Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/1d27da-b39f-42a9-949f-b6c39ad983dd/1/RzrT6YeegYYjFqEICLtcQhKVTLo.mft
File: RzrT6YeegYYjFqEICLtcQhKVTLo.mft (raw, json)
Hash identifier: 2CSRpyQ52vamNZZweJcWomG2Y/N+hsQoRgHKslMzIp4=
Subject key identifier: F6:51:7A:1E:24:F6:F4:3D:9C:3C:71:F9:CA:55:F7:D8:20:21:69:D3
Authority key identifier: 47:3A:D3:E9:87:9E:81:86:23:16:A1:08:08:BB:5C:42:12:95:4C:BA
Certificate issuer: /CN=473ad3e9879e81862316a10808bb5c4212954cba
Certificate serial: 0194BBCDFEAF9FB47EEADC56CFF04B8D9FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzrT6YeegYYjFqEICLtcQhKVTLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/1d27da-b39f-42a9-949f-b6c39ad983dd/1/RzrT6YeegYYjFqEICLtcQhKVTLo.mft
Manifest number: 0CD7
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: RzrT6YeegYYjFqEICLtcQhKVTLo.crl (hash: q4gnnBIqwngz7DV8qx5NngoX8BzkXHL1ngqSWe8MGf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fe:af:9f:b4:7e:ea:dc:56:cf:f0:4b:8d:9f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ad3e9879e81862316a10808bb5c4212954cba
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=f6517a1e24f6f43d9c3c71f9ca55f7d8202169d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:81:e6:37:f3:09:a9:4d:72:3c:c7:fa:96:
89:56:2a:97:21:7c:06:af:e4:cd:51:db:f3:06:ed:
8d:ba:2f:51:64:c7:63:0f:1a:a2:25:b5:23:a8:fb:
b4:82:0f:25:e8:f2:9b:ad:9a:ba:f9:67:d4:18:f5:
e4:16:e5:4e:5b:8d:92:f5:87:16:2d:74:78:92:44:
aa:ee:59:b1:a8:5c:d8:bf:df:31:c1:e0:0e:64:b7:
ac:bf:0c:1a:d3:5e:95:ed:60:b3:a6:26:8b:ec:f6:
9a:60:c1:7d:7b:b2:9e:e0:ba:aa:18:83:8a:56:2e:
59:75:70:5a:bb:2e:19:38:0c:29:d1:57:e8:cc:6a:
77:6e:6f:80:06:5b:6a:32:fa:66:68:c9:5a:0a:4a:
0f:ad:ca:0b:ca:36:df:ef:2a:11:af:12:fe:d2:cc:
bd:b7:f7:fd:a2:f8:fa:a9:1e:6b:0f:5f:37:f9:ba:
d2:a6:ff:8d:7a:e5:bf:06:b0:c2:1c:e8:7b:b1:37:
42:00:69:7b:43:6d:e4:3b:7e:cb:00:8c:63:eb:d7:
28:6f:29:da:61:4d:9d:aa:6b:d9:d0:66:b6:cb:18:
11:9e:63:a9:3d:1b:9d:36:9f:da:03:a9:9b:dd:bc:
88:ea:15:78:53:f4:ec:24:7c:8c:c6:b4:bc:a5:22:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:51:7A:1E:24:F6:F4:3D:9C:3C:71:F9:CA:55:F7:D8:20:21:69:D3
X509v3 Authority Key Identifier:
keyid:47:3A:D3:E9:87:9E:81:86:23:16:A1:08:08:BB:5C:42:12:95:4C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzrT6YeegYYjFqEICLtcQhKVTLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/1d27da-b39f-42a9-949f-b6c39ad983dd/1/RzrT6YeegYYjFqEICLtcQhKVTLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/1d27da-b39f-42a9-949f-b6c39ad983dd/1/RzrT6YeegYYjFqEICLtcQhKVTLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f4:cc:7e:32:c6:66:b4:af:d8:11:93:f6:51:1b:cb:be:1b:
1d:cf:6e:3e:c6:2d:61:ee:ad:ba:d1:00:3e:4f:01:2b:e5:01:
53:e5:d0:c9:d4:f5:5c:10:50:94:ff:eb:e1:11:f0:5a:b4:36:
13:03:f3:d4:c7:ae:13:e5:de:c7:93:4d:ff:76:2a:28:37:76:
a4:d3:ae:d5:42:dc:50:23:fe:64:11:b3:2c:87:65:c1:93:05:
36:4c:60:f0:40:f1:5c:6d:54:b4:ed:04:20:38:71:cf:7b:c5:
1f:c4:12:c0:45:a6:55:b8:74:0c:86:43:00:e2:25:39:58:b6:
50:45:f0:30:6c:2c:d6:1a:37:a3:31:cf:f6:5b:9a:47:8f:e4:
e1:12:40:af:80:3d:1d:15:de:bc:ad:dd:52:e3:c3:bf:48:00:
8c:cb:61:0f:6a:86:5c:33:35:32:8d:30:5d:0b:9a:47:b4:0a:
6b:f9:13:dc:81:e1:55:c3:43:5f:d5:d4:eb:7c:cb:e7:af:b8:
0c:cc:64:f5:d2:1f:9d:85:9c:89:86:9c:72:02:69:82:13:2b:
94:03:34:c4:70:39:c8:01:5d:92:ba:89:3c:4d:24:94:5e:c6:
40:6e:0b:08:86:02:f0:7e:d7:8f:1f:fd:f0:7f:cd:41:51:89:
d2:26:3e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:03 2025 by rpki-client