Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
File: rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json)
Hash identifier: BXBNduE+QV0pcYEZ7rq8bIRzgv6a3+nyOdy/oMRIhkQ=
Subject key identifier: 13:45:20:20:58:C3:29:19:15:47:1C:04:6C:87:00:99:E6:84:3A:81
Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
Certificate issuer: /CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Certificate serial: 0194BCE0DB9431CD16B86C38738F1FC26EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
Manifest number: 055C
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: qvi/oj8tJmr19icTSCkJhEYScLH2x7PZrmiyUhAtjGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:db:94:31:cd:16:b8:6c:38:73:8f:1f:c2:6e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=1345202058c3291915471c046c870099e6843a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:00:ee:c3:35:69:f7:10:d6:31:9a:7a:b0:
b7:44:6e:20:76:7a:56:c1:a8:47:99:ee:49:72:04:
15:87:8c:b1:5c:82:03:f8:19:90:58:98:43:70:f3:
6a:26:bf:7d:25:fc:48:e2:dd:b1:fd:76:6a:e0:5b:
4f:17:a2:1e:fc:f1:eb:cf:e9:15:5d:46:8b:91:b9:
c8:2f:af:fd:cd:66:32:12:9c:92:33:19:a4:c7:1c:
36:85:da:ec:d0:04:6f:76:05:07:bc:92:9b:0b:25:
d4:60:f1:aa:94:3a:2f:7e:1a:9f:60:1d:b0:d0:26:
57:f1:dc:36:92:7f:1c:83:28:4e:87:7a:b7:a6:55:
07:2b:20:ab:c1:34:f2:93:61:b8:95:78:5d:97:86:
88:55:e2:f1:8e:b7:67:7e:a9:83:09:3e:53:63:20:
89:72:8d:fb:81:c4:6e:a3:a0:6e:fe:e6:97:04:2e:
03:85:c8:24:7c:86:33:ff:94:2c:7f:87:95:e6:fe:
69:27:e8:5d:ed:f6:b9:80:b7:7d:06:8a:dd:5d:46:
5a:db:3d:4a:55:9e:e5:31:77:21:9f:27:69:ff:0c:
7c:7b:3f:69:79:03:1b:e9:12:2f:2d:f7:e4:88:5a:
1b:45:07:10:91:de:be:48:8e:db:b1:d0:0c:0e:cc:
de:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:45:20:20:58:C3:29:19:15:47:1C:04:6C:87:00:99:E6:84:3A:81
X509v3 Authority Key Identifier:
keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a3:58:ff:52:c8:a9:36:72:fc:ee:f6:38:5d:2c:f7:b6:11:
1c:c1:63:36:ae:d6:53:ac:db:b8:75:63:66:37:47:83:10:04:
8c:44:e3:3a:a5:d2:50:f1:6a:f4:d9:8b:61:f1:a9:45:75:90:
48:5c:61:99:96:fa:8a:71:cb:56:28:b4:dd:c4:c0:bc:e7:18:
92:0a:ca:80:4e:50:40:72:3d:17:4b:fe:5a:5d:03:c7:fb:d3:
c7:51:a4:29:4c:71:51:e9:81:37:56:c5:93:c7:b5:27:6b:d4:
30:e4:e1:06:ab:45:37:af:39:4d:ab:45:47:7f:5d:7d:4b:26:
7d:76:61:3e:7c:7c:da:e1:ef:e4:67:4f:de:1c:5a:32:cc:02:
bc:e5:63:b7:39:1c:da:65:91:63:41:0b:19:f6:93:62:33:78:
b5:28:f0:7a:85:c6:20:c9:dd:00:33:12:2d:fd:65:da:03:85:
6b:ee:f2:25:35:36:bc:f9:70:4c:c9:c0:df:01:f1:1d:e5:de:
4c:85:90:29:a6:1e:c6:dc:76:f2:be:dc:76:5d:03:76:35:10:
df:06:9c:9d:5f:44:0b:83:86:85:77:7d:e7:89:67:1b:b4:23:
99:42:1e:f4:aa:a7:4c:d9:70:e5:de:99:6d:43:2e:84:ae:74:
12:03:c8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:13 2025 by rpki-client