Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: FfB1Fimw8vkSTNPAsgAFN0hTOXP+C1jwL3BWy0gEvIE=
Subject key identifier: 35:E5:D2:A2:E4:CF:98:71:33:C9:D9:AB:C0:98:85:CA:20:86:3F:D3
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 0194BCA9903277CA2552BDB9BB85F8FEA53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 03EA
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: M2vYScPwAvroh76OLFAxnJA5sLTYXAYbgRqqIDB3x1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:90:32:77:ca:25:52:bd:b9:bb:85:f8:fe:a5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=35e5d2a2e4cf987133c9d9abc09885ca20863fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:6e:2d:f1:18:b7:4e:be:bb:ce:16:1b:d0:
4c:47:61:33:06:48:39:f8:c4:09:74:1f:8a:cc:e9:
16:18:c9:ab:78:47:07:50:d6:d3:8b:0b:42:14:6f:
42:3a:3c:72:bc:3b:49:5d:17:ed:46:1c:8f:93:93:
01:37:05:f3:2b:64:bb:82:c6:ed:66:79:d3:fd:2a:
73:d9:6c:0b:76:2a:db:e7:20:07:c8:2a:39:a6:09:
07:33:2b:cd:e6:36:a1:12:e6:ec:e6:ac:24:9a:87:
c8:f6:c5:bb:31:85:55:32:e2:79:c7:35:e8:bb:2e:
73:a3:0c:a5:41:20:9c:d6:31:5f:f1:91:4d:09:37:
47:62:09:3f:e1:ec:06:3d:55:e0:c6:90:23:32:f5:
d9:0e:35:c7:4a:62:03:8a:a3:78:5a:56:35:65:1c:
f9:af:1b:32:8b:53:f6:30:92:95:a6:5f:e2:f1:04:
3f:10:0c:47:1c:96:5d:e1:66:11:44:f6:80:22:10:
2a:ae:f3:7d:17:26:30:fa:68:36:81:17:9b:b2:dc:
bd:31:45:59:2b:aa:f6:02:e1:a3:40:63:50:aa:63:
f7:15:48:8c:f5:8d:e4:80:6f:b3:67:5a:1d:ba:f8:
a9:7c:84:7c:96:eb:93:53:fc:2f:77:09:aa:79:80:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E5:D2:A2:E4:CF:98:71:33:C9:D9:AB:C0:98:85:CA:20:86:3F:D3
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ac:b8:f8:35:ae:02:fd:34:52:2d:e3:03:b0:c7:75:fe:fb:
eb:26:de:af:c3:e3:fd:cf:bf:02:cc:15:20:d6:dc:e5:d7:70:
dc:9b:64:12:00:f5:c0:de:36:86:bb:9e:fd:e6:c0:44:40:62:
91:2b:f4:16:96:5f:1c:93:08:6d:b9:89:38:39:cd:72:8b:b9:
51:7f:87:39:4e:69:19:1d:d0:fa:5b:54:86:b9:bf:ef:67:2a:
6e:5a:be:d8:59:a0:79:fd:43:cf:67:6d:e5:32:54:e8:18:01:
14:04:8b:ba:69:3e:02:60:2f:09:ad:0f:e9:7f:d1:70:d1:cc:
f8:43:e3:d3:71:8e:93:3e:9d:6c:78:5e:2c:e3:e4:8f:1d:23:
5a:a1:6c:b1:24:ac:64:cd:b6:fe:3a:6d:92:7d:36:66:14:fb:
9b:81:9b:bf:16:d8:13:2c:7e:3f:da:d9:99:b8:53:d1:f9:a6:
b8:d1:79:1c:a7:22:97:17:1e:10:6b:1c:db:06:10:72:1f:fe:
c2:a5:30:44:6b:ee:9d:64:5f:42:f7:9a:9c:e5:a8:ae:df:d5:
e0:d3:79:fa:f2:28:3c:15:fc:81:5e:fe:a7:fe:74:1d:e6:56:
a0:60:06:f6:f0:f6:77:83:0b:b3:ea:5e:85:0c:b0:a4:b9:6f:
e1:d3:b2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:01 2025 by rpki-client