Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: Cfx5lb/lSY/wA2oEZT92ZY3Nbh/bz06oKtDnVqehg/I=
Subject key identifier: BA:38:B2:CD:A5:51:2D:5A:6E:14:5A:3B:D7:0C:37:C8:2C:29:00:E5
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 0194BBCDC404AA8AAC75424AF0A17106697F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 114F
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: zrLwwgpqs3Mq6F5wdCxn7aAeGAqp480WS4e79xLUfMI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c4:04:aa:8a:ac:75:42:4a:f0:a1:71:06:69:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=ba38b2cda5512d5a6e145a3bd70c37c82c2900e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:a4:1f:c4:f6:1c:9b:3b:b2:33:07:0a:67:
63:f3:8a:e5:ab:f0:2e:8f:9d:e8:1e:60:4b:18:1b:
eb:8e:3d:8a:49:87:d1:63:d4:90:6c:1a:24:4f:77:
e6:5b:c1:e7:05:4e:17:8d:0c:35:6d:a0:84:52:55:
0b:cf:43:5f:5e:33:aa:f0:2f:7b:a6:38:ac:1f:9c:
4c:c5:7e:aa:46:2f:7d:6b:8a:de:71:6f:7d:64:47:
1b:1d:5f:98:97:b7:fa:80:9d:d1:03:14:8a:94:14:
ec:bf:d8:53:1d:18:a5:ac:97:14:ab:93:a7:9f:d2:
bf:8e:f9:d6:ec:d8:75:e8:fe:a9:16:98:8f:c7:01:
15:cb:3d:3a:78:a0:dd:cb:85:fe:99:e2:2c:27:59:
b7:6c:ea:38:7b:ac:6f:51:17:9b:b2:a3:08:0c:83:
a5:06:63:5f:9c:56:58:41:47:ee:c2:0b:c4:52:af:
4a:00:f8:c5:6d:37:dd:55:70:4b:4b:56:6b:e3:46:
1d:32:88:8c:9a:fd:23:e7:6d:9b:3b:7f:6c:34:ea:
cf:ef:43:74:82:71:fa:0e:f2:20:15:61:b5:64:6b:
ed:a0:d1:62:74:59:84:c9:b7:25:8f:e3:ac:44:0a:
d1:59:a6:9c:52:1c:a9:3d:18:a0:82:22:bf:12:37:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:38:B2:CD:A5:51:2D:5A:6E:14:5A:3B:D7:0C:37:C8:2C:29:00:E5
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2e:86:95:3c:e7:9e:74:53:aa:c2:67:e0:f8:74:9b:cc:f7:
48:9e:c5:61:0c:70:57:81:23:ba:79:df:07:dc:96:9e:08:0b:
d2:76:52:97:96:7d:c4:7b:83:bf:30:33:e7:29:dc:42:ab:fb:
b5:49:4e:e7:0c:63:fe:7d:7e:66:86:37:b9:b6:62:4d:1b:db:
6c:7e:33:07:de:8e:54:04:b9:5e:27:85:9c:63:7a:f2:34:72:
e7:cf:97:01:f7:af:d5:9c:86:66:5b:10:36:b6:1e:2c:3b:0b:
ed:ed:ea:74:d1:7b:32:fb:1e:dc:e1:6f:76:a0:b5:ea:60:ff:
54:af:10:39:66:ee:4e:47:67:9d:e6:a2:c8:f5:ff:31:66:af:
56:dc:f3:52:bd:75:69:db:88:df:c1:b9:c5:76:88:cb:ef:99:
40:cd:bd:07:2f:a4:e6:66:8e:bc:16:7d:65:93:1f:e9:2a:d2:
d9:1d:e1:d8:87:49:1b:6b:7e:1b:06:e5:6e:89:50:4c:13:95:
03:90:c0:9c:2c:f9:8c:b1:9a:de:8a:92:89:a5:f2:33:17:b5:
ea:02:dc:39:77:19:5d:12:1d:68:86:4a:f3:00:f9:0d:cf:42:
39:c6:06:16:15:ec:ea:a8:b3:95:bb:70:26:61:53:f4:60:87:
ee:c6:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:18 2025 by rpki-client