Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
File: u0WFtGeSNzbELHly4QQvGy4w3GY.mft (raw, json)
Hash identifier: 5XY+fmqAy1zpzkJjWlFxv+mFrHmtc/L9cSD8psPSwrc=
Subject key identifier: AD:BC:0A:49:FD:D8:FF:5D:5F:D8:E2:7E:4E:36:E3:0B:CC:78:74:25
Authority key identifier: BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66
Certificate issuer: /CN=bb4585b467923736c42c7972e1042f1b2e30dc66
Certificate serial: 0194BBCE4A16101A45C488A6C3F6CCE014E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: u0WFtGeSNzbELHly4QQvGy4w3GY.crl (hash: Gic7wPXN9rC2T2MOnkjsq3BaoGQw+a8v7p0jMzm/ie8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4a:16:10:1a:45:c4:88:a6:c3:f6:cc:e0:14:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4585b467923736c42c7972e1042f1b2e30dc66
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=adbc0a49fdd8ff5d5fd8e27e4e36e30bcc787425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:ec:24:db:87:1a:f4:37:0a:c7:9b:0d:9a:
0a:54:e4:f9:37:1d:ad:f6:b1:38:18:98:91:67:78:
95:38:51:bc:4a:70:72:ce:36:2f:60:74:08:3f:ed:
cb:0a:85:b0:62:11:f5:60:49:66:2a:17:d8:e7:71:
4a:63:8e:59:92:d8:fc:29:e3:d1:01:b4:32:c7:04:
30:c1:e8:f8:d1:81:d6:59:f9:3e:a6:a2:0c:fb:99:
0e:2d:7d:bd:d6:7e:4c:88:21:88:11:e1:61:83:a1:
31:b5:b2:c2:13:f1:d6:94:f1:20:0e:a1:27:7b:00:
5d:17:f2:aa:aa:6d:7b:7d:15:b0:1c:6b:6e:ea:e0:
68:e2:e8:b2:d7:ac:bc:d0:75:e8:dc:c6:85:0b:f0:
d0:48:ab:98:e1:5c:d3:f5:01:b8:5e:84:56:a3:24:
6f:4f:f9:04:cb:7b:e4:d1:63:77:11:04:c2:c4:8c:
05:ca:9f:74:8f:63:53:cc:ef:f5:85:c9:e7:ce:32:
2c:cf:f4:c4:35:d8:47:18:69:e6:cf:fd:2c:59:43:
19:b9:5e:db:f2:65:1d:1b:01:53:45:27:75:07:af:
92:b6:38:53:3f:72:b3:70:b6:a6:9a:0e:89:43:a1:
5c:0d:f3:0e:55:1c:b5:d7:3d:45:2a:b0:47:66:8e:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:0A:49:FD:D8:FF:5D:5F:D8:E2:7E:4E:36:E3:0B:CC:78:74:25
X509v3 Authority Key Identifier:
keyid:BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c8:ce:23:15:24:63:fb:8d:2d:9c:20:ed:bc:2d:0e:2a:23:
e0:0f:96:55:f9:51:b5:3b:24:9b:20:c3:a7:4c:55:a9:ac:bf:
0f:53:a2:85:28:10:ac:b5:5e:9c:4e:90:64:23:91:0a:06:8c:
64:f9:41:65:44:6a:4e:d4:81:c5:c6:d2:69:4f:76:aa:da:3c:
47:19:af:b8:06:15:47:50:25:77:5c:0e:50:8f:f7:28:b7:20:
f7:d3:df:d2:9e:55:07:2d:6d:b2:93:1b:b5:ac:cf:fd:72:a9:
e7:b3:4b:f1:b0:ac:a7:17:c3:f9:b7:00:e8:cd:db:26:87:bb:
f5:89:33:59:44:81:b3:7e:e1:66:47:68:92:52:3c:ff:a5:2c:
66:1a:56:36:e2:1d:c4:d3:5d:d3:0f:4d:7c:50:e7:79:22:b4:
f7:5c:ab:cd:ef:34:e4:88:5a:e7:07:52:71:e7:c4:b3:d4:9a:
c9:b9:37:3b:2c:50:d8:f5:6d:45:bd:b3:69:40:fd:65:3c:c1:
c8:0b:44:7f:46:00:61:cd:26:8a:a7:4b:a8:37:05:55:cb:b5:
37:c7:65:6e:b9:be:6b:16:2f:21:b5:db:4a:7f:66:3e:ea:f1:
ed:bd:25:68:f7:82:95:67:a3:ef:f0:d9:ff:da:76:a8:02:82:
f1:4b:0a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:06 2025 by rpki-client