Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/871e8f-2672-476a-941d-0c25cede9937/1/KPX4DT7_vKwrRF5KIpjXcsNBOKE.mft
File: KPX4DT7_vKwrRF5KIpjXcsNBOKE.mft (raw, json)
Hash identifier: lHUrqHrzCcA8iWkNhtk50iVLoIDdMSJqMpEjHdVRca0=
Subject key identifier: 86:51:D0:A7:FC:F3:8B:E7:FC:20:25:95:75:FE:1F:FB:A1:92:FA:52
Authority key identifier: 28:F5:F8:0D:3E:FF:BC:AC:2B:44:5E:4A:22:98:D7:72:C3:41:38:A1
Certificate issuer: /CN=28f5f80d3effbcac2b445e4a2298d772c34138a1
Certificate serial: 0186E46BB3EDD0D62DD9641772FF699B02B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPX4DT7_vKwrRF5KIpjXcsNBOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/871e8f-2672-476a-941d-0c25cede9937/1/KPX4DT7_vKwrRF5KIpjXcsNBOKE.mft
Manifest number: 0CCF
Signing time: Wed 15 Mar 2023 08:38:28 +0000
Manifest this update: Wed 15 Mar 2023 08:38:28 +0000
Manifest next update: Thu 16 Mar 2023 08:38:28 +0000
Files and hashes: 1: KPX4DT7_vKwrRF5KIpjXcsNBOKE.crl (hash: n5OkqRC8lUlxY6qgv+m8RqfGy51s42yhtaXJeEwyApc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:6b:b3:ed:d0:d6:2d:d9:64:17:72:ff:69:9b:02:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f5f80d3effbcac2b445e4a2298d772c34138a1
Validity
Not Before: Mar 15 08:38:28 2023 GMT
Not After : Mar 16 08:38:28 2023 GMT
Subject: CN=8651d0a7fcf38be7fc20259575fe1ffba192fa52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:94:db:d5:2c:87:f5:71:69:cc:42:13:b8:
c4:54:f7:6f:18:aa:ec:c9:0f:af:0c:17:45:3b:fe:
19:0d:e0:16:d9:ad:da:e6:48:57:65:32:40:a7:df:
09:b4:0d:b6:e8:56:c6:a8:36:d2:7c:0e:06:01:4a:
87:a9:c0:5b:ef:59:f0:5b:bd:c2:5f:ad:d6:b8:9e:
84:ea:8c:3d:4a:c7:e9:b0:6a:90:32:fd:05:d7:2a:
15:ad:cb:f4:eb:f1:6c:b7:c3:18:32:6e:67:db:5b:
4f:bc:fa:a6:10:56:40:16:bb:4a:73:a4:35:65:0f:
e6:ec:1f:e6:bb:aa:05:13:a3:8b:81:e3:b5:1c:39:
4b:2e:c6:47:aa:73:37:8e:f2:89:f7:be:00:17:b0:
29:0f:3b:c9:55:9e:75:5a:0a:ae:2e:a6:36:fc:3c:
56:bb:15:46:bb:6d:b9:c8:ff:60:0f:f2:8e:c6:26:
96:17:28:66:80:5e:48:d9:61:bc:f0:88:ed:9f:4f:
ad:f0:b4:e7:7d:fd:87:52:05:d1:c2:cf:85:33:c0:
7f:78:ee:1f:84:d6:89:f5:24:61:2e:5c:51:49:c7:
a7:3e:ba:99:87:e2:34:3f:38:b2:f4:4f:9c:0a:10:
b1:77:84:6f:f4:3d:03:69:ea:e1:b3:68:af:23:cf:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:51:D0:A7:FC:F3:8B:E7:FC:20:25:95:75:FE:1F:FB:A1:92:FA:52
X509v3 Authority Key Identifier:
keyid:28:F5:F8:0D:3E:FF:BC:AC:2B:44:5E:4A:22:98:D7:72:C3:41:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPX4DT7_vKwrRF5KIpjXcsNBOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/871e8f-2672-476a-941d-0c25cede9937/1/KPX4DT7_vKwrRF5KIpjXcsNBOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/871e8f-2672-476a-941d-0c25cede9937/1/KPX4DT7_vKwrRF5KIpjXcsNBOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:63:2d:b1:4e:e4:9e:2d:b9:4b:13:7e:a4:48:2d:c5:1e:42:
