Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
File: sSZ6Uay2bymRvqUkP-OIBolxofE.mft (raw, json)
Hash identifier: ZV7GJ13bu8kwP8F7rYiyrprObkoq7wa/fyBO3uAfAnI=
Subject key identifier: 54:74:C6:7E:22:C5:6F:4F:62:3C:78:15:82:19:FF:59:95:02:39:48
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 0194BBCE962E0E67706F470B74B76B41C263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: sSZ6Uay2bymRvqUkP-OIBolxofE.crl (hash: zKk/r3zBpeJ6qC9LKs618QceeW+HBqlfANNrOivCveQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:96:2e:0e:67:70:6f:47:0b:74:b7:6b:41:c2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=5474c67e22c56f4f623c78158219ff5995023948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:54:35:a3:79:f5:4b:f6:24:21:c3:cc:55:
3b:a0:e7:0c:95:51:ce:f6:cf:2a:f8:2d:9a:1d:aa:
86:36:b9:5a:0f:ea:6b:ac:21:4d:c4:74:4c:47:25:
2e:46:36:ea:f0:81:02:05:82:ff:83:89:a6:60:51:
07:22:a3:6b:1f:07:e8:15:6f:51:f8:3d:16:12:fc:
af:bc:2f:92:eb:52:9e:d1:79:f3:c6:92:b3:e6:36:
28:67:14:8e:fd:ec:e0:3d:55:ba:a6:ab:db:66:1c:
94:2b:de:b4:a4:ee:ed:9b:30:19:a5:23:a9:db:25:
91:98:f8:62:43:c1:ce:0b:3b:ab:66:a0:0b:c1:db:
37:7b:2f:43:5a:54:3f:ca:bf:f7:c0:2b:22:bf:6f:
76:36:5a:b5:f5:8f:3d:c6:0f:21:55:22:55:28:71:
b5:5d:c2:83:df:d8:f0:38:9d:86:d0:fe:49:f7:f2:
39:2e:81:3a:05:df:c1:f1:6b:ad:c8:dc:46:33:01:
e4:60:8f:05:0b:9e:a9:58:b2:92:df:54:b1:c5:1f:
b3:0b:47:6f:cd:d3:63:9d:30:52:1d:d3:3c:92:04:
e6:52:90:36:84:d7:23:eb:f2:85:cc:58:26:73:71:
59:73:4c:de:69:0b:39:97:88:92:62:d6:4f:e9:5c:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:74:C6:7E:22:C5:6F:4F:62:3C:78:15:82:19:FF:59:95:02:39:48
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:7b:5e:8a:aa:aa:0f:c4:66:f1:ff:2e:f0:d0:c1:ea:dc:e5:
3a:be:99:83:52:44:07:6d:2a:14:16:13:89:f0:32:42:cb:07:
4f:48:29:5c:e9:79:e6:4f:c6:2d:65:a0:16:08:a9:f5:c4:b9:
ae:49:44:a7:ef:1a:3a:4c:26:40:0a:fa:2b:0b:1f:ed:41:a9:
d6:e6:c1:57:d7:6d:15:d8:f7:d3:9f:cd:a2:eb:01:57:d2:b9:
34:a8:39:9d:b0:66:a0:8f:1d:1e:bf:ce:10:ed:1d:74:0d:69:
52:89:e5:59:6d:9f:3e:84:88:15:47:cd:39:2f:02:38:a5:a0:
c7:ac:f7:16:b8:95:3c:4a:5f:a7:00:a3:ac:34:c2:fd:5f:d0:
a5:05:07:97:7c:aa:de:75:27:09:25:97:d1:e9:90:a7:69:a5:
7d:82:76:78:a7:a7:78:f4:dc:4e:7c:a4:19:16:5d:5f:e3:1b:
87:c4:78:80:6d:a2:c7:1e:86:63:e4:b1:5a:5e:b4:b0:71:97:
e3:54:de:36:28:3f:69:c4:85:d6:e6:a4:af:c4:fd:93:ee:f5:
1d:e0:89:b9:12:37:af:60:b1:eb:da:33:ca:41:f0:f4:df:17:
fb:81:91:f0:a8:32:1b:75:c8:c8:cd:d1:34:ef:1d:44:a6:e7:
de:87:b2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:56 2025 by rpki-client