Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
File: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft (raw, json)
Hash identifier: 5LvRM5HOJ8nrANwOmT3BjniqVO5xjLRY5skpDsNEqJE=
Subject key identifier: 44:3C:99:B2:5B:DE:E4:EC:40:04:E0:AF:B7:A5:05:2C:64:DA:11:5B
Authority key identifier: 31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
Certificate issuer: /CN=31fd401741e669e920b03c6c76aa3a7871403f54
Certificate serial: 0194BBCE46AA97CBB14840C959AF17F0F5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
Manifest number: 0291
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl (hash: NtmhZ6LLvtPOCdGHPtAUEfMTFReAhywhAMTW6mwQ1xI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:46:aa:97:cb:b1:48:40:c9:59:af:17:f0:f5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31fd401741e669e920b03c6c76aa3a7871403f54
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=443c99b25bdee4ec4004e0afb7a5052c64da115b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:7f:1c:70:53:6c:7f:2f:44:46:a0:c2:51:
18:45:c9:39:bd:ef:a8:e7:b2:cf:93:bc:2a:8a:92:
02:dd:8f:a1:c3:55:85:b4:7d:d0:22:08:b8:0d:13:
ab:5e:d8:2b:4f:6a:25:64:6b:3f:f6:56:46:c6:d8:
c5:ec:4f:09:2a:4f:eb:10:8a:27:15:9a:a0:4d:32:
30:2b:7b:ca:44:37:28:2a:14:74:3c:e6:54:91:02:
cd:7b:78:6d:8f:72:91:2e:dd:1d:1c:55:d2:a1:7f:
25:1d:9e:01:bc:29:bf:b6:af:84:ae:d8:4a:56:2d:
fd:05:f5:46:52:4b:e3:72:45:b7:5a:0c:40:bc:ae:
9f:38:82:e3:e0:42:22:c4:4b:10:40:24:33:e8:95:
63:01:5e:e7:3c:51:e3:e2:3e:f6:00:87:1d:00:9b:
f5:c5:29:92:ad:43:08:3c:42:76:f2:3d:fc:9f:35:
f5:62:04:b9:84:ac:1b:a1:17:8e:28:0b:ae:b2:e3:
a5:0d:91:d0:e3:5e:a0:83:74:63:19:de:49:2a:f6:
36:84:41:a7:2c:b4:85:77:a6:93:30:76:60:98:6b:
b2:05:b6:16:db:fe:6c:21:24:1a:24:57:96:19:7e:
b5:d5:94:7e:eb:90:c7:6a:03:70:88:46:86:f1:aa:
e6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3C:99:B2:5B:DE:E4:EC:40:04:E0:AF:B7:A5:05:2C:64:DA:11:5B
X509v3 Authority Key Identifier:
keyid:31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:06:67:dc:bb:ab:37:20:1c:3c:72:8b:9e:0e:62:54:cb:22:
57:49:d4:ef:fe:e4:70:ba:c6:bc:05:a2:d5:06:6c:ce:b1:92:
4e:9b:52:bc:6f:a1:22:a5:a7:cb:7b:96:cd:0d:04:70:c7:dd:
ea:58:9a:8f:05:02:88:84:1d:03:3e:e6:aa:ac:d3:df:3d:70:
4d:ef:2c:e9:be:58:48:31:ee:84:cb:b6:48:1a:f2:d8:2f:fd:
89:d3:fd:96:ba:da:40:c3:0c:1b:51:10:97:89:40:f0:ea:2c:
c1:d6:8c:41:d2:62:13:12:12:24:5d:56:dd:f5:bf:51:3f:88:
49:1d:6c:62:97:65:2e:bc:47:45:5b:d4:13:ef:7c:17:7b:81:
fe:32:f4:ee:2b:34:ce:bb:73:3e:af:f6:45:fc:74:6e:19:0c:
80:d3:ff:b0:ee:06:03:03:d3:91:ea:63:7f:e6:8d:b3:5c:fc:
08:f3:bf:a7:06:ba:0a:76:60:33:8a:6e:57:d7:f0:de:bb:24:
b6:87:a2:96:76:55:87:49:c8:4b:46:de:ea:9d:de:01:90:f0:
64:c4:f0:71:19:f5:20:3f:db:7e:6a:6d:d2:08:2d:c2:32:b0:
d8:bc:49:45:54:71:8a:a9:36:8a:dc:bd:8f:44:a7:73:c2:c1:
bb:a9:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:13 2025 by rpki-client