Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
File: _x2DMuEYqaIYfqtYhCedZYDxGfc.mft (raw, json)
Hash identifier: BQT8VAv7F/VidTjPsvK8bi7QlvcS2lcZiW09o78p4/U=
Subject key identifier: 20:75:3E:B1:39:96:C2:58:22:62:13:D0:1F:FC:A7:CC:9C:6B:32:29
Authority key identifier: FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
Certificate issuer: /CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Certificate serial: 0194BC7316ABA2B5BEADE651FF329F646165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
Manifest number: 0284
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: _x2DMuEYqaIYfqtYhCedZYDxGfc.crl (hash: ZUFPAWAQqEvayNTwZnlag+47ggaTU5v2Xf2UWU9v1lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:16:ab:a2:b5:be:ad:e6:51:ff:32:9f:64:61:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=20753eb13996c258226213d01ffca7cc9c6b3229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:92:35:37:07:81:fd:18:21:e1:26:c7:74:
53:0e:b9:2e:4e:e9:9d:80:8f:6a:43:64:63:f8:18:
50:91:b8:b6:1a:cc:83:dc:6e:9e:8c:59:e8:7b:81:
d9:c2:76:90:c6:5e:0a:3f:64:6a:90:2b:e1:80:bf:
6c:0b:6a:53:4e:d4:1c:73:c5:55:a3:4f:aa:ce:98:
46:89:e3:14:ce:e0:1e:5c:e1:45:b8:55:6f:0c:55:
1c:b5:5e:9d:2b:9c:c9:e1:04:3c:ae:ff:a1:44:51:
b9:35:59:be:a6:b5:f1:d8:c8:76:dd:55:a3:21:c2:
2d:9e:87:a0:89:be:a6:5b:23:b3:1b:2e:d2:a8:3f:
4a:a0:44:47:52:c9:93:bb:59:5b:33:9f:e3:d9:24:
c1:a3:8b:51:f3:aa:9d:05:f3:81:59:21:66:54:f6:
eb:a1:02:da:49:45:ea:f7:a2:36:c1:d0:46:32:63:
c6:b9:85:2b:c8:1e:b7:95:36:03:93:66:92:9a:37:
0e:af:62:80:13:bd:4d:4e:3c:db:46:39:77:6c:21:
c2:14:d1:d5:dc:7d:60:81:6f:a8:d2:37:ab:b5:43:
2b:ae:42:17:cb:bd:e9:78:3e:e8:57:37:7d:fd:a3:
cb:b5:33:20:0f:8f:87:05:1a:f8:f5:45:67:3b:0c:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:75:3E:B1:39:96:C2:58:22:62:13:D0:1F:FC:A7:CC:9C:6B:32:29
X509v3 Authority Key Identifier:
keyid:FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:68:a5:a1:11:ab:03:ec:10:1b:75:31:f7:00:31:06:96:63:
43:70:90:63:36:9f:2e:4b:57:aa:67:5c:33:f1:1d:77:05:e1:
61:bd:b0:75:b2:21:5c:09:2c:9f:b8:43:d7:de:60:64:a9:29:
1d:d6:b3:2e:1c:88:cf:fe:92:7f:68:33:cd:9e:0d:a6:a4:d9:
9a:bc:4e:26:1b:e3:b1:77:67:82:4b:3f:b6:b1:f1:a1:04:b7:
1e:13:18:0e:2c:d6:e2:5d:20:18:c6:da:68:1c:2c:59:30:11:
ab:47:b1:60:fa:a6:50:70:9a:03:12:c1:ff:b3:6b:32:c4:fa:
9f:8c:04:a2:9f:65:96:c0:71:75:6e:c5:be:ad:24:38:ac:e7:
0c:0d:84:47:bf:74:76:04:c8:6f:ce:18:ed:ac:d4:e0:97:15:
bb:ea:3c:97:65:2a:fc:ad:11:6b:2d:20:12:c4:6a:98:04:95:
00:11:9c:40:f4:80:23:41:b3:a3:a4:23:82:ec:77:18:7c:de:
67:46:c8:db:cf:fb:fb:66:84:cf:f2:61:9d:e0:d2:69:57:46:
5b:8f:4d:4f:e1:6d:0f:43:7c:8b:c5:b6:4b:53:2d:83:06:50:
58:29:5f:19:67:7b:ce:3f:2c:fc:f0:80:4d:b9:f7:ab:ea:43:
bb:00:9e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:39 2025 by rpki-client