Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/Ma-3caS5EQsRSqgHr7cIaxplN54.mft
File: Ma-3caS5EQsRSqgHr7cIaxplN54.mft (raw, json)
Hash identifier: q+u5zc7TN2v5NWV+BJ40MDn814Ukxh34EnJ+pFfHR+E=
Subject key identifier: EB:C5:6A:D6:DA:59:1C:91:85:B6:54:21:AD:BE:01:F4:8B:E8:84:34
Authority key identifier: 31:AF:B7:71:A4:B9:11:0B:11:4A:A8:07:AF:B7:08:6B:1A:65:37:9E
Certificate issuer: /CN=31afb771a4b9110b114aa807afb7086b1a65379e
Certificate serial: 0194BBCE861D43E2F135CB53A1502303979A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ma-3caS5EQsRSqgHr7cIaxplN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/Ma-3caS5EQsRSqgHr7cIaxplN54.mft
Manifest number: 01E6
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: Ma-3caS5EQsRSqgHr7cIaxplN54.crl (hash: nCcYnNG7E9klnnYu+ATyp0GII9L5zEeiAAznXJ3rkYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:86:1d:43:e2:f1:35:cb:53:a1:50:23:03:97:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31afb771a4b9110b114aa807afb7086b1a65379e
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=ebc56ad6da591c9185b65421adbe01f48be88434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:92:4f:ba:46:74:92:41:eb:1c:1e:19:91:
56:6d:6e:a4:99:01:c8:6d:c5:cf:db:15:f1:33:26:
ca:51:e9:94:bb:68:97:06:97:c8:08:35:49:f2:96:
48:2c:fd:f2:56:a0:1c:c3:26:05:57:f6:65:0a:2f:
bb:5a:43:ac:f6:08:e1:a4:10:60:e5:4f:a7:d6:09:
44:c7:57:e1:83:25:4b:cb:35:97:54:14:a0:7a:08:
bf:2b:9b:bc:30:fb:03:c3:76:39:bb:51:8e:13:1e:
ee:6c:7a:e2:7f:e1:89:0c:08:bd:01:f2:96:5c:a0:
b3:61:be:9d:04:9c:31:ee:7b:81:63:17:14:c0:d8:
8e:52:38:72:a8:e5:c5:e4:c0:1f:91:6e:b5:df:ed:
33:17:e3:f9:eb:f1:ee:06:00:bc:1b:fc:11:44:5b:
09:b9:24:70:08:b0:0a:3e:c3:e5:1c:2d:3d:49:1b:
42:95:0e:09:45:07:f2:c9:f7:53:14:dd:c7:a8:cb:
28:69:46:04:9f:52:ab:58:b4:1f:36:d3:23:37:5e:
bd:17:18:5a:41:47:33:aa:b7:f0:42:52:35:10:ce:
ea:23:d3:97:c9:d2:b0:18:17:a2:7e:0a:27:78:4e:
b7:e7:f7:c0:54:b5:6f:78:7d:ee:b1:67:41:d3:08:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:6A:D6:DA:59:1C:91:85:B6:54:21:AD:BE:01:F4:8B:E8:84:34
X509v3 Authority Key Identifier:
keyid:31:AF:B7:71:A4:B9:11:0B:11:4A:A8:07:AF:B7:08:6B:1A:65:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ma-3caS5EQsRSqgHr7cIaxplN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/Ma-3caS5EQsRSqgHr7cIaxplN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/Ma-3caS5EQsRSqgHr7cIaxplN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b3:fd:88:c7:04:b8:07:1c:bf:99:40:08:0b:2e:f6:19:06:
3e:b7:cd:db:3f:ee:04:0f:dc:ae:10:7d:e7:7e:64:82:25:04:
ae:78:3a:ff:44:8e:20:c1:83:c4:0b:22:c0:48:5a:43:30:65:
e6:5f:0c:a2:0a:4f:88:f6:6a:c4:a4:01:9e:84:1e:c0:8e:96:
81:86:5f:73:a6:54:0f:c4:24:26:2c:4a:9a:ec:22:97:49:e8:
1a:1d:57:97:25:a0:ac:01:16:d5:43:0c:21:be:80:5c:40:46:
7a:df:3d:9e:7a:66:2d:47:a3:1b:f1:e8:a3:3f:af:cd:c5:1f:
be:66:a7:3f:4c:05:d1:75:57:eb:e7:80:60:73:dd:e7:68:ef:
e9:63:2b:2e:93:9c:f6:1b:e5:99:11:d3:6d:82:02:49:cc:7e:
ee:63:96:e1:c2:64:57:99:f1:62:4b:a6:20:8d:d1:7b:9f:c7:
48:d4:e0:17:4c:70:ff:0e:32:1e:ed:e8:07:b1:38:c1:ff:11:
76:20:cb:9f:62:16:f7:74:f1:9f:44:a4:00:86:d4:85:f7:35:
b3:6b:14:da:13:41:8a:09:23:54:10:cd:f0:7b:f0:e2:4b:95:
c2:d0:98:fd:18:96:44:73:6d:c6:b9:96:2b:78:0a:a9:1c:72:
23:79:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:41 2025 by rpki-client