Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c8e419-0346-433f-9309-de81f9ad779c/1/RNvjYmp2sEoSCIlwSViGPUJjLw8.mft
File: RNvjYmp2sEoSCIlwSViGPUJjLw8.mft (raw, json)
Hash identifier: 6GOklSit47BeeLe+wC8mQl/e3t6F0ujLzPEVytx20G4=
Subject key identifier: CD:C8:25:78:5F:24:6B:7A:CB:6A:8E:B1:CF:6F:B2:94:B5:C8:F0:78
Authority key identifier: 44:DB:E3:62:6A:76:B0:4A:12:08:89:70:49:58:86:3D:42:63:2F:0F
Certificate issuer: /CN=44dbe3626a76b04a120889704958863d42632f0f
Certificate serial: 0194BC04F57330F7AD2E642A1917A2F43A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNvjYmp2sEoSCIlwSViGPUJjLw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c8e419-0346-433f-9309-de81f9ad779c/1/RNvjYmp2sEoSCIlwSViGPUJjLw8.mft
Manifest number: 0239
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: RNvjYmp2sEoSCIlwSViGPUJjLw8.crl (hash: ont+y13SMGwybKIk0UQyJJxjZNrr1QZ8Ch8Rkl8sVh4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f5:73:30:f7:ad:2e:64:2a:19:17:a2:f4:3a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44dbe3626a76b04a120889704958863d42632f0f
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=cdc825785f246b7acb6a8eb1cf6fb294b5c8f078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:59:c2:22:74:96:56:95:bd:0f:ab:c5:fe:
c8:0c:b0:5e:cb:84:c3:81:5c:a4:5f:31:b6:ad:bb:
f3:61:d7:fc:92:56:3d:ae:a8:eb:8e:d5:a8:61:be:
e8:12:2f:f1:ea:81:66:91:00:83:e7:c1:f2:3f:2a:
2c:b3:b5:a1:73:17:f7:b2:74:d0:41:f3:38:07:ae:
3e:bf:6c:e6:a3:81:5f:60:3a:c0:79:17:88:01:d0:
f6:50:02:2f:4f:63:31:62:d6:86:15:fa:d5:d7:5f:
72:c8:05:3e:a6:bf:e4:b0:74:2e:69:51:af:97:08:
19:6b:07:45:22:35:84:e2:cd:9a:b2:21:cf:96:bd:
22:be:2f:2e:00:52:1b:c4:fd:58:db:7a:25:0e:e4:
a4:b9:94:0d:f3:90:07:37:fb:b3:ca:5e:db:cb:26:
a3:d6:2b:c0:31:5f:ef:64:44:c1:50:16:4f:f7:f3:
13:a9:50:ec:f6:30:2b:5a:ff:26:b6:bb:da:1c:00:
11:62:d5:b9:d0:0f:54:6d:a9:4a:3e:b5:46:b0:ce:
69:b6:98:60:70:fb:77:72:f7:e6:85:0f:ab:2c:ce:
4d:51:14:e3:17:e5:57:30:6b:ec:cb:54:f6:d5:12:
2b:7c:79:4d:da:48:cf:28:de:cd:e1:bd:31:a8:fd:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:25:78:5F:24:6B:7A:CB:6A:8E:B1:CF:6F:B2:94:B5:C8:F0:78
X509v3 Authority Key Identifier:
keyid:44:DB:E3:62:6A:76:B0:4A:12:08:89:70:49:58:86:3D:42:63:2F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNvjYmp2sEoSCIlwSViGPUJjLw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c8e419-0346-433f-9309-de81f9ad779c/1/RNvjYmp2sEoSCIlwSViGPUJjLw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c8e419-0346-433f-9309-de81f9ad779c/1/RNvjYmp2sEoSCIlwSViGPUJjLw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fd:fd:61:35:58:ee:58:1f:80:fb:dc:d6:c1:68:a9:05:c2:
ad:a9:4f:c5:37:fe:3f:73:ce:de:14:ee:46:4c:2d:5b:e2:47:
14:d3:ad:e3:d3:ae:53:54:61:c6:b2:60:61:e8:f0:9d:99:50:
86:d0:4c:23:f9:b2:8c:0a:be:00:a5:50:1c:b0:1a:07:a4:de:
69:e6:a7:9e:d8:9a:2a:75:9a:a5:77:d3:fa:e4:22:86:86:8e:
4c:32:0a:77:d0:1d:91:2a:fd:47:03:0b:7c:8c:0a:0a:2e:a8:
34:dc:62:55:3c:db:28:d2:7f:dc:c8:72:3a:29:2a:e3:a7:72:
cb:e8:fa:11:36:0d:de:5b:3b:72:69:7f:b8:d7:ff:fc:60:60:
13:0f:00:07:9a:55:94:ab:66:66:5a:bc:7a:ba:5a:11:6c:c9:
cd:53:77:b8:21:4a:60:2a:fd:7b:4b:01:18:0c:0a:fb:36:e0:
c5:3d:7d:a8:7e:d8:de:5b:8f:da:86:69:45:01:fc:9a:77:82:
43:4a:f5:39:3c:c7:66:71:64:d6:9f:ad:13:24:8c:ec:d5:30:
ad:2a:d1:23:20:3f:4c:df:e1:07:1d:84:d0:c2:c2:8c:2c:7e:
84:a5:83:7d:ee:fb:dd:15:12:9a:a4:4a:28:ba:02:86:c6:83:
7e:e7:f1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:59 2025 by rpki-client