Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
File: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft (raw, json)
Hash identifier: W/J4iJV7A6VnAzkAyuqbgGsBPVXBv+0Cblw425LWvI0=
Subject key identifier: 5A:50:E3:09:95:22:FD:B5:35:EB:7C:10:1A:01:96:07:3C:E8:17:ED
Authority key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
Certificate issuer: /CN=21d85d231ad54b8439c2aaed91a577586ac46000
Certificate serial: 0194BD178E76863122A290E330CD2A824272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
Manifest number: 0F2C
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl (hash: pRlPRvqO9YwfWiS9JOhoLwHPrcbfpKXyrv6MuqjkYj0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8e:76:86:31:22:a2:90:e3:30:cd:2a:82:42:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21d85d231ad54b8439c2aaed91a577586ac46000
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=5a50e3099522fdb535eb7c101a0196073ce817ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:8b:98:79:15:a9:e4:8f:74:15:c0:cc:24:
3f:bb:78:34:5b:42:59:99:44:d6:21:0c:96:94:9b:
fc:4e:e8:33:8b:16:28:91:14:8f:70:aa:8a:a6:5b:
01:34:f5:86:03:d6:a3:6f:41:d6:b8:b5:40:7a:ef:
14:ce:ba:0e:18:d5:2a:5d:da:5c:d7:95:41:74:11:
ce:81:d5:f0:99:9d:43:78:0a:aa:e1:11:70:1e:03:
4c:4e:de:e7:57:62:1d:5d:be:5f:66:cb:82:f4:2e:
f1:d5:9f:2f:d8:87:c0:87:c6:57:5a:7c:2d:77:d6:
89:e3:21:c7:7c:b2:07:66:bd:f6:37:5f:20:80:b4:
c8:c3:00:b2:2f:6f:71:e4:e2:c5:4b:76:0f:29:2b:
04:22:9e:6c:33:67:e9:bb:a1:ef:61:b0:fa:fc:6b:
3b:ed:c9:bb:eb:12:07:dc:0e:8e:13:18:ca:e3:df:
49:72:ba:5b:1d:0e:e3:02:43:b6:d4:9e:4e:d8:7f:
6a:1a:dd:92:62:5c:36:46:fe:70:91:db:15:4b:13:
31:35:c3:c7:63:77:8b:b2:f2:2e:97:f2:2e:b6:85:
25:c8:eb:c7:1a:5a:76:07:7c:51:c6:33:b4:ec:4e:
60:17:20:84:f0:30:da:bb:a9:ed:a0:e8:74:c7:f6:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:50:E3:09:95:22:FD:B5:35:EB:7C:10:1A:01:96:07:3C:E8:17:ED
X509v3 Authority Key Identifier:
keyid:21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:62:1a:ee:f9:2a:6a:21:25:87:af:24:72:e3:b7:bd:31:1e:
4c:e4:ae:c4:55:3e:7c:2f:a5:c7:11:e8:39:7e:ba:67:3b:b6:
15:59:7b:df:29:72:92:c5:81:f0:c8:0a:6d:7b:cb:f4:58:83:
40:c6:de:b3:79:a4:2f:8d:97:51:49:27:91:e1:3f:d3:7c:5f:
96:08:ed:4f:a7:56:76:b6:74:26:26:4f:63:2c:44:b1:91:e1:
c3:49:5d:e6:6e:7f:e6:59:80:89:52:50:36:b8:c5:5e:cc:f8:
6b:a9:d8:6e:42:26:c6:c3:9e:9d:49:ef:e9:b2:ab:34:25:f7:
69:b0:36:22:a6:c4:74:1f:84:99:96:47:9a:4e:3c:0d:ad:6c:
55:82:05:6f:50:ee:9b:6d:11:c0:2e:2e:95:a3:2f:dd:7b:fc:
65:96:e8:ea:91:af:44:68:fb:49:15:32:ef:ea:e5:9e:40:2a:
d9:6f:e7:1e:21:37:92:ca:b2:a8:29:61:7b:fa:b4:ba:0a:2d:
28:86:b6:a3:3a:d2:88:58:df:b5:ad:ba:f4:38:70:81:ee:b9:
3d:a7:82:a1:43:6c:50:2c:92:ee:ea:aa:dc:26:1c:aa:ee:60:
27:7d:e0:a7:73:30:37:6c:4a:8e:cb:75:e2:c2:ca:34:33:dc:
0b:c1:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:28 2025 by rpki-client