Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
File: KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft (raw, json)
Hash identifier: bq3HrcAeWlNrjDC63Rfyi+UU6e13f1EWZAA82FYdCE0=
Subject key identifier: 4F:75:18:9C:CE:AA:8A:52:A7:3F:1D:B5:35:86:41:F3:7E:5D:96:5B
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 01962ECFAB383157F55F3224A7EAA99EDFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
Manifest number: 14D0
Signing time: Sun 13 Apr 2025 11:01:23 +0000
Manifest this update: Sun 13 Apr 2025 11:01:23 +0000
Manifest next update: Mon 14 Apr 2025 11:01:23 +0000
Files and hashes: 1: KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl (hash: XPz2N+wY7btIPtddNsmTRzVbsWNsTPIhCOIr3NYFMqo=)
2: piJhKM_we331Drsk15cixPVEH_I.roa (hash: NHNPopSWAyph5Bx3EeKPWL7ZkR7orplnRo1YXxckaSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:ab:38:31:57:f5:5f:32:24:a7:ea:a9:9e:df:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: Apr 13 11:01:23 2025 GMT
Not After : Apr 14 11:01:23 2025 GMT
Subject: CN=4f75189cceaa8a52a73f1db5358641f37e5d965b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:47:56:b9:6a:79:e9:06:71:2c:a6:be:a7:
ad:57:5f:91:70:ac:1e:13:8e:af:4c:0a:bd:25:9f:
c0:68:c7:bc:20:f7:59:98:91:cd:46:a7:7d:be:f2:
3d:b8:5f:c9:ae:3e:0d:e2:40:e8:0a:a6:24:2e:ef:
fd:23:06:c4:94:10:d0:52:fd:f4:f6:1b:98:6d:2e:
84:00:d1:1e:24:41:56:0d:6a:bc:9d:1b:ac:8c:1a:
cd:95:ca:40:c5:55:e9:09:86:38:89:c2:e5:9f:b0:
bd:4f:d2:c1:19:c9:1a:62:39:1b:18:55:a8:06:f7:
b7:61:b0:d8:cb:94:86:67:89:7f:44:d9:ed:66:a9:
3c:d1:31:de:5e:f7:37:12:bc:60:32:9d:b4:76:15:
9c:64:b1:51:77:6f:63:0a:d6:78:e9:d5:af:70:ed:
53:10:4f:cd:a5:26:8f:39:2d:b0:28:71:99:53:de:
fb:a2:ac:e9:21:78:fe:23:0f:52:11:4a:50:77:fc:
b6:d3:23:e6:28:e8:ba:ec:06:3c:d9:9f:6f:c6:ac:
a6:ed:7d:d7:3a:80:07:f3:6f:fc:c6:26:49:c0:f4:
06:d3:77:12:4b:0e:4c:63:8a:3f:76:40:3a:77:00:
ce:65:79:a7:af:e7:fb:dd:73:82:26:29:d7:7e:0f:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:75:18:9C:CE:AA:8A:52:A7:3F:1D:B5:35:86:41:F3:7E:5D:96:5B
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ea:83:8a:b8:3c:79:a9:4b:eb:a0:49:8e:bc:92:64:c2:71:
fb:06:76:93:7f:9e:2e:52:51:1e:32:a5:ae:2c:ff:8a:85:12:
2e:48:8e:bd:6a:f5:d7:ff:38:61:0d:1b:a3:5b:2f:e2:97:e2:
97:d8:9f:b2:fc:b7:19:8e:98:9c:0e:b4:37:3e:fc:d2:a6:cd:
58:8e:15:60:e3:ee:26:4f:ec:9e:f9:f7:de:7a:69:68:f0:b5:
05:96:e3:19:17:bf:5c:af:bd:d1:7f:cd:16:56:3d:81:f2:0c:
aa:2d:21:ad:92:95:e0:d9:6e:f1:e2:88:4a:c9:d5:bd:31:db:
57:de:75:ff:92:dc:b1:4f:51:4d:11:42:ee:6b:4b:c1:d4:d3:
f5:f1:b5:a1:a0:69:bc:93:7c:84:bb:a5:87:fc:61:af:83:37:
4f:f2:86:7c:a1:89:b5:51:89:43:ad:f0:d0:f1:59:0c:66:d2:
6c:2c:97:a8:08:90:ca:82:2e:29:0b:2f:ca:25:b9:2c:be:3b:
82:ff:32:af:20:cb:2d:eb:49:40:6c:ab:35:45:69:39:d7:25:
b3:88:25:ff:fa:70:cf:88:48:10:f1:17:60:79:00:1a:a7:57:
4c:7e:5d:84:d9:63:92:d0:8c:bc:60:b2:2c:a4:21:de:a2:3e:
99:01:dd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net