Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
File: A2hHspcjX68HFob-0sHpEL9gBIY.mft (raw, json)
Hash identifier: sAjOys1Gmu+hjrlntlA9eWP+QCwh4XrPTO85QVrfPL4=
Subject key identifier: 0E:BA:FC:DE:7F:63:61:56:C3:32:02:5B:D4:DC:8A:39:75:CC:F5:C5
Authority key identifier: 03:68:47:B2:97:23:5F:AF:07:16:86:FE:D2:C1:E9:10:BF:60:04:86
Certificate issuer: /CN=036847b297235faf071686fed2c1e910bf600486
Certificate serial: 0194BBCE534CDFC6FF482BD61360BB847DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
Manifest number: 10BA
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: A2hHspcjX68HFob-0sHpEL9gBIY.crl (hash: ZKpkaKiZe5EDZQ9kY1LJ1ilfC5FzkRze0XIBh5zeKr0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:53:4c:df:c6:ff:48:2b:d6:13:60:bb:84:7d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036847b297235faf071686fed2c1e910bf600486
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=0ebafcde7f636156c332025bd4dc8a3975ccf5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:40:bf:30:48:d2:e8:9f:a3:c1:a1:a5:85:
cb:41:47:c1:3f:28:23:2d:96:21:80:75:7a:e3:42:
64:fb:80:10:ec:71:34:93:72:a0:a8:28:1a:00:65:
0a:26:bd:6d:7c:34:95:4e:02:75:ad:e4:91:e2:cb:
c9:1b:9f:6e:40:00:ea:c1:1f:89:d4:66:56:7b:fb:
3a:17:1c:3c:d0:9f:eb:61:99:da:b8:be:1f:bb:80:
e5:c4:e8:6d:94:41:8a:17:85:16:74:a3:8a:d3:34:
6f:43:29:b7:34:44:97:04:5d:17:ca:1c:63:60:2c:
ce:12:f8:3d:ae:59:ff:f5:ae:13:5b:0f:95:a6:ec:
a9:1b:45:1a:66:24:9f:af:27:15:04:fc:4d:3a:0d:
b8:e6:f4:da:33:3c:78:97:bf:c5:66:85:0d:bf:90:
80:31:47:3c:e8:a1:af:6a:43:b8:ed:27:47:fd:72:
e9:4b:58:f3:81:4a:5e:5c:44:0c:b6:75:d8:e8:5f:
c0:15:cd:4b:67:2e:11:fe:dc:88:0b:74:4a:4c:6c:
bc:16:f5:94:64:69:a2:8e:00:7b:7b:dd:32:1b:e1:
f0:1d:18:1b:ed:3c:3d:9e:4a:2a:bb:ce:26:48:a1:
f3:bf:18:c5:af:aa:13:6c:61:ff:66:4b:c4:51:d4:
67:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BA:FC:DE:7F:63:61:56:C3:32:02:5B:D4:DC:8A:39:75:CC:F5:C5
X509v3 Authority Key Identifier:
keyid:03:68:47:B2:97:23:5F:AF:07:16:86:FE:D2:C1:E9:10:BF:60:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a3:d7:f1:fb:3b:00:22:e2:c1:bc:2f:34:90:eb:20:bf:a8:
b7:eb:54:20:03:20:15:8d:71:42:77:07:8f:fe:39:33:f2:01:
b6:92:d0:42:f9:c0:43:db:a6:30:c6:5d:3f:56:ae:7a:25:58:
48:3a:65:fb:6a:ea:58:b6:c8:84:8c:05:88:df:d6:8b:20:92:
7e:0d:5f:12:40:72:ff:c1:bb:39:e6:77:a6:ed:7e:e4:4c:3e:
e4:e3:c9:aa:a1:a4:44:48:e0:42:92:8c:ac:13:bd:22:c7:f3:
dd:b0:d7:20:17:04:c6:ae:9d:3c:e3:59:28:26:89:4f:a7:7b:
87:3f:00:68:c5:c4:dc:63:d9:b9:cb:31:4a:c9:dc:22:3d:0d:
9d:9d:34:c2:ff:18:87:48:9b:97:41:63:f9:81:d1:08:22:47:
26:23:a4:c3:69:72:de:52:c3:e1:7e:e4:99:35:0c:71:88:91:
37:64:76:98:fc:80:5a:75:71:61:e4:76:c9:21:21:ff:a3:8e:
47:a4:91:26:70:5c:ea:75:0f:f6:73:0e:45:be:41:b1:2c:16:
28:54:fc:3e:3b:d3:49:43:9d:e3:05:4d:2e:fe:1b:5a:e2:25:
75:b0:dd:e0:88:7b:98:23:05:2e:99:27:c8:97:40:fb:48:a8:
73:51:25:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:20 2025 by rpki-client