Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
File: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft (raw, json)
Hash identifier: 5AfHhMOI0RgaWFasiJ/3pAfjn4FnVmuA/q1eYNECTm8=
Subject key identifier: D0:B0:DA:45:C2:38:B3:E0:FA:2E:45:DF:E0:29:C0:D5:DE:A1:15:6F
Authority key identifier: 72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
Certificate issuer: /CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Certificate serial: 0194BD857BE270A2360EAF70D7B7C6778326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
Manifest number: 017A
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl (hash: GBrGU7+zAxJGFKwtZyc9KJPd/1GiA3Rs5tTk0uUy+Bg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7b:e2:70:a2:36:0e:af:70:d7:b7:c6:77:83:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=d0b0da45c238b3e0fa2e45dfe029c0d5dea1156f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:26:45:fc:31:51:a5:9a:b0:e7:f5:9f:c5:
4a:1b:73:64:81:1d:86:c2:6f:59:21:10:1b:e2:63:
9a:0e:d4:03:5c:71:fc:3d:dd:5e:71:b6:a2:75:f5:
64:f4:3a:3f:47:d7:77:f2:b1:89:17:aa:2d:24:3e:
bb:b3:5b:c9:a3:b3:50:50:60:c3:9e:01:08:e6:fe:
17:80:bd:94:4d:0c:29:27:8a:cb:0b:13:99:87:54:
1a:30:26:6e:ed:eb:cb:3a:bd:70:0c:a7:c9:a8:b8:
74:a3:c9:c8:97:c3:bb:dc:40:9a:64:ba:54:eb:35:
ee:65:78:36:34:f2:dd:aa:06:fe:61:25:c9:b7:bb:
f1:82:cc:94:63:00:a5:dd:19:52:ae:eb:3b:4d:f7:
7a:b1:c0:02:f4:7d:31:cb:41:14:4d:ed:ae:79:ad:
1d:c0:72:b3:b8:8d:55:05:3b:bb:fc:d3:38:e6:a7:
e0:4e:71:24:14:c8:02:da:87:7d:9b:cb:2f:14:34:
36:c3:59:37:94:78:66:ec:f1:2c:5d:1a:e6:cb:ae:
c1:e7:8e:d9:74:33:61:ec:7b:5e:96:6a:4c:5e:25:
dc:b0:80:94:29:e7:88:85:fa:e0:1e:22:c7:c4:40:
22:6d:60:c0:88:81:f0:83:a0:c3:fc:6e:6a:dd:94:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B0:DA:45:C2:38:B3:E0:FA:2E:45:DF:E0:29:C0:D5:DE:A1:15:6F
X509v3 Authority Key Identifier:
keyid:72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:02:11:fa:e5:25:0b:8c:b4:08:c4:b3:21:61:d6:26:a6:07:
9e:97:61:67:de:10:71:d5:6c:49:6d:44:bf:7a:6f:b1:c5:d1:
56:75:b1:5d:95:55:3a:93:23:66:2d:c3:af:e2:ba:95:9e:69:
a2:ad:0c:5d:ed:3f:4c:e2:83:02:56:a2:a8:76:4d:ec:0d:00:
c1:32:a3:13:46:69:42:99:dc:14:29:51:0b:02:07:dd:dd:a2:
61:27:d9:88:f0:47:0b:be:93:74:f6:8e:f8:3b:ab:20:59:6e:
47:6d:3c:57:16:03:d9:a4:b9:23:4d:6d:00:e5:39:23:1a:0c:
0c:42:b4:08:b1:c5:8a:72:96:0c:e4:46:b5:7f:7d:63:a6:05:
88:c4:b8:89:32:6d:ed:10:9a:c0:96:b8:3e:1e:59:af:f2:4d:
5c:a4:88:7f:9b:9a:98:e9:15:a8:ac:50:27:22:07:85:5d:57:
3f:93:7c:d6:6d:87:8d:f3:5a:68:dc:9f:ea:0e:d7:70:b0:e6:
f2:62:ca:e7:e2:ea:57:a0:8a:db:d2:74:63:c2:a0:95:ff:ba:
c7:3d:19:2d:2e:e5:93:3f:a0:43:e7:38:84:09:91:59:56:8c:
0f:95:8c:82:fc:4a:dc:84:56:4b:da:c4:7c:6c:99:8f:c0:5b:
09:fc:04:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:15 2025 by rpki-client