Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
File: cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json)
Hash identifier: sJutOUu13v9w9v9rziy3NNNopDHmz9JYqfjAD2l/cW8=
Subject key identifier: DD:FF:C3:D4:B0:02:9A:4B:F7:BA:C8:D1:12:F9:F8:FB:96:BD:97:F7
Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
Certificate issuer: /CN=70379a6713e79e598d9feaa66dca169188e0218d
Certificate serial: 0194BD17CB171FC3A24AD81E0AEBC39D112B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
Manifest number: 0C2F
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: eOICy9IdeU4Lr/Togzy9FwZjyb+2A72fGggPMVO4HxA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cb:17:1f:c3:a2:4a:d8:1e:0a:eb:c3:9d:11:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=ddffc3d4b0029a4bf7bac8d112f9f8fb96bd97f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:d9:ed:5b:cb:01:99:26:52:20:11:82:e1:
d8:86:ec:21:e6:16:4f:f0:64:29:5b:9a:52:2f:7d:
1c:a2:af:36:21:57:75:f4:e1:7e:9c:75:3a:c6:13:
8e:3c:f1:2d:af:6b:bf:2a:71:dc:1a:9f:ae:eb:48:
ad:3e:01:d1:65:9f:61:da:c6:73:6f:1e:83:f7:c5:
e4:19:bf:ed:0f:c0:61:67:c2:8a:14:72:1d:71:f4:
65:0b:8e:41:bd:ae:1f:5d:6a:b3:a5:46:af:2b:b4:
fa:10:04:6e:04:02:21:5a:d0:90:ff:27:12:ef:8d:
ca:69:a3:8b:23:7e:b8:04:b1:90:a2:42:d1:f4:8e:
10:34:30:92:b7:d8:29:3d:9a:0b:67:3d:84:43:f3:
32:3c:a4:6f:6f:b0:7f:d0:89:c0:a4:34:46:1a:81:
9a:9b:1a:ff:f9:1a:82:f5:08:dd:77:ef:eb:d4:0a:
41:da:1d:e3:5b:26:66:4f:99:92:33:c7:a3:06:ee:
c6:49:df:a2:0a:ce:a5:58:89:71:44:fb:b6:a1:f8:
f1:dd:52:bc:14:88:43:24:88:cc:8b:da:91:75:90:
b6:45:9b:8c:cb:4e:d7:21:4d:a7:d6:03:95:fb:47:
88:51:ff:04:aa:a7:63:a4:08:17:e2:65:c3:68:01:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:C3:D4:B0:02:9A:4B:F7:BA:C8:D1:12:F9:F8:FB:96:BD:97:F7
X509v3 Authority Key Identifier:
keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6c:ca:c9:b3:be:d6:40:06:b9:db:f2:9f:0e:c6:2f:12:7f:
46:ac:3d:60:6b:02:89:f2:7c:12:0e:ee:c8:64:3b:14:53:5a:
fa:ca:d2:9b:ae:76:65:25:2a:2c:cc:e2:f6:b9:ed:06:07:03:
80:95:91:3d:de:a9:f9:09:a9:a9:7a:1d:6a:8d:9a:2c:4a:f9:
9a:6f:ca:20:ea:67:09:26:5d:91:72:37:38:3b:14:3c:58:d6:
19:7f:40:65:0d:18:e0:c9:5f:de:1b:09:8e:a0:74:7f:68:a5:
14:59:a8:b3:0a:2d:58:ef:06:43:be:27:0e:0b:43:29:d1:75:
8c:2b:7a:ca:e9:c4:a3:2c:a1:08:ca:1e:32:a4:89:bf:d8:8a:
9c:93:d6:df:19:78:03:1f:9c:87:7e:42:35:e4:8f:31:87:a0:
74:4c:d9:d2:0a:b3:bf:46:90:1f:99:c0:e6:61:6b:bb:38:4a:
2a:f3:93:3e:48:46:e5:51:d8:ba:9b:2c:6a:44:b1:ad:13:17:
cf:43:41:e5:79:14:d2:c3:82:12:af:82:ba:6b:37:6c:76:09:
eb:5d:1a:4d:16:95:13:67:36:64:79:58:ad:43:81:fc:7c:ad:
9b:fc:54:4b:98:d3:1d:8d:b3:80:53:5a:8e:bb:1e:78:d4:65:
b2:b5:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:25 2025 by rpki-client