Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/d2Pkf8hQrMj_2gbj2iOkpETC1vw.mft
File: d2Pkf8hQrMj_2gbj2iOkpETC1vw.mft (raw, json)
Hash identifier: bAMegMLhxdG2zmeODlXw1OvnZ+yzROeaHezf44LHhS4=
Subject key identifier: 8C:A4:39:1A:F1:70:66:3C:E4:58:78:95:70:9F:7C:61:7C:7D:DF:2B
Authority key identifier: 77:63:E4:7F:C8:50:AC:C8:FF:DA:06:E3:DA:23:A4:A4:44:C2:D6:FC
Certificate issuer: /CN=7763e47fc850acc8ffda06e3da23a4a444c2d6fc
Certificate serial: 0194BBCDD0C0A6F423B3B60D11F35CC108BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Pkf8hQrMj_2gbj2iOkpETC1vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/d2Pkf8hQrMj_2gbj2iOkpETC1vw.mft
Manifest number: 0653
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: d2Pkf8hQrMj_2gbj2iOkpETC1vw.crl (hash: 6m/Vv8+heCoZSyAeSs/N3jp+d/AMhaAU8R5L9UqEK4o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d0:c0:a6:f4:23:b3:b6:0d:11:f3:5c:c1:08:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7763e47fc850acc8ffda06e3da23a4a444c2d6fc
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=8ca4391af170663ce4587895709f7c617c7ddf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bc:1c:d8:e3:39:ce:d8:22:a4:54:23:4e:75:
12:8a:d7:31:f6:06:f4:7b:a0:c6:93:e6:7e:7a:46:
98:d7:45:9c:e3:72:2d:38:71:3e:d1:c6:ad:e3:45:
37:88:19:c8:fb:92:7e:ad:bb:ed:3c:7a:37:7e:32:
f0:10:1a:fb:97:2d:04:a8:c2:6d:20:7f:ea:6f:02:
2d:9e:e5:75:db:1f:ab:a3:23:39:71:ef:c4:77:0a:
13:9c:7c:79:90:90:fa:1a:34:e5:8e:35:4c:9d:d3:
39:79:88:18:15:90:0c:dd:17:7a:6e:b6:ea:73:97:
9f:4b:05:26:13:a6:ab:0f:b0:36:37:fd:8e:60:7b:
d0:88:ed:05:e7:0e:6c:cb:66:c9:4d:fc:5d:47:9d:
55:dd:b0:17:7d:8b:b9:f1:87:d1:e0:2a:2f:b1:15:
ed:82:7f:44:7d:90:b3:9a:9b:cd:18:df:a3:59:00:
6b:a2:8b:0a:73:05:36:a0:d5:af:89:aa:ac:7f:64:
6f:8c:49:c2:ad:ea:c7:28:fe:fc:c2:78:87:57:3d:
fc:74:23:13:bb:02:4d:04:57:9a:08:f6:c6:89:86:
a6:cf:b3:ec:0a:8c:1b:f1:64:78:61:33:ff:cb:93:
da:75:d6:59:a5:be:99:ca:a6:97:34:a2:ce:03:7e:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A4:39:1A:F1:70:66:3C:E4:58:78:95:70:9F:7C:61:7C:7D:DF:2B
X509v3 Authority Key Identifier:
keyid:77:63:E4:7F:C8:50:AC:C8:FF:DA:06:E3:DA:23:A4:A4:44:C2:D6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Pkf8hQrMj_2gbj2iOkpETC1vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/d2Pkf8hQrMj_2gbj2iOkpETC1vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/d2Pkf8hQrMj_2gbj2iOkpETC1vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a6:9d:9e:70:03:cc:28:e9:a1:7b:1f:d8:d4:fe:74:17:15:
5c:59:f3:e3:da:16:10:7f:38:58:8c:b8:49:c6:01:71:28:d4:
eb:12:46:2f:29:c7:3e:b0:9b:cc:e9:80:32:6d:4a:f0:05:0f:
a1:0d:ec:61:06:82:3f:da:b7:4c:63:42:71:43:a9:95:68:bd:
9e:a1:88:b8:f3:2f:42:33:ce:2c:b5:69:72:6f:67:ce:16:a7:
f2:23:27:2c:c6:e0:c4:fd:c1:8d:b5:22:6e:f4:de:b6:91:c7:
2b:c3:05:bf:41:08:5f:ac:5f:87:b2:a2:83:40:15:d4:41:90:
34:e2:f6:a5:25:47:ab:f4:3d:9a:23:9e:47:8c:0e:fc:5d:c0:
a3:70:da:d3:c2:1c:38:dd:9c:bb:34:d5:aa:2b:30:eb:c0:25:
ae:17:d1:ee:b7:41:34:44:a4:62:a3:88:5b:31:54:d3:32:03:
26:f8:a1:da:0e:93:75:b4:21:4a:37:5e:dd:75:28:a4:e8:d6:
f4:e0:6a:25:7a:2d:91:da:83:11:9d:13:ab:58:25:8b:cc:bd:
0a:9f:50:f6:c8:ab:2f:f9:92:66:13:58:8e:53:8e:d2:48:16:
1c:99:4b:f3:44:ce:19:27:a1:25:af:bf:80:24:b3:ae:b9:0c:
ae:54:12:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:29 2025 by rpki-client