Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
File: RDNmA3i76zplxtyp7Qp3b70gRhA.mft (raw, json)
Hash identifier: BVYal2Zu/TKqrEF+TlUib5roOQw5QI1b9sPuRa0brPA=
Subject key identifier: E0:57:05:73:ED:DA:74:69:FC:3C:A6:64:3D:34:AD:21:E5:7C:75:88
Authority key identifier: 44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10
Certificate issuer: /CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
Certificate serial: 0194BCAA007DDEF9B61DD56BCB70F3AA3728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
Manifest number: 0167
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: RDNmA3i76zplxtyp7Qp3b70gRhA.crl (hash: 4HXW2c/jGQF7kfZ1DKvqdI+Ytzsgvq8Kc12emXnyWfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:00:7d:de:f9:b6:1d:d5:6b:cb:70:f3:aa:37:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=e0570573edda7469fc3ca6643d34ad21e57c7588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:c4:4a:8f:70:2a:8a:d7:94:0d:dd:89:20:
6a:96:27:9b:f6:ff:ad:7a:8a:3e:20:ef:fd:ad:36:
14:45:f7:eb:48:1c:1b:cd:91:97:13:f7:3c:2a:77:
48:8e:40:ef:89:d8:57:f1:d1:20:51:ce:75:4a:2f:
92:a3:6f:72:b7:0b:6c:e5:d6:ea:4f:7f:ec:86:82:
32:a7:bb:15:81:b2:c4:2e:26:58:ef:a2:a3:ec:58:
8c:ee:98:ff:08:77:f7:cd:68:6f:fd:ec:6a:c2:53:
64:28:0a:ec:42:64:f6:7c:94:9f:d9:cf:ff:53:f2:
e4:38:ce:4b:bd:e6:3a:b0:46:4c:31:a0:00:bd:33:
fb:56:0a:d3:2c:33:43:8c:da:fc:4c:95:d1:b9:8a:
d9:cd:4d:de:b0:41:a9:c4:84:e9:67:07:bd:c0:51:
ef:e4:d2:ac:59:7c:07:d3:53:1e:5d:f8:86:f6:bc:
2d:07:e2:b2:d8:a9:71:6c:23:c4:a3:b1:b6:5f:26:
30:b1:d8:75:04:f6:19:d9:d4:a1:d4:e8:a2:0e:39:
e3:d3:5f:70:7a:d5:13:e1:76:4f:f3:61:81:2e:d4:
4c:3e:3d:15:f3:24:1c:d8:4a:4f:94:8f:17:3f:32:
1c:0c:92:99:f8:f0:d3:32:5d:bc:2c:d2:e1:ce:4b:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:57:05:73:ED:DA:74:69:FC:3C:A6:64:3D:34:AD:21:E5:7C:75:88
X509v3 Authority Key Identifier:
keyid:44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:df:d3:9b:a5:68:43:73:77:61:1c:f8:ff:ee:12:59:d4:c6:
38:f3:2c:d6:39:2f:31:ae:db:01:92:34:50:98:b3:ec:42:47:
c7:f8:35:c1:45:98:cd:59:21:1d:9c:96:1a:2a:a2:31:f6:86:
8b:b8:10:a0:59:59:57:c8:50:7e:41:d3:b5:70:dc:bf:07:20:
35:ed:39:12:2f:71:38:ff:57:64:24:f4:2a:3c:60:92:8e:10:
ad:7f:90:3d:40:e0:e7:de:65:f2:37:6a:34:9a:d8:c8:9a:57:
86:c2:44:72:36:dc:82:18:0d:f0:e6:74:47:a9:7e:ba:c9:bb:
58:d0:02:3c:b4:8a:a6:bf:1f:5c:17:8d:9c:b1:94:dc:0f:ed:
c1:87:0b:3c:46:79:6e:37:80:4c:07:ce:e7:e9:e3:1a:6f:62:
2d:fe:57:ab:0a:25:da:8d:9e:20:68:6e:33:97:28:c7:c2:bc:
0e:90:b0:c4:f8:95:bb:07:23:8b:c7:5d:9e:8f:d5:0f:28:73:
c4:d4:4c:33:5d:ae:1c:36:bf:cf:b4:45:d8:28:f8:9c:c8:09:
be:cf:75:a9:0d:64:a8:3b:0c:88:b0:cb:f9:a4:4f:4c:79:75:
02:d1:00:5d:f0:88:37:5c:31:30:91:ae:ad:dc:01:4c:a7:9f:
1e:28:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:19 2025 by rpki-client