Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
File: mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json)
Hash identifier: FedCHBNnWkeMhbnP3Hb5RofHUCJ7Oay3ILf5cb+dqx0=
Subject key identifier: 5A:40:47:DE:D9:F1:A1:6F:1C:04:09:B9:ED:2F:03:26:0E:E6:C8:91
Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
Certificate issuer: /CN=983f1b139df24a05c2e5256052b0212517e47351
Certificate serial: 0194BD174F215DC6171D7B86B78868AF21C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
Manifest number: 2C
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: 0aGLE8vj2w0ELbJ1+J5yW504L+9WlHTLNAEvzbQ1zdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4f:21:5d:c6:17:1d:7b:86:b7:88:68:af:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=5a4047ded9f1a16f1c0409b9ed2f03260ee6c891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:14:de:be:49:8d:02:2e:17:8c:74:d4:49:
72:40:03:e9:d7:73:f5:07:ef:05:46:23:7b:2b:79:
02:b7:1a:5e:91:7f:fb:11:01:e1:e3:00:b9:05:ce:
b8:83:c2:88:8f:00:60:4e:f9:66:7f:8d:81:3e:cf:
28:ac:65:93:e7:d8:2b:c5:6e:42:9d:0d:e7:a3:88:
17:dd:b4:5a:d9:66:ef:d3:e0:28:48:0f:98:0e:6e:
61:3d:f6:64:9d:06:7f:3a:ba:7a:19:c4:6e:a0:78:
3d:fb:17:36:b8:11:ed:58:d7:d0:5f:83:3d:ad:cf:
e8:4b:81:cc:61:54:c8:e4:b3:dc:cc:cc:c0:2d:4f:
14:a1:94:84:55:1b:9a:7a:dc:44:b5:8f:97:54:98:
39:85:2c:5f:17:38:8b:93:fd:ca:8f:44:0d:63:8a:
8e:77:d8:47:5f:08:82:d1:c9:41:44:2e:e0:2c:a4:
d9:50:7f:98:f0:b2:85:a1:99:6b:ce:51:51:38:8e:
b0:62:73:44:91:b4:ba:85:e9:d6:c5:53:74:34:d8:
9f:8f:df:5a:e8:22:f8:17:73:18:82:a8:0f:aa:e7:
ed:dc:2f:b3:81:6b:2f:b9:91:83:d4:e1:d5:ce:99:
cf:9d:a7:df:df:d8:6b:6c:50:d0:f9:4a:d2:b0:94:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:40:47:DE:D9:F1:A1:6F:1C:04:09:B9:ED:2F:03:26:0E:E6:C8:91
X509v3 Authority Key Identifier:
keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ae:52:9d:fb:0a:09:c8:dc:5d:33:0e:bb:53:d4:a3:05:9b:
99:21:96:38:72:d1:de:1c:9e:30:78:83:be:d2:2a:ca:82:66:
ae:5e:76:89:27:7d:66:b3:9f:1f:46:71:17:3d:20:84:42:57:
26:9b:be:a3:80:a0:76:2b:b3:23:11:0a:99:3d:cd:1b:a8:17:
ee:66:54:f5:8f:fd:63:e8:58:74:22:f5:a9:31:e6:9f:74:9e:
b0:6f:98:58:8c:65:9b:cd:8c:5e:3c:64:5e:4f:d2:56:29:a1:
7e:89:1a:ce:28:bb:0f:45:34:46:ce:57:e2:3e:28:0a:52:ef:
a9:41:df:8c:51:b4:d1:c4:34:83:f9:00:d5:ef:99:bb:ed:f4:
a6:c7:7a:30:95:62:7f:c4:02:b3:ce:22:b8:39:48:b6:b7:e1:
07:12:ce:f8:7f:a3:27:4c:a1:d7:33:d0:7c:5a:94:a5:89:e2:
5c:a3:ca:28:03:75:c2:35:e2:1d:61:15:08:22:ab:c7:2f:48:
9e:2b:1a:6e:1d:2e:66:94:6a:ab:b0:93:9c:3e:03:94:79:d1:
7e:52:14:2e:38:f8:be:6e:fb:17:b9:05:fb:33:00:a8:21:c9:
b2:13:61:82:6c:15:75:90:70:ff:71:c2:76:d9:02:ab:9a:eb:
01:2b:e1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:33 2025 by rpki-client