Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
File: rNbaLhYbceF0IP0x2l9D5VWNxH8.mft (raw, json)
Hash identifier: +NSgAB8gSeps2Rx/zcvryctj0dALjoAQ7iYAZ6UnrZM=
Subject key identifier: 0C:5B:84:9C:89:22:68:37:B2:EA:8B:03:28:10:AF:94:26:63:0B:6A
Authority key identifier: AC:D6:DA:2E:16:1B:71:E1:74:20:FD:31:DA:5F:43:E5:55:8D:C4:7F
Certificate issuer: /CN=acd6da2e161b71e17420fd31da5f43e5558dc47f
Certificate serial: 0194BBCE96E98A7867EEB5A8F16842C68586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
Manifest number: 04C0
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: rNbaLhYbceF0IP0x2l9D5VWNxH8.crl (hash: HbJDHdOi5cVDUtKPGEmF1iKVU1OJRljXMp67a0p4/3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:96:e9:8a:78:67:ee:b5:a8:f1:68:42:c6:85:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6da2e161b71e17420fd31da5f43e5558dc47f
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=0c5b849c89226837b2ea8b032810af9426630b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:5a:73:06:2e:9b:1f:87:1e:61:5e:cd:33:
a9:c4:9e:cb:52:53:b8:9d:59:da:d6:33:f0:64:88:
7d:4a:86:93:9a:3d:56:f8:8a:9a:e9:85:62:e5:5a:
09:6f:f3:20:c5:1f:c9:46:bd:3e:14:45:e6:e5:2b:
c4:f1:3d:d5:7d:89:1e:b2:bd:53:73:b0:f6:01:72:
58:43:0e:3c:31:eb:e4:70:70:90:d5:7d:a7:da:c9:
08:60:ed:5c:1d:bd:01:81:2a:fe:9e:34:d7:ed:52:
e1:22:ef:59:1c:5b:7a:f2:75:df:36:8b:12:ab:70:
9c:a9:3b:7b:a1:d2:5b:1c:5f:82:ef:57:1a:0e:af:
7f:d0:4a:a4:28:58:d8:c2:df:9a:d6:49:e9:d3:eb:
dc:00:93:0f:66:c2:73:2a:aa:6c:18:f7:90:ef:fa:
59:a3:b6:de:d0:8e:63:52:f2:a6:94:cf:1b:2b:53:
68:d6:49:de:6d:f7:ba:ee:32:c8:9d:9a:a2:a2:4b:
2c:de:43:ed:3d:d7:c2:5c:c3:5c:15:f3:61:a6:fd:
ab:b6:fd:40:c4:07:65:d9:1d:8f:e5:c2:8c:40:45:
5f:7b:87:c0:c2:21:da:5c:a1:8a:b2:12:24:2b:e2:
66:09:fb:b8:fc:2d:0e:60:72:07:1e:26:9c:5d:03:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5B:84:9C:89:22:68:37:B2:EA:8B:03:28:10:AF:94:26:63:0B:6A
X509v3 Authority Key Identifier:
keyid:AC:D6:DA:2E:16:1B:71:E1:74:20:FD:31:DA:5F:43:E5:55:8D:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ce:af:3e:09:04:03:57:ef:19:4a:f0:c2:66:f7:9e:52:e0:
fa:0e:e7:5b:9e:a1:72:f4:5d:cc:31:6e:bf:ac:08:95:09:c0:
ec:9e:be:29:30:c4:a0:6d:3c:bc:33:fa:54:93:5d:61:43:69:
c8:62:c9:df:20:91:33:d7:3d:5f:f3:c1:f6:bc:bc:88:01:ef:
cc:9f:4b:ae:68:14:21:87:f8:67:d5:2c:55:64:b2:d7:41:9f:
4b:dd:15:cd:ba:59:a4:cd:19:5f:10:7b:08:b1:7d:55:3c:d2:
5e:9c:16:89:4c:e4:ad:df:00:3d:fa:78:7b:8c:1e:ff:7d:68:
fe:fd:13:8d:b5:72:15:d2:4e:fc:9b:58:bb:4f:95:60:db:8e:
3e:49:53:ee:7d:e9:2a:fe:70:67:c9:cd:ff:4f:89:19:c4:c8:
19:5c:5c:57:49:6c:e9:58:62:8b:ba:60:ab:e2:d6:f1:d6:7f:
cc:3b:c4:24:f0:8d:42:40:c9:82:15:bc:96:c9:08:d7:ef:b5:
b1:f3:5f:ae:70:e7:a8:6b:f4:a3:5e:98:ad:6e:80:16:4d:3b:
b3:7c:ed:ed:9f:57:a4:de:b5:6b:2a:c1:15:55:38:7d:9a:9b:
a2:1b:b6:bf:1d:b5:3b:83:e3:d2:dd:58:7f:d1:32:95:c2:76:
52:7c:21:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:09:57 2025 by rpki-client