Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/472546-adb4-4a17-9622-ae24f15fe923/1/RhnanaqsKZH1Qe1EAErUVdyiNMk.mft
File: RhnanaqsKZH1Qe1EAErUVdyiNMk.mft (raw, json)
Hash identifier: QTAXNyMJpeOrapgxGfrPzqGP4dlQWsUa6B2XfAqpudI=
Subject key identifier: 1B:4D:B8:3F:5C:08:23:44:1B:E3:AE:25:4C:F3:55:00:2F:05:58:9C
Authority key identifier: 46:19:DA:9D:AA:AC:29:91:F5:41:ED:44:00:4A:D4:55:DC:A2:34:C9
Certificate issuer: /CN=4619da9daaac2991f541ed44004ad455dca234c9
Certificate serial: 0194BBCEB4E9A387B12ACE2D80A129055786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhnanaqsKZH1Qe1EAErUVdyiNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/472546-adb4-4a17-9622-ae24f15fe923/1/RhnanaqsKZH1Qe1EAErUVdyiNMk.mft
Manifest number: 0A89
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: RhnanaqsKZH1Qe1EAErUVdyiNMk.crl (hash: 1GBgwYjiNLQYB+35NixzMYICuv0Sd6yoWK/3LBu+iYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b4:e9:a3:87:b1:2a:ce:2d:80:a1:29:05:57:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4619da9daaac2991f541ed44004ad455dca234c9
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=1b4db83f5c0823441be3ae254cf355002f05589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:74:5c:dd:20:80:04:2d:29:08:28:09:96:
f0:da:e8:b9:d8:4a:76:df:1e:2b:65:f6:1a:6d:12:
3f:db:e8:c2:e4:2a:8b:af:5e:f0:9d:bb:fc:01:55:
2f:ad:8b:68:3c:dd:41:f4:3e:ff:28:f7:ec:e9:59:
6f:74:78:0a:aa:a2:0a:63:54:19:43:87:29:b5:48:
55:09:6f:0a:53:44:5f:24:15:c5:02:d3:28:8c:ea:
ba:13:ad:03:62:40:ca:9f:3b:f6:c6:69:f8:00:80:
c2:6e:d6:c9:fa:2d:1e:42:ab:51:83:0e:d7:13:c2:
a0:85:57:d2:0c:33:96:a3:77:a9:75:47:f4:04:23:
01:23:db:d5:6a:fd:f3:cf:c3:8e:a2:19:b4:f9:52:
e3:0d:ba:02:8c:07:9b:4d:3a:22:6e:27:81:c1:0b:
56:df:1c:72:1d:51:f6:95:6d:88:6b:b6:23:00:7a:
fd:b7:e0:b4:fd:0d:e4:43:12:13:48:4b:15:7a:67:
da:15:cc:7f:c8:bc:03:c0:a8:2c:ce:aa:89:eb:14:
e5:58:8a:f1:a9:00:4b:4f:52:5d:a6:31:b6:69:b1:
4b:b5:da:9a:1f:0a:58:97:39:05:b8:64:c9:6d:f3:
f0:e1:06:f5:6f:73:4a:24:10:41:3e:57:33:6e:8c:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4D:B8:3F:5C:08:23:44:1B:E3:AE:25:4C:F3:55:00:2F:05:58:9C
X509v3 Authority Key Identifier:
keyid:46:19:DA:9D:AA:AC:29:91:F5:41:ED:44:00:4A:D4:55:DC:A2:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhnanaqsKZH1Qe1EAErUVdyiNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/472546-adb4-4a17-9622-ae24f15fe923/1/RhnanaqsKZH1Qe1EAErUVdyiNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/472546-adb4-4a17-9622-ae24f15fe923/1/RhnanaqsKZH1Qe1EAErUVdyiNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:75:b3:36:d9:bc:b6:e2:b8:af:94:ec:2f:b4:1c:f9:d4:60:
29:cb:6b:8e:5f:d2:b4:1d:11:c0:6d:19:8b:4c:da:60:69:69:
7e:78:24:2a:36:ee:52:43:41:43:2b:ea:4d:47:41:97:43:14:
fc:7d:99:7d:fd:58:5b:7c:88:b1:5d:4b:49:61:66:34:43:c4:
a1:41:03:a6:75:44:5b:5e:93:03:1f:23:af:dc:fc:33:db:0d:
96:41:62:96:e9:ed:16:39:c0:55:cb:f6:25:8c:4f:01:9a:72:
38:61:05:1e:dd:92:15:7e:47:54:0d:44:e9:e8:23:26:9a:ff:
2d:8b:0d:d1:14:6d:f8:61:05:a7:1e:8c:53:2c:0a:8c:c8:74:
93:3e:29:44:c1:ed:bb:3d:2d:6d:c3:de:d1:bc:8f:68:c2:10:
3c:73:2b:0c:a7:2e:1f:06:bb:eb:31:e2:7d:68:64:d8:ea:3c:
90:a8:bf:11:5c:20:64:4d:47:94:e2:60:f5:9d:e1:b5:f2:00:
85:7a:a3:6e:b9:89:17:8c:4f:df:5a:cc:6f:ce:f7:78:43:d0:
ff:92:43:29:a6:dd:20:cf:c0:89:f3:7f:a7:c4:a2:d7:43:2e:
e7:bf:99:15:2c:ee:f1:d0:a9:98:cb:c7:ff:d2:8f:82:0f:a9:
bd:3e:bb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:28 2025 by rpki-client