Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier: g/bPM5bCp4yInE53wJw/csbT3PiQxtTmJPvDuUl6BHk=
Subject key identifier: 27:98:46:CD:A9:F3:FC:B9:8A:13:BE:69:59:CF:6E:5F:A3:CC:F0:76
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial: 0194BC3BD31585D8836EDF7145BA1A7A30A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number: 0408
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: KWc5HNOYModapUmoeln0+QAovAOTdMpVhc4FqRDTblI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d3:15:85:d8:83:6e:df:71:45:ba:1a:7a:30:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=279846cda9f3fcb98a13be6959cf6e5fa3ccf076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:fb:43:d8:bd:7a:2b:a1:c5:71:77:20:11:
cb:d7:35:d3:cc:46:85:69:e5:82:a3:06:09:df:57:
1e:08:61:da:43:a8:96:31:a5:4a:11:df:6a:23:50:
87:32:56:e9:53:3e:6b:e0:22:ce:30:02:83:c1:87:
29:9e:f2:2e:09:77:a3:d9:0a:90:fd:12:09:44:85:
a1:21:a9:f0:fc:ae:02:fa:69:3f:1c:1f:67:b4:65:
58:b8:13:a4:5f:8e:6e:3e:c3:bf:ae:0d:0b:72:86:
54:82:ca:b3:0d:1c:44:36:cd:56:66:c9:e8:de:86:
c5:30:f9:ce:1a:14:5d:f1:39:99:ae:10:db:d8:51:
64:e3:c0:27:db:07:7d:c3:a7:50:bd:c5:db:b9:97:
3c:ab:43:e9:4e:99:3e:2b:5e:cc:b7:e0:28:46:94:
47:01:b5:c3:34:a2:65:4b:11:f1:0b:b8:1f:31:28:
47:d1:ce:f7:8c:6b:a4:06:a8:31:3c:d6:c9:1c:c7:
56:d1:c5:13:35:73:c3:f8:87:ad:6b:f0:08:be:55:
fc:97:c2:bd:04:ff:6d:4f:75:74:78:3a:42:07:4e:
ac:20:f5:1b:99:23:5d:df:0d:3c:8e:9f:9f:20:c0:
cf:d4:c8:ba:f5:1c:d8:5d:01:51:aa:2b:f9:61:4a:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:98:46:CD:A9:F3:FC:B9:8A:13:BE:69:59:CF:6E:5F:A3:CC:F0:76
X509v3 Authority Key Identifier:
keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:be:e0:35:27:0d:7f:26:f1:09:4f:9f:ff:f1:d5:46:b0:93:
a1:b2:c4:8b:0f:a5:6a:3c:56:69:b2:2e:af:2a:b1:ea:1d:30:
d9:cd:7c:cf:87:3a:21:fb:2f:23:8c:7a:a8:a8:86:75:38:13:
29:4a:c3:a7:29:5f:89:75:1b:62:07:14:66:55:63:9d:25:26:
70:eb:cf:d4:2d:d5:6d:99:f9:2d:b8:ef:99:9b:2b:5a:53:b3:
63:0a:4f:1f:bc:b8:63:13:d9:39:3c:2e:84:dc:f4:b9:40:7d:
14:9e:e1:73:79:a4:da:be:57:fb:95:b6:7d:ab:03:9e:99:ed:
00:85:a8:22:5e:fe:9c:ba:ef:9e:ce:3a:ef:3a:fa:44:9b:c8:
d2:1b:29:a8:e5:e5:46:e6:5e:8e:4e:ba:ee:05:68:3e:bb:81:
3d:d5:20:38:d6:1a:7f:2b:62:1b:ac:6e:18:59:fd:43:17:0b:
0a:af:36:c1:d0:75:0e:58:a6:f4:c0:7a:a3:23:a1:c7:f9:8e:
07:36:6a:9c:04:b4:ed:ab:0f:23:00:2d:d2:d0:6c:cb:82:fe:
5d:2b:96:68:8f:89:b8:06:54:e9:b8:fc:5a:e6:48:0d:61:f9:
01:f2:f0:c9:e4:88:b1:7b:29:02:ae:3c:a9:73:3b:7e:b7:00:
9f:d5:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:05 2025 by rpki-client