Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft
File: sLQvCUy6l0wfrsa97BVg9mOHiRE.mft (raw, json)
Hash identifier: Jhv09HCi3J9xm8XBmF/27QIhBhg4/pQYQoJsSQWOwLQ=
Subject key identifier: DE:E4:E7:CD:E9:ED:81:D2:12:8C:AF:AC:AD:90:3D:F4:E1:34:A7:C9
Authority key identifier: B0:B4:2F:09:4C:BA:97:4C:1F:AE:C6:BD:EC:15:60:F6:63:87:89:11
Certificate issuer: /CN=b0b42f094cba974c1faec6bdec1560f663878911
Certificate serial: 0194BBCEE1A5CEE2B83902B5B4661E1FBCC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLQvCUy6l0wfrsa97BVg9mOHiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft
Manifest number: 10BB
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: sLQvCUy6l0wfrsa97BVg9mOHiRE.crl (hash: T0dMO9M/eaDQQ57Ih2dt+B4smjP4+WlAfY9/Z4HuzjA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e1:a5:ce:e2:b8:39:02:b5:b4:66:1e:1f:bc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b42f094cba974c1faec6bdec1560f663878911
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=dee4e7cde9ed81d2128cafacad903df4e134a7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:43:d5:7b:e3:7c:50:65:97:c0:3a:d4:c5:
5d:6c:24:86:d0:56:06:8f:d2:3d:46:83:d9:56:b9:
e4:7b:6f:c5:2e:65:51:d4:ea:93:bf:63:ea:d9:b7:
65:53:ae:ae:8a:1c:54:06:76:9d:f4:0d:18:3a:86:
57:b8:41:d7:34:b1:21:4a:12:ba:9c:34:ac:f5:5b:
30:c2:c9:57:33:6f:5c:68:28:3b:74:0e:b2:8d:e9:
29:fd:2b:55:91:03:f5:85:e4:b2:68:e5:7f:ab:d3:
07:f0:63:a6:ad:b6:19:ed:ae:fd:78:e1:f5:17:24:
be:55:e7:7b:6c:c8:2f:b4:ef:b5:ff:a4:36:9b:ea:
f9:aa:81:e8:d8:0f:24:23:6b:ec:a4:9e:33:67:f4:
42:30:37:07:98:58:b9:22:d2:ad:65:b4:90:18:b5:
37:72:a4:f2:f1:d4:db:ef:aa:7e:57:a8:6f:35:c0:
77:ee:77:38:07:fd:78:99:22:20:fc:a2:88:c9:ca:
1f:df:7d:e4:e2:97:8e:b8:80:2c:52:70:1d:dc:39:
3f:ed:d4:3e:64:93:0c:81:cd:ae:24:dc:5e:da:cd:
33:0b:33:72:b9:9d:02:05:65:15:d8:49:c3:ea:8f:
be:b7:fd:18:e5:9d:f3:c6:b5:85:44:a3:5c:c5:1a:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E4:E7:CD:E9:ED:81:D2:12:8C:AF:AC:AD:90:3D:F4:E1:34:A7:C9
X509v3 Authority Key Identifier:
keyid:B0:B4:2F:09:4C:BA:97:4C:1F:AE:C6:BD:EC:15:60:F6:63:87:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLQvCUy6l0wfrsa97BVg9mOHiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b6:5f:a9:08:06:50:76:a9:0c:67:4c:78:35:3f:32:66:4a:
a9:47:69:aa:a0:c3:e2:d1:42:2a:42:d9:18:55:31:89:15:d1:
d8:bf:a7:9e:d3:fc:3a:ed:b6:d0:a8:33:e1:a4:63:81:68:05:
f5:ab:52:93:6e:e7:65:2b:26:3b:d0:2a:c8:ab:53:21:ca:94:
08:00:c9:5a:55:80:c0:60:ee:33:83:b5:7d:c3:98:db:09:55:
ea:67:a4:b8:d4:e7:dc:f4:5c:39:cf:97:ee:03:c8:6d:a7:43:
9e:4d:6b:c9:f5:47:36:22:ba:f5:55:59:7b:e9:ba:fc:67:a0:
05:77:98:67:ca:af:58:ae:f2:d5:a4:71:9d:ca:d9:46:7b:d4:
8c:9b:f7:3a:23:17:40:c4:95:79:f1:34:60:99:0d:e1:72:c9:
9a:20:31:af:fc:aa:f5:d6:6d:7c:63:0b:6f:55:69:94:19:c8:
f6:e1:cf:c1:bc:91:f5:d4:78:f2:e9:01:f5:ee:ce:77:77:f9:
fa:49:3e:80:01:98:4d:b1:1f:94:24:2b:5d:74:d3:d4:51:d8:
a9:e1:9f:cb:3f:5b:e3:65:29:ad:df:e1:f0:3a:9c:26:f7:3c:
6b:d6:a8:85:93:60:c2:72:14:22:5d:00:07:a9:4e:0b:18:af:
6e:82:6b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:49 2025 by rpki-client