Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: JMZqLFSxvWqRZac924Itap4hevzLlpFaF6rfjiPizKY=
Subject key identifier: 0F:F5:B8:92:EB:E0:D5:1B:38:EB:0D:BB:CC:48:F1:38:90:5F:61:75
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 0194BC3C7132AF830E86EB1A776DF4B4693A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 06F6
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: 33luw/THzRGhnsq6BPMNrnPMT4tzUkKr4y/u+hSuZo0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:71:32:af:83:0e:86:eb:1a:77:6d:f4:b4:69:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=0ff5b892ebe0d51b38eb0dbbcc48f138905f6175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d6:2b:d0:e3:30:96:05:8f:cb:a1:2b:9c:e7:
cd:1a:6e:d8:37:6f:44:de:21:ae:be:f5:1d:05:58:
12:94:38:d9:c7:15:a8:79:9b:30:33:88:75:35:a4:
5f:be:9b:39:0b:f9:9d:3f:d6:d1:e9:ff:43:db:96:
0c:67:5b:36:3e:1e:cf:4f:57:e2:00:e2:b4:15:e8:
00:46:cb:04:a9:bc:17:6b:58:1a:01:b5:7c:27:ef:
de:14:54:e7:fd:e1:7f:df:b6:77:a7:5a:9b:16:cd:
e4:72:6d:43:0b:3c:a5:5f:a9:97:f2:ef:3f:d9:40:
29:73:45:64:40:d0:f0:ba:52:10:65:89:02:70:e1:
04:54:e0:bd:9d:1c:65:1f:7a:b5:cd:8d:c1:da:09:
53:ae:f0:b1:3b:d5:f5:da:1f:82:96:a0:6a:18:f8:
04:fd:92:01:b9:a0:ca:67:68:6f:43:31:d4:86:e8:
43:fa:c8:ad:b5:5e:be:73:29:1f:01:99:b9:04:85:
84:08:3f:e9:32:df:24:e6:f3:ff:79:f4:43:cc:42:
d1:47:02:72:58:4f:ae:4a:0b:06:0a:62:b5:41:a0:
13:a7:b3:40:a9:89:5d:35:88:cf:b2:7e:51:25:80:
cb:4a:30:fd:28:e4:ed:c9:6d:2e:3a:15:0a:c4:a7:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F5:B8:92:EB:E0:D5:1B:38:EB:0D:BB:CC:48:F1:38:90:5F:61:75
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cc:63:38:a4:9c:40:48:22:12:74:f6:44:91:7d:be:89:1e:
38:25:9f:d9:f7:81:b2:a7:a3:c6:ed:50:f9:97:40:c4:4f:1c:
bc:ab:ac:b1:ed:58:f9:b9:93:2d:5e:99:85:60:32:1e:6a:69:
ca:38:b8:90:a4:03:26:91:4a:99:b3:f7:67:71:f8:95:52:46:
5b:83:5d:7c:10:66:e3:38:ce:70:d0:bc:47:e3:c1:45:5b:41:
75:3c:a6:77:b9:90:83:6a:27:56:62:7d:28:2e:f1:2a:b7:bc:
e3:27:1d:4c:19:bf:1c:57:d6:9f:a1:4b:16:2c:31:2a:e1:d3:
8d:03:ae:37:59:9b:d8:fa:02:79:50:74:af:2b:a9:43:d1:33:
32:f2:8a:8e:39:e7:bf:d3:6a:fb:05:92:81:38:ae:f0:6d:8c:
54:c5:cf:3d:11:94:71:74:d5:71:8a:bd:ee:48:0e:50:27:87:
f0:e0:dc:e6:88:20:5d:c7:5d:8d:49:fc:67:c6:35:d1:0e:1b:
ef:d4:d4:a2:1c:b7:e9:88:93:d7:f6:30:6f:1b:7c:c5:2f:f9:
a5:a0:2a:e9:a6:27:63:c0:46:dd:c2:32:48:cf:1b:e9:fb:2a:
51:66:2f:0f:33:5d:f5:08:b1:bf:ab:ca:5d:38:68:a3:8a:14:
37:1b:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:16 2025 by rpki-client