Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
File: p2H8O2oE10MHa9KG3oIURfBlTvc.mft (raw, json)
Hash identifier: D70tPlnus23Vdi53sVV0mpWMzzP0SBcQddcbRmOKvOA=
Subject key identifier: B0:36:E8:E4:92:49:C9:96:AA:B0:01:2B:BD:7F:33:67:7B:1D:9F:D4
Authority key identifier: A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
Certificate issuer: /CN=a761fc3b6a04d743076bd286de821445f0654ef7
Certificate serial: 0194BC72D1599D5802EB8AB562892AE0BC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: p2H8O2oE10MHa9KG3oIURfBlTvc.crl (hash: gCDEpj0urWkMZd+Sf71KY3hivaFWYowXFUsy9kfzWHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d1:59:9d:58:02:eb:8a:b5:62:89:2a:e0:bc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a761fc3b6a04d743076bd286de821445f0654ef7
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=b036e8e49249c996aab0012bbd7f33677b1d9fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:55:68:37:0a:5c:60:2c:61:ad:95:fe:64:
21:d5:71:7b:1a:01:d0:28:40:21:b1:4d:77:b2:6e:
19:5e:4b:eb:ed:0c:4f:dd:fe:a8:4d:b0:6b:a8:f7:
7a:5b:3c:4f:01:c4:e8:50:5d:1e:e6:af:c6:97:25:
e0:b6:25:6f:5d:85:f4:b6:19:5c:31:59:1f:01:41:
6a:03:7e:2a:60:ef:c2:14:b8:2a:60:92:be:f9:c5:
a7:e8:dd:36:cb:c7:dc:ea:8e:3b:ba:de:c2:97:09:
ce:58:22:02:82:61:69:4d:a3:43:99:84:2a:6a:ca:
46:be:84:28:99:57:a4:98:a7:b0:27:34:e8:1c:82:
d5:58:80:10:85:29:2d:03:3f:c5:cf:ac:a6:2b:74:
74:8d:41:ba:45:40:a8:36:98:dd:1d:dd:9d:f7:b4:
bf:83:65:fb:7d:da:19:2f:74:fb:fd:77:c4:95:09:
ba:27:14:d2:14:a0:8e:20:e6:f6:38:00:2e:34:f7:
d9:54:81:4f:0e:21:52:83:74:eb:3b:2b:51:e2:51:
37:7e:bf:cc:98:a9:3e:f0:75:51:e9:4c:32:73:71:
86:36:7a:1c:50:27:62:aa:2a:e2:78:8c:75:9d:22:
a9:7d:86:bc:8c:dd:b5:04:2d:39:a2:ef:a9:bc:6b:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:36:E8:E4:92:49:C9:96:AA:B0:01:2B:BD:7F:33:67:7B:1D:9F:D4
X509v3 Authority Key Identifier:
keyid:A7:61:FC:3B:6A:04:D7:43:07:6B:D2:86:DE:82:14:45:F0:65:4E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2H8O2oE10MHa9KG3oIURfBlTvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/72934e-fe73-4a99-811f-a0cde7ba8bbe/1/p2H8O2oE10MHa9KG3oIURfBlTvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:31:f3:57:f1:b0:e6:c9:f6:81:e0:75:b6:a5:24:95:80:da:
42:e8:97:5a:a1:7d:84:9c:7c:de:4c:39:0d:ea:89:ac:6c:14:
c0:52:92:8a:91:2c:05:94:c6:7b:a3:e2:d8:e9:44:d7:22:21:
38:92:86:05:0a:86:bb:e1:5a:b9:de:b6:5d:5f:97:fe:f8:11:
c3:f6:b6:01:fc:f2:d6:41:6e:0f:63:82:4f:cd:cc:21:b2:df:
08:8b:f8:84:65:09:69:7d:45:f8:34:5f:01:7a:4e:4f:93:41:
96:37:8f:17:f4:96:0a:18:bf:0e:cf:de:79:c5:82:35:48:b5:
24:1e:b5:1f:ef:b2:79:15:70:91:a9:4c:b6:50:d3:53:87:b8:
86:9a:f3:28:c1:22:26:35:06:d5:66:9a:19:7b:b4:2a:e0:1e:
ae:c5:dd:cc:f8:81:95:42:ad:ba:ec:27:63:bc:4c:43:35:61:
b5:e9:7e:7a:e2:71:f6:16:93:5e:03:43:1e:bc:4a:dd:b6:32:
6f:53:96:f1:a8:cb:15:a1:21:05:c3:58:7c:cb:d8:6f:d3:26:
97:f8:18:a5:b5:ce:df:a7:ad:dc:33:16:4b:2d:01:bb:8a:47:
61:da:c9:d7:8e:28:bf:b0:14:30:2d:84:2e:76:ff:47:b0:be:
be:6f:5d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:38:27 2025 by rpki-client