Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: h5+ErjHw7dq+3ZCYEpQayDhoT3BJRXBxnAhHxvj0CnM=
Subject key identifier: 5A:AF:A0:C5:FC:FA:11:02:B6:FF:7E:D4:D9:4A:6B:22:AB:12:92:23
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 0194BBCEC8A7D2386358CD7F660F947E2260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: 5owr1gOhir+pBPrd7RCs1gpd/d2OZZB1ngHUkxRWHRk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c8:a7:d2:38:63:58:cd:7f:66:0f:94:7e:22:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=5aafa0c5fcfa1102b6ff7ed4d94a6b22ab129223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:40:ee:6a:71:86:1e:8b:ad:f7:05:86:db:
6e:6f:f1:72:f3:4c:09:b6:05:64:21:48:52:aa:46:
a3:f5:90:cf:ac:39:ce:c3:77:de:cc:84:4e:fc:9d:
1e:2f:b0:dd:0a:03:55:f8:d6:ff:9e:8f:65:ad:79:
98:75:35:aa:a7:35:0c:c9:85:cf:1e:e1:8d:39:47:
5c:bf:d7:fd:8c:88:70:85:5a:b9:97:39:42:40:25:
2d:57:dc:67:8e:c6:e8:3e:4e:b7:e1:1c:c6:e8:0c:
e8:99:68:fe:22:26:07:e0:b0:d1:6c:c6:bc:9f:d0:
17:7f:52:94:02:c0:55:f1:cb:58:3f:0b:07:f6:e0:
7f:8b:a6:0a:10:4d:5c:8f:4f:37:2b:a4:16:6f:cc:
5f:a9:b8:d8:35:35:40:ad:4b:8d:89:13:a5:76:58:
5a:07:25:57:77:dd:78:b4:e4:08:ab:63:4f:48:b9:
53:b2:cd:bf:43:74:27:31:15:e7:ad:6e:7d:dc:31:
d7:c9:73:1f:d9:ef:50:0f:3c:c0:10:5d:7f:95:8b:
82:9f:fd:71:64:b7:3e:a6:f9:f1:be:ba:e6:f4:0e:
59:e3:4a:cb:81:fc:43:ce:8a:1d:11:4e:ff:e3:6b:
d1:00:c6:b9:4a:90:d7:46:94:8b:d7:14:76:22:64:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AF:A0:C5:FC:FA:11:02:B6:FF:7E:D4:D9:4A:6B:22:AB:12:92:23
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0e:fc:0a:2c:74:bd:be:a4:8f:e7:87:a7:61:58:8b:0d:56:
ac:ca:b0:02:2c:e8:fd:9a:32:68:76:6f:70:e4:d4:69:43:18:
e9:72:59:91:a9:c1:79:5c:00:d6:b4:54:ca:0b:d8:7d:2e:01:
87:5a:7c:27:14:85:e7:7b:ed:c6:c7:3c:0b:55:1b:5e:90:f9:
a0:9d:4d:0b:81:f1:0d:84:ab:dc:37:f0:71:46:d7:0f:e8:aa:
17:df:92:f1:e6:da:09:cf:54:52:5e:14:54:5c:60:b2:fd:ca:
a2:d0:da:3a:de:6e:59:5e:62:c5:31:bb:9d:fe:b2:4b:a4:fd:
ea:41:c4:a2:93:3a:31:b8:96:7b:f3:f9:4a:9f:48:b5:6a:17:
b5:9b:08:a2:e4:6a:8b:db:40:38:2a:44:42:0e:71:93:b0:6c:
df:a5:db:80:87:15:72:8b:5d:d0:e4:27:c7:4b:81:3c:e6:70:
3d:e8:88:b3:71:84:82:9a:99:ea:34:8e:1f:ab:09:ce:b5:fe:
b7:2d:c0:6d:2a:53:24:81:99:75:a0:97:13:74:75:b5:d7:5a:
54:79:72:39:d5:29:f7:6e:f6:b5:1b:1b:74:28:bf:13:60:cf:
ef:5d:1d:1c:4c:d6:40:14:4e:60:22:d3:d3:33:56:e2:13:d2:
c9:e1:b4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:12 2025 by rpki-client