Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
File: tU0YlEyigIUFOR3pf6nWsrxhiZo.mft (raw, json)
Hash identifier: nJoWgkThoHoIsdxnlzpsjWNLQyqZf3isj5WvR7mYHcY=
Subject key identifier: F0:BB:AE:32:28:94:61:BF:2E:BA:34:43:4C:8B:CF:1C:28:5F:13:97
Authority key identifier: B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
Certificate issuer: /CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Certificate serial: 0194BBCDC3BA8FCE4C69C1A7E9C2954DB454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
Manifest number: 0EC7
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: tU0YlEyigIUFOR3pf6nWsrxhiZo.crl (hash: EOEzUEfRKg27ZHtlgXmiFKlJ1WxCVD/o5b3crq72ax4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c3:ba:8f:ce:4c:69:c1:a7:e9:c2:95:4d:b4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=f0bbae32289461bf2eba34434c8bcf1c285f1397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:eb:ec:45:af:95:f6:3d:68:96:60:41:b4:
7a:56:1a:af:32:54:bc:f2:82:87:29:5c:ff:f2:f5:
0f:d1:df:6c:d3:53:44:37:72:ac:57:7a:c5:5a:a0:
35:fd:78:91:2b:ce:97:d7:80:aa:d5:1b:ae:7f:db:
e9:1d:23:e8:70:d7:8b:62:e5:e5:bb:92:79:a0:49:
9e:c5:dd:a1:17:c4:66:79:b5:f2:ff:82:e0:0c:fc:
80:f0:32:50:e7:87:a2:4c:54:2a:00:9a:91:14:cd:
e6:04:ce:78:d0:39:38:8c:cd:33:fe:9f:8d:ae:f5:
3f:dd:23:51:84:40:9c:b8:a9:95:fa:d2:ff:72:ea:
15:c3:46:b1:57:de:36:85:5f:68:87:d5:3a:a6:d0:
79:5e:ce:5d:a8:c2:7a:74:e5:b0:05:bd:85:39:96:
96:a0:78:ce:4a:96:ab:94:d4:71:5e:3c:53:62:32:
1c:4b:bf:e6:0c:84:36:a9:67:b7:fa:ff:79:c0:f4:
0a:dc:0c:18:6f:fb:a9:98:40:8e:ff:74:5c:2a:79:
28:ae:c9:34:25:a1:36:4e:0b:4f:fd:d7:35:c7:f8:
10:92:00:d6:7f:37:ff:b1:0d:c6:3e:bb:dc:53:30:
e3:a3:e5:79:71:e0:3e:ad:6d:47:e9:82:24:95:fe:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BB:AE:32:28:94:61:BF:2E:BA:34:43:4C:8B:CF:1C:28:5F:13:97
X509v3 Authority Key Identifier:
keyid:B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4f:7f:ad:55:1e:f4:0b:1e:48:aa:d6:0e:ce:b6:d9:eb:5b:
1e:90:6b:db:b5:ea:4f:04:b9:87:ba:c4:fd:dd:a7:43:0f:24:
97:ef:0c:09:20:f3:ef:fd:bd:d4:20:b3:80:6b:29:06:db:5c:
97:fc:ee:85:4c:8e:ff:1a:b8:f4:aa:69:26:d8:b9:04:ac:61:
62:a0:1e:b9:57:57:c6:c1:9e:f8:b5:a8:8f:50:7a:0d:f7:2f:
98:ef:bd:c1:c6:29:19:37:be:66:47:6b:dd:72:59:0f:d5:37:
d9:51:02:0d:c8:98:42:9a:18:d7:04:e6:f8:69:37:51:d7:42:
22:e6:7b:32:0f:8e:5f:db:e9:a8:60:6c:c4:fc:41:f4:be:62:
97:37:99:d7:bb:f3:0e:7f:7e:14:83:83:c6:2d:b7:18:84:be:
31:cd:ab:3c:d4:8c:3b:af:72:cf:07:e1:a4:97:29:90:4c:8b:
9b:bc:78:7f:98:be:d8:c8:07:1d:1e:31:4d:33:56:d0:c7:f8:
06:65:e2:fe:4b:95:8d:ce:f1:8a:bf:6e:fd:29:9d:eb:bb:55:
bf:ed:9b:34:27:8b:8f:a3:e1:30:73:19:94:bb:15:15:6e:96:
2b:62:46:7c:22:37:a6:07:20:c8:8d:5b:ee:29:f0:3b:8a:43:
3c:5d:79:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:08 2025 by rpki-client