Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json)
Hash identifier: hIjmF0s6Kkpi0NsMpdrv2D12ULrYWL0Vn+mXJjC980A=
Subject key identifier: 15:EF:5F:B4:AB:4E:FC:FB:D0:F3:14:3A:81:E6:37:63:07:9C:5A:E0
Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Certificate issuer: /CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Certificate serial: 0194BBCEE9EB65C4D07A07A585592C25D495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: H8iQcnuEo5kwwA4ybvWyO1Og5N+QB+rn9kOLIs+OLRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e9:eb:65:c4:d0:7a:07:a5:85:59:2c:25:d4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=15ef5fb4ab4efcfbd0f3143a81e63763079c5ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:3e:a5:4d:db:cb:47:87:b1:bd:93:35:87:
44:a3:66:55:95:0e:50:ba:91:34:d3:03:b2:d2:0c:
dd:7d:33:10:c3:75:3e:ac:e3:eb:52:db:96:d7:51:
fe:db:ed:c8:5f:bb:4d:4c:27:ec:95:e7:53:46:81:
40:67:97:58:95:33:8a:77:5a:76:12:f6:91:bd:f1:
94:bc:86:73:43:6c:bd:7e:03:2a:8e:98:b6:50:68:
31:3c:ec:fa:37:22:79:28:e8:0a:df:42:60:91:4b:
42:37:d2:80:5b:21:1d:f9:97:d8:bb:1f:7c:4b:35:
3f:a0:99:e2:5f:c1:f2:a1:f6:b6:4d:04:8f:36:47:
8a:70:a8:bc:19:ff:d2:7b:d9:c2:6a:02:d6:58:a8:
13:b9:ba:3a:ac:c0:79:20:04:c9:f4:0b:47:96:5e:
ac:bb:46:fe:2b:65:b0:90:13:2b:61:e3:1a:c3:3b:
53:4d:31:59:d9:e0:9c:9c:ee:9f:09:84:00:a1:e5:
72:9a:88:7a:1b:57:f9:15:c5:f6:a1:f0:1a:c4:4f:
7c:63:3e:cd:3b:8d:1d:7e:9f:e4:b7:75:1e:2c:2d:
3e:e2:81:55:81:c0:3e:fb:94:a0:50:57:d5:ca:27:
20:9b:db:e7:e0:d1:9a:bc:56:8d:18:de:18:97:05:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EF:5F:B4:AB:4E:FC:FB:D0:F3:14:3A:81:E6:37:63:07:9C:5A:E0
X509v3 Authority Key Identifier:
keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b2:31:a1:68:13:4c:1f:c5:a1:5e:c0:fe:17:4d:77:23:2f:
2e:6b:72:cd:2f:6c:c8:6a:08:1d:8e:c2:70:99:ae:aa:ed:8f:
43:fa:02:08:b4:d6:c6:21:33:84:34:c1:16:31:85:db:48:9a:
dd:45:2a:82:67:1c:97:33:e6:75:db:b2:00:7d:8e:4c:e8:13:
2e:7a:e5:63:75:49:2c:d2:d4:f1:e9:b1:48:48:1f:64:f0:4f:
71:ae:af:a1:be:06:7c:2f:aa:df:0a:be:57:97:25:4f:6e:00:
5b:7b:87:7f:3a:49:c8:ba:42:c3:f8:33:1d:d5:27:b2:d5:cf:
78:32:03:2c:f4:22:eb:97:6c:7e:75:e7:59:2f:04:e3:99:f4:
ed:7c:79:a0:0b:4d:95:b2:f9:aa:57:4c:14:f9:8b:71:19:aa:
6b:f9:3f:36:b8:23:6c:b7:6e:c4:8e:37:0f:ce:c8:41:89:f0:
27:b9:81:38:23:4d:37:d6:1a:22:2e:c8:bb:be:e4:26:11:35:
1e:d4:dc:f4:7f:56:db:0d:64:62:b6:72:d3:f2:6e:cb:7e:6b:
f3:2a:36:19:09:09:a1:f3:1e:12:fa:56:03:a7:64:08:10:d8:
29:32:76:41:e4:90:87:48:4d:54:d6:7e:ff:48:81:d5:87:65:
45:d0:d2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:25 2025 by rpki-client