Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/KBF9-rPlTTi1UzJZPMbJcUjVlVw.mft
File: KBF9-rPlTTi1UzJZPMbJcUjVlVw.mft (raw, json)
Hash identifier: +zwY6LoCG1d81mEzXzQsUOh0RfTIKI4R2wmFOZlGZNU=
Subject key identifier: 16:E3:1A:6F:FD:21:49:FD:21:B6:B3:96:16:31:16:3D:BD:B6:6F:AE
Authority key identifier: 28:11:7D:FA:B3:E5:4D:38:B5:53:32:59:3C:C6:C9:71:48:D5:95:5C
Certificate issuer: /CN=28117dfab3e54d38b55332593cc6c97148d5955c
Certificate serial: 019661AA4DC9C6C63808B7D9C6CFADB31B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBF9-rPlTTi1UzJZPMbJcUjVlVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/KBF9-rPlTTi1UzJZPMbJcUjVlVw.mft
Manifest number: 11
Signing time: Wed 23 Apr 2025 08:01:12 +0000
Manifest this update: Wed 23 Apr 2025 08:01:12 +0000
Manifest next update: Thu 24 Apr 2025 08:01:12 +0000
Files and hashes: 1: KBF9-rPlTTi1UzJZPMbJcUjVlVw.crl (hash: 6a6L0e9Jz7waqXVBdiU0vrOOanLjs5vviqjH832ANl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:aa:4d:c9:c6:c6:38:08:b7:d9:c6:cf:ad:b3:1b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28117dfab3e54d38b55332593cc6c97148d5955c
Validity
Not Before: Apr 23 08:01:12 2025 GMT
Not After : Apr 24 08:01:12 2025 GMT
Subject: CN=16e31a6ffd2149fd21b6b3961631163dbdb66fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:04:72:c5:bd:ce:55:83:ba:e3:67:66:12:
32:ee:93:0c:45:5b:37:6c:b8:e5:e1:49:ad:96:16:
78:be:28:df:5e:0e:d5:0a:42:41:31:f8:d9:c6:c9:
ca:04:87:94:e2:88:03:ec:9c:bc:1b:cc:3a:ff:c9:
82:ca:63:54:7f:0e:05:6a:73:b8:02:91:52:f8:57:
63:0d:b1:29:c7:1c:29:db:6f:a2:ee:d7:92:71:27:
6a:f7:90:33:e1:7e:fc:ab:75:87:5b:9c:46:e9:28:
7f:e3:c3:04:38:94:fb:e9:43:04:70:e3:e5:51:93:
d5:93:67:d4:3a:1e:1d:0c:37:35:74:66:b9:8d:4b:
31:4b:f0:54:c4:39:99:b1:80:ec:b5:e4:e4:a5:e0:
c6:b7:89:66:4d:0a:54:9e:a7:5c:21:6d:39:85:6b:
a3:a2:0a:5c:a8:97:6c:74:21:07:04:72:1f:7d:1a:
3e:0b:7d:38:83:06:3e:a6:f8:8d:10:aa:ba:fb:9b:
0e:2b:3e:1f:ec:3c:ce:7e:92:47:99:f0:1e:a3:04:
2e:5e:0a:ab:57:75:21:ec:d2:b7:da:5c:61:d6:f6:
c5:31:fd:97:87:73:cb:91:fb:98:dc:84:02:92:0d:
4d:13:34:5a:5a:04:9e:dc:71:06:cd:d7:ef:4d:65:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E3:1A:6F:FD:21:49:FD:21:B6:B3:96:16:31:16:3D:BD:B6:6F:AE
X509v3 Authority Key Identifier:
keyid:28:11:7D:FA:B3:E5:4D:38:B5:53:32:59:3C:C6:C9:71:48:D5:95:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBF9-rPlTTi1UzJZPMbJcUjVlVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/KBF9-rPlTTi1UzJZPMbJcUjVlVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/KBF9-rPlTTi1UzJZPMbJcUjVlVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:56:57:d4:d7:53:09:37:94:a7:1b:c9:6a:d3:a2:f1:a4:f5:
02:18:45:26:50:a6:76:96:cb:0a:b8:3d:f9:59:b0:74:66:77:
5c:dc:dc:93:ec:aa:09:1a:dc:69:fe:63:c6:2d:58:73:d2:bd:
0c:59:76:4c:88:0f:40:d8:4c:54:cc:70:ce:29:19:8c:eb:68:
cb:88:b7:c9:3f:8f:5f:2f:e0:f7:2b:b5:c2:4f:46:59:c8:4e:
b9:a7:dd:03:2f:b0:ce:a2:3a:b3:e0:6b:2b:fc:2b:e7:c1:ba:
00:63:49:7b:29:79:fd:13:5d:b7:fe:91:03:7c:41:cf:7e:2e:
5e:d0:90:bf:a0:5b:7c:0c:f8:5f:94:e4:3a:48:d0:6e:98:05:
91:f2:35:d4:fe:69:82:e4:6a:92:94:e5:90:b1:6f:7a:ca:24:
f8:ae:ba:c9:fe:ee:58:0c:4f:16:25:b2:4d:d0:3a:7e:67:6b:
8a:a8:08:93:f6:cd:d9:07:a8:51:fb:18:e9:0d:06:3b:52:7b:
00:43:33:3f:c6:36:d8:30:5f:d4:d9:3b:a4:20:bc:eb:d3:a3:
f5:8b:ae:a4:89:c6:cb:62:55:5f:9e:a1:28:c6:95:08:64:20:
21:7b:b5:91:2f:c1:ff:c5:2a:e5:48:5f:a6:28:f1:f0:f0:65:
f3:09:76:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:19:45 2025 by rpki-client