVJ0vmepc0A2KPOhiw.mft (raw, json)
Hash identifier: UDUryUxZ4fvF9KALu+8SE0HlJxqapk9VC2hpKVWoWJs=
Subject key identifier: 25:9A:54:00:3B:9B:84:3C:F2:E7:E1:48:94:09:D4:C9:BB:80:6F:DE
Authority key identifier: 92:35:FA:A8:89:88:A0:E5:49:D2:F9:9E:A5:CD:00:D8:A3:CE:86:2C
Certificate issuer: /CN=9235faa88988a0e549d2f99ea5cd00d8a3ce862c
Certificate serial: 0188E39AE93096BA5BEAF92208A5735E6902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjX6qImIoOVJ0vmepc0A2KPOhiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/kjX6qImIoOVJ0vmepc0A2KPOhiw.mft
Manifest number: 0C95
Signing time: Thu 22 Jun 2023 14:55:59 +0000
Manifest this update: Thu 22 Jun 2023 14:55:59 +0000
Manifest next update: Fri 23 Jun 2023 14:55:59 +0000
Files and hashes: 1: kjX6qImIoOVJ0vmepc0A2KPOhiw.crl (hash: R7raUL6qTABnfkdCh8SsDU+kVx4AnTufBZ+Q1EEFnCE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:9a:e9:30:96:ba:5b:ea:f9:22:08:a5:73:5e:69:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9235faa88988a0e549d2f99ea5cd00d8a3ce862c
Validity
Not Before: Jun 22 14:55:59 2023 GMT
Not After : Jun 23 14:55:59 2023 GMT
Subject: CN=259a54003b9b843cf2e7e1489409d4c9bb806fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:82:45:70:ad:66:59:08:90:67:94:6d:b4:
26:41:b7:39:ee:31:7c:98:5c:e4:7e:8b:d5:48:08:
98:b1:b5:39:29:0f:45:13:1a:fa:01:2f:ed:ef:36:
c3:42:bc:cd:ae:25:b3:96:50:6c:35:32:57:28:89:
39:20:33:da:14:6c:4c:db:93:25:84:3b:a9:d4:d5:
69:ee:2c:48:20:af:a6:b8:0e:47:71:3f:04:51:3d:
25:6d:0d:91:ce:29:13:34:c4:80:3f:4d:5d:7f:44:
eb:7d:64:db:d0:a9:3d:3f:18:a8:69:c2:30:e4:c6:
8b:f4:b8:12:93:c1:d3:e3:66:e6:99:01:f8:26:42:
e0:c8:ce:60:60:78:5f:d6:dd:30:57:31:8c:4b:4c:
f9:eb:af:36:a7:a1:b9:be:e5:25:78:98:1f:c1:dd:
79:3e:fc:9c:4c:92:e3:80:f0:62:97:04:dc:53:60:
45:24:07:81:d7:11:fa:e3:91:a9:24:be:49:a4:2d:
60:2a:f4:a3:50:88:c5:f2:bb:9e:50:7e:c0:05:4c:
13:e0:9d:72:fd:2e:00:19:2a:c7:aa:39:d2:2a:fa:
82:b7:bb:85:6c:3b:b6:05:2a:f4:68:21:50:45:ad:
f6:0e:f3:2c:7e:b2:a6:94:7e:bf:05:e1:bd:c4:77:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9A:54:00:3B:9B:84:3C:F2:E7:E1:48:94:09:D4:C9:BB:80:6F:DE
X509v3 Authority Key Identifier:
keyid:92:35:FA:A8:89:88:A0:E5:49:D2:F9:9E:A5:CD:00:D8:A3:CE:86:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjX6qImIoOVJ0vmepc0A2KPOhiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/kjX6qImIoOVJ0vmepc0A2KPOhiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/kjX6qImIoOVJ0vmepc0A2KPOhiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7a:9c:d5:cc:ff:52:f8:68:b9:55:a1:cb:26:c3:b9:c2:20:
4f:e1:41:5a:ec:99:32:95:43:97:63:7b:d2:5a:79:c4:2d:9b:
e1:cd:d5:68:44:30:b7:fd:f1:40:c4:ea:30:3f:3b:ac:60:fd:
fa:37:9a:e4:b3:91:b9:6e:31:83:c7:7e:df:8d:69:7b:84:0c:
d4:22:cc:4b:b9:40:ae:0c:fa:3a:b7:48:fb:3d:60:1e:ad:dc:
8c:ba:3f:59:7a:a2:84:b0:b9:b2:ee:66:53:06:80:a3:fa:23:
56:c8:78:d2:d9:f9:81:00:ab:cf:46:94:e9:9b:d8:7f:f6:06:
c4:aa:1c:b9:dd:e3:bd:7b:d3:b7:67:44:fc:de:91:bc:d1:27:
06:00:93:2d:29:71:e8:8a:32:f4:46:89:79:44:56:2b:aa:ca:
34:c6:3b:5f:e4:2b:3e:f9:f1:81:3c:c3:d5:7c:5e:8c:96:f2:
65:d9:c8:a6:ea:de:06:32:40:c3:86:b7:7b:40:fd:d5:ae:75:
85:03:d7:82:09:3e:aa:5c:f2:d3:02:85:44:8d:ad:5b:cf:41:
29:46:b3:ba:91:32:b3:63:e5:f2:a6:03:df:91:78:93:66:49:
a1:a9:78:19:d4:de:fc:8d:04:45:c8:e1:d0:34:a6:61:00:5f:
82:40:77:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:55:38 2025 by rpki-client