Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
File: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft (raw, json)
Hash identifier: SXO/TvvhMyyOV7yp9f6Isc6Q2qnYonIXrZbSgfR2vSo=
Subject key identifier: 44:3E:DB:71:48:60:89:F7:CE:5B:A5:29:A9:81:48:CD:FC:1E:70:6C
Authority key identifier: 44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
Certificate issuer: /CN=44b437b31b50670384fa5d20d8924d611b91633e
Certificate serial: 0194BD17D2197255F66D2F2B4E72C962ADF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
Manifest number: 0326
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl (hash: b2ob+0yQ5CuMBoCprcLmQ4JmNl5IuVN56DI0b8mzhQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d2:19:72:55:f6:6d:2f:2b:4e:72:c9:62:ad:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b437b31b50670384fa5d20d8924d611b91633e
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=443edb71486089f7ce5ba529a98148cdfc1e706c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:8e:d3:b5:83:e4:38:34:c4:57:fc:de:6e:
17:60:5f:c1:e2:13:6c:49:f9:fb:33:1e:95:d5:7b:
2d:dc:38:36:38:01:4a:85:b5:cd:9b:58:88:4f:a6:
41:ce:03:af:3a:89:5b:c2:26:83:eb:65:44:bd:81:
b6:29:5f:d9:b2:75:df:71:f5:da:fc:c2:38:00:65:
6d:15:e6:f3:72:81:c5:30:9c:77:16:46:c2:cf:0d:
d6:f6:a0:0a:57:4b:d2:05:d6:46:69:9d:1a:47:4b:
17:a9:c3:70:ae:06:4d:b5:bb:88:2e:19:10:fd:38:
4b:c5:cf:a8:cb:60:a6:c2:2a:ee:c2:9a:2a:f1:56:
69:53:96:32:2d:da:61:7c:13:67:e1:99:d6:0c:7e:
9f:64:0a:28:04:ae:e3:0b:83:46:a3:65:a1:14:17:
50:dc:c0:7c:31:86:04:6b:19:00:e5:ee:91:76:16:
b2:28:27:02:57:3a:f5:02:85:de:f2:91:01:97:16:
f7:d4:e4:70:12:87:69:31:f6:dc:d9:47:26:df:a0:
f2:38:78:39:e0:e8:68:1c:b9:74:c8:f0:39:a2:55:
d9:3e:20:4a:5a:f6:f7:75:53:db:db:e1:37:8a:3a:
1c:a6:0c:9d:4f:65:d1:ac:9a:04:37:69:b0:f3:bc:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3E:DB:71:48:60:89:F7:CE:5B:A5:29:A9:81:48:CD:FC:1E:70:6C
X509v3 Authority Key Identifier:
keyid:44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:70:3d:f7:f2:95:25:06:f9:5c:06:0b:1a:3b:b4:2d:02:fe:
75:02:34:79:63:0e:17:09:7e:09:2c:dc:ea:b6:7c:ae:fa:3c:
5c:d6:1b:11:c7:48:51:1c:2d:6b:48:88:e8:0e:e0:3b:8f:30:
bb:f1:93:d2:cf:2f:3f:87:13:c0:4a:5c:2a:d5:ae:24:d4:70:
05:f5:b6:09:a4:2a:50:77:0e:a4:02:55:25:02:7d:28:5f:e9:
dd:05:02:24:17:78:bb:ed:8e:88:88:55:1f:30:af:09:de:36:
bc:ca:2c:73:17:7f:24:ce:fc:d7:42:4a:54:a4:09:66:dc:b7:
b8:39:4c:cb:d5:86:b9:bf:d2:91:08:64:38:d6:88:12:e7:d9:
f6:89:ee:ca:6d:a4:da:ab:d1:f2:7f:56:bc:b0:e2:62:22:55:
eb:a7:1a:44:aa:f7:8e:ca:aa:51:f5:1b:be:54:7f:ae:89:b7:
74:80:17:f7:36:06:06:a7:ae:c9:18:f5:a0:c8:9b:db:4f:d6:
b3:84:3f:7d:a2:17:ba:71:b5:ea:76:28:8c:2f:1f:6e:af:a2:
2d:5e:ce:33:0b:99:f7:cb:bb:35:7f:b2:c1:a7:8d:e8:fd:61:
65:7b:b5:ed:e5:b2:e8:30:f7:e3:a9:05:01:2a:81:25:da:37:
bc:84:c5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:47 2025 by rpki-client