Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: DKS0MqUqkF37jjP/Dp7Js11eTVD2haKkmUoxn6M/Mpk=
Subject key identifier: F5:E0:3F:90:FC:68:A1:04:9D:76:62:55:E5:96:EB:11:7F:77:20:A0
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 0194BBCDAF3C764A65D1078934A0EFDF7095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:06 +0000
Manifest this update: Fri 31 Jan 2025 10:00:06 +0000
Manifest next update: Sat 01 Feb 2025 10:00:06 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: Z4PFjyplLZkkpVzSdNgnuvxs0ZveRQRoTkM7HFQq6Yg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:af:3c:76:4a:65:d1:07:89:34:a0:ef:df:70:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Jan 31 10:00:06 2025 GMT
Not After : Feb 1 10:00:06 2025 GMT
Subject: CN=f5e03f90fc68a1049d766255e596eb117f7720a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:bc:4f:e8:dd:f3:e9:f6:32:94:80:35:7e:
8c:f9:45:f6:de:92:9f:70:07:51:01:5d:67:95:7c:
ce:71:1e:17:60:93:9d:7c:88:4a:8f:1d:36:aa:41:
3a:59:d1:de:8d:08:2c:3f:26:b5:14:12:8b:53:39:
00:98:d3:56:21:0c:34:d6:f2:27:a7:af:8b:d1:1d:
cd:25:a2:11:98:73:13:48:57:f9:b8:96:75:42:43:
c9:f7:e5:bc:ca:bc:0c:99:c1:41:b5:29:8d:39:9b:
d7:03:88:19:bc:aa:04:c4:1c:8a:15:66:d6:e2:39:
4c:80:67:46:fb:cb:9f:e3:33:24:b2:b0:da:a4:3d:
cb:63:14:ea:8d:5e:ae:67:52:c9:58:0c:53:8a:a5:
d9:a2:10:f6:e8:8f:d3:c4:14:7c:4b:87:2c:16:24:
6b:1c:8d:e0:e2:d6:f2:d4:69:2c:18:6a:ac:a4:c4:
17:d3:1f:76:ed:78:dc:12:db:a8:fe:a3:f2:f0:de:
a0:4f:19:3c:45:b9:17:46:d9:6b:00:1c:99:a0:18:
0b:d4:7c:c4:b9:4d:41:31:2c:39:d3:17:0c:56:8a:
f7:a2:29:d0:bf:f6:fb:c2:94:be:a8:cd:8e:b1:14:
49:5c:68:e6:5c:b6:67:70:ed:06:1e:b9:c2:9b:12:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E0:3F:90:FC:68:A1:04:9D:76:62:55:E5:96:EB:11:7F:77:20:A0
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d0:92:da:ac:4a:2c:7e:5a:fb:01:ef:d1:2e:eb:4c:ac:d4:
5d:b3:31:9a:66:19:26:18:6e:55:31:90:cc:1f:a1:8c:c1:09:
ce:e3:ce:d3:3e:ba:39:bc:d7:f0:c9:c6:3e:91:49:d3:4b:06:
65:e0:ae:6c:e2:51:10:61:14:3d:58:c0:57:0a:c7:55:50:1b:
86:f0:9f:14:62:b7:87:31:d8:cc:e4:d0:8a:76:75:9e:60:6b:
b1:c7:f1:53:a4:85:88:4f:c2:ab:6b:24:e1:29:03:3d:f9:86:
f3:e0:ae:58:a1:b5:98:87:b8:b3:7b:10:71:6b:11:6d:22:85:
c1:f3:07:8a:bc:ba:a0:42:8f:fb:d0:3a:ef:fb:dc:58:d3:2d:
6e:55:5d:07:6e:51:c2:e2:28:b8:4c:f6:cd:21:46:b1:29:1f:
45:6c:e6:e0:a8:13:9b:01:e6:48:f7:19:c3:c1:1a:73:66:c3:
97:56:3b:5a:22:a9:5c:22:d0:cb:ec:71:dc:0d:f0:6f:aa:48:
3f:8c:08:30:f4:67:31:e0:e6:6e:b9:91:ce:61:c6:30:c1:f5:
52:90:f6:62:7d:39:b5:fc:09:e8:81:76:f9:1c:60:45:92:52:
ba:07:c0:56:63:46:b9:9f:d6:3f:15:19:a3:22:27:7b:ef:5e:
7c:94:79:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:47 2025 by rpki-client