42:e0:d5:44:71:aa:7b:48:30:66:d4:19:f3:4f:fc:dd:5a:71:
80:3b:67:81:b0:42:d6:48:bc:c3:22:be:88:a2:46:07:f3:97:
df:46:c9:2b:4a:c2:ba:db:44:83:8a:7f:63:2f:f8:b9:70:fc:
a2:ae:a4:e7:73:11:df:b4:be:dc:70:78:7b:32:24:c9:11:91:
99:99:32:59:76:4b:5c:29:c6:4f:c3:ba:2c:07:76:81:0f:d2:
40:56:14:4b:ab:b2:98:6b:ba:4e:4e:a8:7c:59:23:4e:8d:36:
41:0f:1d:fe:b2:5c:d0:09:32:12:b6:c7:7f:9c:a2:6b:4f:61:
ff:2e:92:c3:11:8e:b3:93:c3:82:f3:b5:b8:db:c7:2c:80:73:
1f:03:0d:b2:b2:f9:2b:e5:43:80:0c:4b:4a:cc:55:e3:b8:09:
db:8f:ef:f6:21:0e:38:35:96:f8:bd:d5:a4:6e:af:7e:8e:70:
3b:55:2a:9d:c0:4b:7f:bf:35:e8:dc:5d:0e:17:13:79:f4:0b:
f8:dd:7c:4a:ca:c5:a7:25:00:9c:8a:42:51:de:e7:ba:96:69:
1a:dd:9f:19:e5:9b:b2:15:31:87:32:29:97:f6:7b:9a:fb:48:
4d:5c:b1:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYbka7Pt0NYt2WQXcv9pmwKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjVmODBkM2VmZmJjYWMyYjQ0NWU0YTIyOThkNzcyYzM0
MTM4YTEwHhcNMjMwMzE1MDgzODI4WhcNMjMwMzE2MDgzODI4WjAzMTEwLwYDVQQD
Eyg4NjUxZDBhN2ZjZjM4YmU3ZmMyMDI1OTU3NWZlMWZmYmExOTJmYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxCU29Ush/VxacxCE7jEVPdvGKrs
yQ+vDBdFO/4ZDeAW2a3a5khXZTJAp98JtA226FbGqDbSfA4GAUqHqcBb71nwW73C
X63WuJ6E6ow9SsfpsGqQMv0F1yoVrcv06/Fst8MYMm5n21tPvPqmEFZAFrtKc6Q1
ZQ/m7B/mu6oFE6OLgeO1HDlLLsZHqnM3jvKJ974AF7ApDzvJVZ51WgquLqY2/DxW
uxVGu225yP9gD/KOxiaWFyhmgF5I2WG88Ijtn0+t8LTnff2HUgXRws+FM8B/eO4f
hNaJ9SRhLlxRScenPrqZh+I0Pziy9E+cChCxd4Rv9D0Daerhs2ivI8+TlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZR0Kf884vn/CAllXX+H/uhkvpSMB8GA1UdIwQY
MBaAFCj1+A0+/7ysK0ReSiKY13LDQTihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BYNERUN192S3dyUkY1S0lwalhjc05CT0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84NzFlOGYtMjY3Mi00NzZhLTk0MWQt
MGMyNWNlZGU5OTM3LzEvS1BYNERUN192S3dyUkY1S0lwalhjc05CT0tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy84NzFlOGYtMjY3Mi00NzZhLTk0MWQtMGMyNWNlZGU5OTM3
LzEvS1BYNERUN192S3dyUkY1S0lwalhjc05CT0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWMtsU7k
ni25SxN+pEgtxR5CQuDVRHGqe0gwZtQZ80/83VpxgDtngbBC1ki8wyK+iKJGB/OX
30bJK0rCuttEg4p/Yy/4uXD8oq6k53MR37S+3HB4ezIkyRGRmZkyWXZLXCnGT8O6
LAd2gQ/SQFYUS6uymGu6Tk6ofFkjTo02QQ8d/rJc0AkyErbHf5yia09h/y6SwxGO
s5PDgvO1uNvHLIBzHwMNsrL5K+VDgAxLSsxV47gJ24/v9iEOODWW+L3VpG6vfo5w
O1UqncBLf7816NxdDhcTefQL+N18SsrFpyUAnIpCUd7nupZpGt2fGeWbshUxhzIp
l/Z7mvtITVyxSw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org