Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
File: 249r9UNKqjLT5fETsAxbsUAvZ_Y.mft (raw, json)
Hash identifier: 8cMrpZjlG/YtYJjNGMUcCRwTznYJHcTa7w6OiSr7tAQ=
Subject key identifier: CA:E4:CE:DC:5C:F1:2F:72:3B:69:BA:0F:A3:05:C7:D6:A1:85:C9:07
Authority key identifier: DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
Certificate issuer: /CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Certificate serial: 0194BD17C1B978A1D61F4500078AFC7D6741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
Manifest number: 051F
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 249r9UNKqjLT5fETsAxbsUAvZ_Y.crl (hash: bUONDNzYgwq1hWMZVJHusOg3E8GRLOiMZjeKB2wbNDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c1:b9:78:a1:d6:1f:45:00:07:8a:fc:7d:67:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=cae4cedc5cf12f723b69ba0fa305c7d6a185c907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:e6:e0:5e:3a:ce:30:3c:32:e9:f6:3a:7f:
f6:03:c7:84:95:6f:32:b5:3f:39:4e:fe:c4:22:df:
81:ce:27:84:43:fd:15:8e:37:9e:c6:29:83:80:52:
0d:47:d5:19:1f:45:59:cd:0c:fd:41:b6:91:90:81:
fa:cb:a5:a6:97:37:cc:dd:63:2d:d5:70:a1:e8:22:
2f:e1:b4:41:4c:d2:c8:0b:23:21:60:fd:79:77:ea:
64:5a:73:b8:c0:b9:80:c1:f7:58:e6:a6:2d:3e:8b:
10:83:8f:5d:df:61:cb:e9:d7:21:7f:5f:cc:ff:4f:
c5:a9:f5:6a:a7:37:a4:d8:bf:03:b4:30:75:ef:cd:
bd:a1:f3:4b:13:a2:61:3d:4b:8c:be:ee:7d:77:4c:
99:6c:1e:df:34:cd:49:0d:1f:e6:a8:27:51:3d:da:
10:df:a2:9b:c1:b3:51:f8:75:84:47:5f:9a:30:0e:
63:7c:e9:9b:48:84:4b:6b:2d:2d:cc:85:5c:35:02:
c3:eb:79:56:7e:61:15:09:ba:27:cc:69:54:cd:3e:
76:e3:b4:d7:24:7c:0e:d9:8e:5a:85:aa:ce:72:8c:
05:ff:45:b4:ad:a8:8a:af:0b:fe:20:a1:48:75:55:
6c:96:a0:88:67:4d:96:be:cd:98:a2:5a:90:32:e6:
6c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E4:CE:DC:5C:F1:2F:72:3B:69:BA:0F:A3:05:C7:D6:A1:85:C9:07
X509v3 Authority Key Identifier:
keyid:DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3e:05:8a:87:72:75:fe:56:73:e0:1c:4d:e9:ad:2e:fd:48:
84:1a:07:88:82:81:73:c6:1d:63:23:5c:2b:ed:1d:60:04:0f:
4d:45:d9:fe:4a:9a:6c:2d:91:3c:f2:2a:0e:02:19:fd:ff:2b:
b0:d7:54:1f:da:07:84:11:4b:de:62:8f:76:45:62:25:59:fa:
bf:73:95:07:e4:13:df:73:9a:97:82:a0:58:09:90:4d:54:a5:
d8:35:9d:ff:26:e2:94:b5:93:70:08:3d:f6:d1:2a:e3:da:3f:
be:25:cd:e8:28:3b:7b:74:82:59:1f:08:14:6b:c8:94:58:9d:
a4:b1:8c:0e:07:6b:cf:14:ee:12:29:ce:d2:ad:f7:43:77:45:
d2:fc:3a:f8:58:2c:11:3d:92:79:e9:84:a3:32:fd:e5:dd:12:
99:eb:5a:ba:88:c7:26:14:54:a7:2d:72:be:f3:7a:e5:e2:54:
be:92:27:40:6a:02:81:98:74:59:c7:9a:7a:54:40:61:87:27:
a5:86:70:dd:09:99:d5:e7:06:a6:a8:a0:f9:d2:c0:bd:5a:81:
d0:cc:6f:20:c3:87:57:42:37:46:a0:7e:78:68:68:18:a9:31:
66:f7:60:2b:c1:cd:60:08:95:c9:e5:ff:6e:7e:d7:ba:81:62:
e4:29:ba:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:43:58 2025 by rpki-client