Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
File: rRIanMsoPqIejQoHCi4LakDph30.mft (raw, json)
Hash identifier: AbVwoeytaM4pLL2gnmsTfIYi5fj8FM8AjYf1HM3uxLE=
Subject key identifier: 6F:61:31:5C:4A:3D:D6:6C:7C:90:C5:60:4E:30:A0:91:51:44:F9:2F
Authority key identifier: AD:12:1A:9C:CB:28:3E:A2:1E:8D:0A:07:0A:2E:0B:6A:40:E9:87:7D
Certificate issuer: /CN=ad121a9ccb283ea21e8d0a070a2e0b6a40e9877d
Certificate serial: 0194BBCE369A551DF0F5EAFBA299E409A9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: rRIanMsoPqIejQoHCi4LakDph30.crl (hash: IW5ZjlQWtMa+G4b9HhDElWAinLG9+jR9QRPCCZaOC6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:36:9a:55:1d:f0:f5:ea:fb:a2:99:e4:09:a9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad121a9ccb283ea21e8d0a070a2e0b6a40e9877d
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=6f61315c4a3dd66c7c90c5604e30a0915144f92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:f3:7a:ca:9f:3c:1f:7c:fe:5e:f0:65:3e:
5d:93:36:a1:43:12:63:4b:33:23:29:af:87:49:f2:
ca:14:e3:ad:40:ba:ad:da:d7:96:e3:e5:ec:87:86:
ba:2b:a9:fd:c6:9b:31:e8:02:13:80:0e:47:8b:0d:
e6:3b:54:aa:83:8e:8f:79:54:cb:ff:c6:b3:17:e9:
23:3b:d1:c0:b9:a3:32:45:3d:dc:60:c6:a1:46:83:
13:50:f0:f4:b1:8b:be:00:10:43:0c:f4:11:7c:89:
a3:04:0a:a5:a8:3e:3f:92:1c:74:e6:bf:ff:f8:e4:
c0:c8:5f:67:bb:a1:ff:5d:b7:ef:f9:7a:c1:e3:03:
f0:29:27:e4:7f:2f:b8:c9:1b:58:36:a4:74:b1:fb:
73:c1:ef:d0:6e:49:88:52:2f:4a:8e:fe:cb:96:32:
b1:97:0d:e7:aa:cd:f0:1e:12:6e:6e:cc:16:f5:c8:
75:d6:54:e0:d4:59:f4:73:d8:f4:14:25:85:e0:68:
33:4d:58:8f:6d:11:03:90:8c:fc:d6:a2:d0:43:39:
77:e8:96:fa:48:ce:85:60:94:10:39:11:ff:13:70:
34:18:27:cf:fc:c0:47:78:a5:b8:f9:59:d6:56:79:
6d:53:0d:39:fb:7f:95:be:f9:f6:81:e3:c1:37:5f:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:61:31:5C:4A:3D:D6:6C:7C:90:C5:60:4E:30:A0:91:51:44:F9:2F
X509v3 Authority Key Identifier:
keyid:AD:12:1A:9C:CB:28:3E:A2:1E:8D:0A:07:0A:2E:0B:6A:40:E9:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1d:cb:15:52:09:50:07:4d:ec:3c:28:0d:16:51:e2:b0:d2:
15:a3:0f:e7:e5:46:0a:cd:f9:48:c1:32:01:e6:69:57:e4:47:
55:e9:d4:03:f3:a7:dd:22:c4:c2:6b:93:cf:ac:d2:3e:3e:4b:
38:dd:ea:09:e3:94:1c:65:36:42:59:be:14:ff:e1:10:70:3f:
bf:02:ed:63:ed:54:fe:39:52:f9:87:9f:01:37:af:35:f8:17:
ab:59:1e:21:3f:ab:e1:19:dd:64:55:ab:64:62:b6:6d:74:95:
04:ee:d7:d4:83:03:ad:bf:15:d9:9a:a5:c7:36:03:8f:74:e7:
8b:f1:14:73:16:96:ee:f6:3f:53:d3:0f:d2:60:c4:3a:8d:68:
82:4a:3f:f6:9b:9f:49:cc:76:9b:3e:19:8c:85:77:49:79:f9:
39:10:bc:04:cf:29:d8:7b:95:14:01:02:31:a3:53:31:73:44:
6d:4d:f9:8d:34:41:df:70:df:b4:0b:67:60:d2:ec:ea:75:64:
fd:5c:3a:4c:c8:b1:a0:03:1c:10:3c:04:52:6b:99:90:37:26:
d6:a6:af:01:b4:5b:cd:3c:05:aa:b1:9e:14:75:3e:7e:6d:5b:
0e:e7:6f:bf:f5:b2:47:8a:8b:be:1c:45:07:17:43:c4:0d:52:
6a:77:55:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:25 2025 by rpki-client