Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/536a38-9759-40e6-aa19-250d1f3b900f/1/KnB15IEB6u0d47vdysN8mMtiXuY.mft
File: KnB15IEB6u0d47vdysN8mMtiXuY.mft (raw, json)
Hash identifier: 8PY2TFED6xUQGQGEZaG9ngtYMcWtJagG6YxdRSckr1g=
Subject key identifier: 74:42:C4:8A:72:92:22:4B:43:8D:54:C5:C2:24:92:33:7F:CA:DD:AE
Authority key identifier: 2A:70:75:E4:81:01:EA:ED:1D:E3:BB:DD:CA:C3:7C:98:CB:62:5E:E6
Certificate issuer: /CN=2a7075e48101eaed1de3bbddcac37c98cb625ee6
Certificate serial: 019514A3A2C77FC6E0616DAD06573DD8A275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnB15IEB6u0d47vdysN8mMtiXuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/536a38-9759-40e6-aa19-250d1f3b900f/1/KnB15IEB6u0d47vdysN8mMtiXuY.mft
Manifest number: 0B
Signing time: Mon 17 Feb 2025 16:00:23 +0000
Manifest this update: Mon 17 Feb 2025 16:00:23 +0000
Manifest next update: Tue 18 Feb 2025 16:00:23 +0000
Files and hashes: 1: KnB15IEB6u0d47vdysN8mMtiXuY.crl (hash: g9XIfHpdA5IDZTrGSUDaRlKVbwTLPokq+8TWkinm1MU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:a3:a2:c7:7f:c6:e0:61:6d:ad:06:57:3d:d8:a2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7075e48101eaed1de3bbddcac37c98cb625ee6
Validity
Not Before: Feb 17 16:00:23 2025 GMT
Not After : Feb 18 16:00:23 2025 GMT
Subject: CN=7442c48a7292224b438d54c5c22492337fcaddae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:30:40:f9:b5:26:5f:dc:a0:29:33:51:8b:
f4:c0:c4:c3:bf:a6:06:bd:8b:07:05:97:5e:18:93:
7e:52:3b:11:e8:79:6a:e6:40:20:b6:aa:ab:a1:51:
85:5a:10:39:c6:22:1a:81:67:00:75:cc:29:c0:f3:
51:76:0d:73:6e:c3:5c:78:e4:e7:50:aa:9e:e3:67:
3f:79:b2:4c:fb:99:d3:36:ae:aa:64:19:3c:33:e2:
37:27:a6:1a:a8:7b:37:a2:f9:df:03:24:45:ba:ee:
0b:a8:7d:e8:d2:ea:b3:98:45:b5:eb:c0:0e:46:43:
e5:1a:ff:0d:68:35:be:a2:5e:ef:d1:bc:c1:2f:9a:
74:c6:2b:b4:79:7b:be:55:1a:cb:ce:91:c5:b4:0b:
7f:f7:2f:31:f6:70:16:7c:42:79:01:6a:9c:db:0c:
5c:b9:78:bf:8f:d1:02:8e:92:ad:6d:da:20:88:15:
3f:3b:4e:4a:42:2c:fd:28:b1:ae:81:50:9f:99:4e:
a7:bb:bb:b6:f9:69:10:73:b4:e8:58:07:a6:09:5e:
6a:85:7d:42:2b:9b:c2:94:b3:70:25:73:77:25:06:
9f:bd:2e:76:3e:b8:19:4d:9c:5c:14:dd:33:13:e5:
5b:52:c0:bb:6c:63:a3:7a:aa:d4:cd:98:66:fe:b3:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:42:C4:8A:72:92:22:4B:43:8D:54:C5:C2:24:92:33:7F:CA:DD:AE
X509v3 Authority Key Identifier:
keyid:2A:70:75:E4:81:01:EA:ED:1D:E3:BB:DD:CA:C3:7C:98:CB:62:5E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnB15IEB6u0d47vdysN8mMtiXuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/536a38-9759-40e6-aa19-250d1f3b900f/1/KnB15IEB6u0d47vdysN8mMtiXuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/536a38-9759-40e6-aa19-250d1f3b900f/1/KnB15IEB6u0d47vdysN8mMtiXuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:eb:63:22:91:35:da:94:19:a2:8e:69:4e:85:a1:09:3e:48:
3d:6c:7b:fa:ac:ba:f7:62:77:2a:92:01:88:ef:0e:a1:cc:60:
2d:dd:24:81:52:30:b1:1e:23:8c:af:d1:31:20:d0:93:be:b8:
2e:0b:65:24:48:66:15:4c:0e:56:69:8f:46:f2:8c:ee:15:17:
1a:e8:2b:a1:f4:46:51:72:ea:c8:c9:fd:c9:d9:3d:ce:d3:8b:
ce:c6:47:87:9a:d8:cb:8c:58:a5:a4:5c:2a:d4:d0:6e:7b:35:
dc:5c:51:ab:70:5e:4a:98:54:02:9d:f6:b5:8f:fd:f1:8b:6e:
d3:8c:e3:59:8e:1a:26:12:51:dc:b2:70:64:3d:90:80:79:26:
e1:55:43:21:1e:cf:9a:2a:49:3f:70:35:a3:25:25:57:b8:23:
3f:fe:c9:f0:06:ea:d7:8c:7d:e5:45:0c:c5:68:aa:72:74:5f:
60:0c:9b:87:63:c2:a8:c2:6f:09:7e:a5:17:97:9f:ff:f1:97:
97:84:68:32:50:59:ed:a3:18:a2:fb:92:0b:fd:ad:32:6d:37:
4d:1f:d4:04:ec:d0:97:4f:5d:69:d1:0d:cc:bf:bf:f3:9c:1a:
59:e0:0b:65:b4:fd:e0:8f:5d:a7:36:e5:58:9f:9e:30:0d:7a:
7a:06:14:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:50:12 2025 by rpki-client