Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
File: r4poziKkwZ8XcA9izPi7bC2vUeE.mft (raw, json)
Hash identifier: zHAB+vJdEh7Ojsr7Mv8rHv4Qr3wc8QGXxjCW1DmaLkM=
Subject key identifier: 1C:EA:FB:17:01:E4:0C:02:33:01:66:EC:3A:D2:B0:1F:A9:88:C2:6B
Authority key identifier: AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
Certificate issuer: /CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Certificate serial: 0194BCA9AC80D900710E6705370A3B363CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
Manifest number: 0DA6
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: r4poziKkwZ8XcA9izPi7bC2vUeE.crl (hash: ViIyO/8fFJGRbKApD7Bukf7BMYuzoxbYHZTmlPng0E4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ac:80:d9:00:71:0e:67:05:37:0a:3b:36:3c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=1ceafb1701e40c02330166ec3ad2b01fa988c26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:e7:e1:b4:10:90:1b:f1:5c:c0:5d:13:e2:
19:9c:c8:d7:3f:95:16:1d:3e:66:f5:0c:81:9d:3a:
a2:06:1b:a3:b9:7b:bc:d5:2c:80:58:03:3b:10:d1:
2d:80:24:4b:a2:a2:56:d9:a8:9d:76:d4:a1:81:cc:
57:66:70:c2:f7:45:7c:f2:95:be:55:d7:91:32:4e:
8d:e1:45:5c:74:cb:c6:27:38:c8:20:63:36:1f:fa:
45:bf:31:fa:69:0c:e8:a8:1a:8c:2e:26:f4:0b:29:
1a:75:f1:c8:3a:06:20:08:d5:68:63:97:5c:59:4c:
63:a1:89:02:28:37:df:0f:f9:b5:80:71:d9:97:01:
a7:8d:f7:1c:22:0a:fa:8a:17:9c:fe:20:a0:cc:32:
f9:ac:cb:ce:2b:2c:14:f2:84:a4:82:13:fe:2d:b9:
cf:72:6a:6f:b1:fb:0e:8d:67:4c:a7:0f:95:51:b3:
ae:dc:ee:9b:63:ac:74:30:ef:8d:89:5a:52:d7:03:
ea:c7:fe:16:c9:ce:a4:89:25:d0:8f:9a:fc:16:63:
da:36:32:33:d3:2e:14:5c:ec:a7:a0:71:87:c0:79:
f4:6c:f8:5f:b5:1c:47:8b:e7:75:d3:a0:cf:5f:d1:
13:22:fb:18:c4:a5:00:e6:4a:ce:62:a4:73:9a:c0:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EA:FB:17:01:E4:0C:02:33:01:66:EC:3A:D2:B0:1F:A9:88:C2:6B
X509v3 Authority Key Identifier:
keyid:AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:97:e8:e7:27:5d:c2:8a:a1:ca:5f:bf:0a:aa:4c:9f:35:9a:
f8:4d:e0:ff:aa:6a:dd:cd:7a:3d:10:68:30:f1:0f:dd:91:0f:
3c:52:f8:14:b4:7f:dc:3e:6d:73:36:36:5c:b6:6e:73:9b:d4:
f5:67:dd:29:04:77:be:46:58:55:ab:08:6a:f9:7d:24:00:61:
5b:74:73:71:61:6d:33:40:b0:20:7d:80:ee:da:c9:ab:b7:18:
c9:ef:9d:ab:ff:af:3f:0f:9f:8d:7e:d9:7b:de:9d:ed:f4:7a:
a7:36:0d:de:cd:9b:0f:1b:83:5f:36:4e:49:b0:4d:f2:75:a0:
dd:c9:23:53:6a:8d:d0:6c:88:c7:74:66:25:92:01:7c:0b:a9:
ed:ab:f9:86:cf:d7:33:f1:b3:4c:42:03:b7:49:d6:cd:04:a8:
b4:6e:ea:a7:9c:c6:96:64:9f:96:94:67:63:48:3d:0a:ac:94:
48:9b:b6:b2:dd:ae:9a:7e:30:c7:90:47:7d:f7:c9:d3:77:e4:
1d:8d:48:68:2c:6f:ee:3b:66:ea:76:29:96:e7:fe:ed:12:0a:
56:26:64:af:25:2f:97:1d:96:d2:dc:30:20:54:6c:62:47:48:
bc:d8:97:66:87:8a:ac:25:c1:8b:10:31:55:cf:46:52:8a:66:
59:76:cc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:26 2025 by rpki-client