Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
File: rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft (raw, json)
Hash identifier: 0AckxsvvkI4rjfghs1LBxcqjsPICqie4WcWxgpFclDg=
Subject key identifier: F2:82:0B:A9:F6:2A:72:FD:35:3B:52:90:7C:3C:DD:55:57:DB:BB:6B
Authority key identifier: AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
Certificate issuer: /CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Certificate serial: 0194BBCEA9A66F5E3A7F0327807C05E2C75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl (hash: jC724umVesdpPlOfdSlH95MY2vD+Yv+ulNUJeuedbVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a9:a6:6f:5e:3a:7f:03:27:80:7c:05:e2:c7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=f2820ba9f62a72fd353b52907c3cdd5557dbbb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:0d:62:73:e5:6f:cd:9e:cb:22:25:43:3f:
a7:3b:25:00:a0:e7:da:71:8e:25:a0:64:5d:1a:26:
4c:2f:7d:17:62:5f:f2:25:fb:59:ac:2f:71:8f:31:
66:ce:94:52:02:dc:d7:8a:a2:25:fd:57:b7:50:99:
45:8a:a5:1c:67:3d:c3:84:51:c9:90:49:a3:49:10:
57:44:35:63:dc:74:ea:fc:92:52:bc:87:73:b1:f1:
8f:07:09:8e:cd:f5:c9:4a:0d:ea:21:1f:3c:de:a3:
36:07:39:87:92:be:88:68:99:b4:2d:25:ae:ee:f3:
70:c0:58:8f:cf:06:20:4a:17:ec:99:96:36:2f:ce:
3a:67:3a:2b:d3:bb:01:61:7c:38:4a:4f:36:5e:5e:
f6:87:e9:06:08:76:e4:05:be:66:06:4e:bf:54:8c:
34:3a:e8:30:05:7b:f1:d5:ac:82:05:8a:5d:1f:28:
41:eb:22:a8:29:8d:d1:a3:7b:64:86:48:1f:4b:74:
ab:13:b4:c2:9a:9e:cd:4d:1a:6d:ab:83:4a:f6:c2:
c0:03:9d:6e:c7:8c:69:21:bb:92:59:6e:67:ef:c6:
08:7e:2c:61:ac:11:df:38:10:ce:66:02:da:fc:c1:
cb:85:0d:6b:7f:30:de:17:a4:0e:7b:c8:f2:0d:b3:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:82:0B:A9:F6:2A:72:FD:35:3B:52:90:7C:3C:DD:55:57:DB:BB:6B
X509v3 Authority Key Identifier:
keyid:AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:77:65:ff:9d:c6:a2:1c:28:1d:60:1d:bf:a9:12:90:92:cf:
a9:14:a5:cd:28:08:0e:4d:3e:fb:71:71:9b:4a:5f:d9:00:ac:
2d:29:99:20:1c:95:8d:77:d0:38:43:9c:80:c5:d1:e8:5e:87:
ba:c8:05:d4:d1:b3:86:7a:d3:fc:8d:b9:67:24:a5:72:2e:d3:
cd:3e:af:f0:29:39:7d:15:b8:b9:ca:af:f0:c3:d7:32:b5:6c:
29:be:49:83:bc:ac:75:7d:63:7d:d0:8e:37:2c:e1:bd:2d:05:
33:10:d5:8a:d5:8f:98:a6:6a:4e:44:82:32:d5:aa:d3:7e:35:
06:cf:de:a6:9c:1a:10:92:eb:b8:a7:f8:7f:49:10:dc:84:82:
29:ed:99:28:51:04:29:e6:98:e8:98:f8:6a:c7:2d:34:13:37:
cc:28:c2:fe:33:a0:cc:95:5a:ac:eb:5a:ef:fd:72:fd:37:f2:
ae:49:fc:26:68:39:cd:77:6c:4e:2a:ab:66:25:14:d8:7e:37:
37:99:d5:7d:f9:f6:2d:c5:71:b2:03:24:62:45:67:b7:02:94:
64:c4:48:12:bd:09:1f:42:77:0d:47:17:de:0f:ff:3e:2d:1a:
48:eb:a2:ca:05:ef:3d:7d:cd:bb:39:3c:ce:e9:20:bd:e1:68:
a5:6f:a3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:24:15 2025 by rpki-client