Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier: t1vWHM0Uzpp8OXa3OnigK18emGJJA/D4IZMmDYUsjNI=
Subject key identifier: 4E:D2:7E:59:F1:53:D9:27:AF:B1:6A:41:D3:57:E1:33:67:C0:A8:4A
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial: 0194BBCEFF97E8084A83BD0F069077671A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number: 0D49
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: XoA440zSZX/5Q7gaDqznj7XI4ma5Ntkz9L++m4hcb1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ff:97:e8:08:4a:83:bd:0f:06:90:77:67:1a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=4ed27e59f153d927afb16a41d357e13367c0a84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:c8:1c:23:4a:f3:76:ec:55:05:4f:74:a9:
c5:f5:85:8e:28:c2:da:5b:db:d1:4b:29:41:84:aa:
05:c8:be:51:e1:e5:7b:a3:eb:6e:cd:58:a4:a5:bd:
e4:9c:91:d1:23:3d:1b:74:26:47:38:74:a5:7a:fc:
7b:bd:7c:0a:ca:93:f2:fe:98:01:42:8c:26:62:a1:
ff:59:15:4f:67:03:ac:7b:9a:8a:a0:e4:91:a3:1d:
eb:14:0d:46:1d:7e:0d:cb:03:01:54:51:13:2a:8d:
40:84:6d:79:a9:28:c6:b1:8a:8e:35:55:3b:52:d8:
d1:27:36:a5:d9:19:de:73:9f:51:c6:cb:8e:62:ae:
87:4f:f5:75:30:b0:ee:2f:50:97:07:41:f2:3b:13:
8c:38:c5:10:fd:a0:96:26:86:b7:d8:9a:a8:5d:f4:
b8:9f:c2:48:56:44:8d:99:d9:66:8d:f4:e6:2b:46:
6c:56:5f:e0:81:67:20:07:63:c4:9e:46:6a:9d:ef:
08:e9:d8:f9:3a:1e:73:e2:4b:55:ae:12:6a:8b:62:
10:27:f9:94:10:49:8f:d6:1c:65:ad:88:5b:de:31:
24:14:de:87:92:b3:e4:38:f0:22:fd:6d:39:4a:8b:
09:db:6a:09:e7:03:56:51:19:9a:fb:a9:fc:1a:2d:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D2:7E:59:F1:53:D9:27:AF:B1:6A:41:D3:57:E1:33:67:C0:A8:4A
X509v3 Authority Key Identifier:
keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:69:5a:ce:93:6a:f1:4b:04:b0:24:1c:f2:52:70:53:ed:fd:
45:22:b7:ed:3e:3e:61:04:4b:ea:52:55:d6:6c:b8:6b:d8:90:
fc:59:0b:00:77:ec:7c:f8:fe:fd:3d:76:b3:7e:31:13:1a:62:
26:6a:1e:a8:fc:f8:ec:6c:23:c2:d8:fd:46:c9:a5:99:24:53:
cf:aa:0d:fe:c7:86:60:f8:a1:15:bc:71:5d:82:04:d4:17:50:
33:db:c2:ce:c8:e2:d5:72:21:44:5e:36:29:d0:2a:14:5c:d5:
90:95:2a:49:b1:aa:42:04:7c:0d:ce:62:08:6f:e4:7d:88:10:
fa:25:11:1d:92:79:82:97:3d:0c:19:03:5b:cc:88:da:db:00:
bc:24:65:27:c8:3f:6a:4f:18:26:8a:fc:17:34:ea:38:58:2e:
ab:84:b9:01:97:96:d1:79:8c:1c:21:91:bb:d6:f7:0e:e1:bb:
ab:8a:38:f4:f5:4c:8d:b7:5c:ce:7d:37:e2:35:0e:de:fc:7b:
04:44:70:d7:89:e5:1f:63:64:dd:49:3c:a2:46:b6:30:66:d8:
b7:50:c4:6e:b4:b3:f3:cc:3d:a2:08:43:3d:ba:dd:9a:b9:0a:
96:53:d5:a2:4d:2f:26:18:4f:18:d9:d6:5d:24:17:63:50:89:
31:42:c6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:47 2025 by rpki-client