Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.mft
File: 0ksd1ylu1YQ4M4lVyratWNvFP1M.mft (raw, json)
Hash identifier: ySGoF9DXeqS3PyY1up8Qa78dztUVu+SQl6YexeGw7dk=
Subject key identifier: F0:86:20:F6:C4:B1:49:5C:0F:91:26:4E:09:2D:D1:70:FF:FB:C5:61
Authority key identifier: D2:4B:1D:D7:29:6E:D5:84:38:33:89:55:CA:B6:AD:58:DB:C5:3F:53
Certificate issuer: /CN=d24b1dd7296ed58438338955cab6ad58dbc53f53
Certificate serial: 0194BBCEC6815A3E31E1CEF0F8C63D5C3F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ksd1ylu1YQ4M4lVyratWNvFP1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: 0ksd1ylu1YQ4M4lVyratWNvFP1M.crl (hash: bhrO9PpW/5lAKoDwyNS3BIHzVdhvfCh2QmHbpbxsbrY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c6:81:5a:3e:31:e1:ce:f0:f8:c6:3d:5c:3f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24b1dd7296ed58438338955cab6ad58dbc53f53
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=f08620f6c4b1495c0f91264e092dd170fffbc561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:ea:6c:32:52:60:ad:ee:69:11:94:5a:99:
ca:47:b3:d7:22:43:e8:54:c3:b8:97:4a:cb:d8:b3:
7a:af:35:9d:0c:4f:c3:f9:d6:b1:db:1f:66:c1:a4:
d8:c3:5d:94:b5:e9:1f:d6:9c:38:d2:32:28:5d:c4:
33:81:c6:f1:51:f6:c2:3f:93:73:65:b0:fa:75:43:
5a:8a:aa:3d:82:91:17:c2:a0:64:7e:57:1b:11:29:
e3:56:7f:71:02:be:ef:94:f5:1d:bd:e2:51:c8:c3:
be:45:6f:d4:b3:72:7f:50:dd:36:17:2c:24:3a:bc:
71:3d:07:7e:24:f1:6d:ed:36:aa:5c:bc:23:c9:80:
6b:5b:bb:cc:fc:7e:6a:49:f5:43:af:63:16:51:9d:
be:40:49:3b:8d:eb:3f:8e:e3:56:9d:f4:31:6b:32:
8e:dd:b6:df:48:15:03:8c:c8:62:00:fe:2f:b5:ad:
ad:3e:16:33:ec:2a:1c:42:55:66:31:55:57:3f:e0:
b5:3b:a6:77:9c:f4:a0:7a:83:99:9b:72:64:a3:44:
c2:3a:77:c8:02:43:00:b6:7a:47:3e:d6:28:37:fe:
05:d0:04:c6:98:d8:67:0b:7c:a1:f3:55:36:e7:4a:
c6:17:21:c3:62:36:5e:4b:b8:99:bf:c6:82:9d:a4:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:86:20:F6:C4:B1:49:5C:0F:91:26:4E:09:2D:D1:70:FF:FB:C5:61
X509v3 Authority Key Identifier:
keyid:D2:4B:1D:D7:29:6E:D5:84:38:33:89:55:CA:B6:AD:58:DB:C5:3F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ksd1ylu1YQ4M4lVyratWNvFP1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:28:59:3c:fc:13:ee:a1:3a:3c:eb:16:29:a3:48:6f:eb:0b:
21:67:50:03:24:a4:c7:60:06:db:d0:51:0b:6f:07:ca:61:a8:
1d:9a:6f:b5:31:ad:47:6d:13:9c:fd:a7:ce:d1:64:c4:41:0d:
88:85:60:26:b9:42:5f:4d:50:c3:14:df:64:38:59:46:f3:c2:
0f:51:17:c6:c0:53:15:41:9d:4e:32:e1:83:4f:66:3c:98:de:
f4:1a:d5:fb:82:49:df:17:85:ba:60:10:61:4e:b8:25:ff:3a:
0d:57:54:b1:bf:1b:19:c2:ef:85:02:96:10:b3:62:3f:29:e5:
c0:a2:6c:4e:da:f8:e8:85:aa:aa:3a:61:e8:56:46:0e:d9:92:
63:66:e7:b4:0a:0b:e8:7b:83:0f:e8:5c:7e:d8:6c:04:e8:56:
76:11:58:c9:cd:a8:8c:c6:66:3c:ea:d1:32:7d:af:28:9e:8a:
fe:e0:e9:43:4b:76:2c:1f:96:a4:f7:89:48:5e:ac:28:74:90:
69:0a:84:f2:13:91:bd:d6:55:c5:cb:ae:fb:e8:fc:01:4a:78:
c9:38:20:58:d7:97:a0:56:9a:81:b7:5c:36:ea:1a:36:48:1c:
2f:a9:56:38:79:86:4b:80:8b:75:01:05:de:fb:e5:64:f8:7b:
57:61:b2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:44 2025 by rpki-client