Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: LmK18kgpBD9qb2HRpQKKB2l+NuKPPSvnjqAB1/ivYzE=
Subject key identifier: 0B:CD:EA:70:EF:97:BD:54:EF:0B:03:A3:99:06:FD:A6:00:74:87:61
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 0194BBCDD419B37C67BD0FDE6F47F939FE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 05D2
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: OxXv/8Ic/JbqSFeYYdra2Fk3xeHgeh+Ce87aP5fFTJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d4:19:b3:7c:67:bd:0f:de:6f:47:f9:39:fe:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=0bcdea70ef97bd54ef0b03a39906fda600748761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:a0:af:d1:b7:e1:a3:dd:0a:bd:6a:79:61:
91:d7:e8:09:08:fd:be:47:79:46:20:0d:11:f0:33:
f2:52:00:eb:e7:c9:2a:a4:69:93:00:f4:7d:d3:86:
9a:1c:b6:8d:8d:2f:19:1f:1a:64:1c:d3:27:3c:ab:
9f:35:20:84:05:96:3f:69:c3:d6:43:65:8a:2c:1b:
d7:e4:c8:2e:a8:9a:83:be:b4:43:f4:51:52:cc:7b:
4c:84:3d:df:b6:6e:8e:34:99:08:22:1e:a1:e8:ad:
83:4e:87:4f:32:9a:6a:79:ee:61:48:bc:43:5e:b7:
32:69:9f:4c:47:66:1e:22:e1:3b:ed:ea:e5:5b:fa:
e9:4e:1a:e1:f1:a7:59:f3:bb:c6:c5:8d:f8:09:36:
cd:b5:4b:0a:6c:e2:14:5e:70:a5:6f:db:83:b1:55:
2e:58:99:ac:d4:3b:b0:2b:04:df:de:99:4e:34:b0:
27:75:eb:81:97:99:45:4e:ea:2d:36:20:ef:ed:61:
f9:fe:0c:94:6e:62:a0:87:eb:7d:af:2a:8c:d9:d1:
53:6c:77:b1:95:e4:29:d9:11:ad:d8:df:ae:65:40:
cb:27:02:b5:aa:95:b8:96:93:cb:4b:3f:af:65:47:
00:14:0f:b9:95:31:62:28:4c:f1:e2:61:cf:62:1d:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CD:EA:70:EF:97:BD:54:EF:0B:03:A3:99:06:FD:A6:00:74:87:61
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3e:d6:94:b2:94:d4:6b:d7:b8:ce:28:ef:18:b4:17:ca:20:
41:b7:35:4a:68:5d:b1:3b:9c:4a:f6:e2:ed:60:72:41:d8:3e:
05:75:fd:e2:4f:c5:06:fc:80:7c:a8:fe:3f:33:07:11:73:44:
bb:c1:70:b3:17:9f:38:6b:53:ca:cd:d2:65:81:ee:01:41:ce:
f5:9b:f4:e6:47:18:51:aa:7b:9e:db:43:51:43:e7:0c:fd:44:
f4:9e:de:5f:02:7f:8c:f0:06:ac:9c:4c:89:75:69:ce:6f:22:
27:de:90:65:31:f1:c4:5e:e4:12:9b:d7:a5:f1:01:be:e6:e5:
61:5b:3d:a8:12:64:76:ec:d1:b1:13:0a:55:fa:e2:6f:5d:79:
16:f3:7c:fd:8a:47:61:4d:67:49:e6:54:2c:6d:8b:7a:89:5a:
3d:ed:91:d2:a4:26:d7:14:0e:79:c2:6f:83:6f:e2:a1:60:14:
35:2f:7e:96:09:f7:6a:9f:b3:92:87:cb:c9:d0:54:30:e1:9a:
db:33:4e:9b:6d:89:0e:60:a9:db:da:f7:4d:66:2c:e0:a2:52:
a1:81:f5:5a:39:59:dc:8b:cc:6a:a0:53:7c:b4:55:d5:2e:c5:
e6:d3:d2:d5:b3:9f:c1:66:30:55:43:ac:52:70:9f:69:3c:0b:
dd:b4:94:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:00 2025 by rpki-client