Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier: sa3W0NMjQ3nS4HCPjk9347Y8g0o6NUrl/H4hRbd+X2c=
Subject key identifier: F8:FC:D4:28:4A:BC:30:9C:6C:40:F5:7C:92:AB:B0:55:B2:66:7D:40
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial: 0194BC72D2DBB43528DA0499A54C4925FD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number: 1161
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: AfGSqTzRwwiRjOuWo5fsY5Ei45ARW4eGCTx6YduGLH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d2:db:b4:35:28:da:04:99:a5:4c:49:25:fd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=f8fcd4284abc309c6c40f57c92abb055b2667d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:d3:66:fc:1b:b7:87:16:3e:f0:e8:8b:09:
f2:c9:a4:54:11:9c:74:75:7a:77:21:4b:d2:7a:7d:
35:64:63:d7:fc:f3:96:96:c2:7c:ae:20:ee:09:1a:
af:aa:28:ad:53:eb:9c:ff:6e:67:33:ea:27:3a:b2:
cf:a4:fe:98:1e:13:cb:9a:a6:db:c3:6f:e4:03:1b:
e9:ad:08:9f:4e:b5:8d:e2:6c:5a:fe:d8:53:eb:0b:
18:28:76:28:6b:0a:6f:2a:a7:61:10:50:5b:56:e2:
00:ae:dc:2d:3c:54:e0:ea:3f:18:39:6c:c0:75:8c:
74:17:27:de:b0:50:f6:49:f9:c2:10:08:a4:5d:ef:
c7:d2:5a:cb:57:e6:b0:52:bd:ad:eb:dc:ff:71:6b:
9f:7f:96:fa:25:1b:36:ad:35:92:89:8c:42:2e:ee:
24:6b:3e:bc:83:b0:e1:71:7a:08:47:65:3e:ea:0f:
18:01:ba:07:65:b6:c5:da:b7:32:8b:f5:95:4a:d5:
76:b8:69:47:09:d3:31:ad:58:a9:c0:72:f3:d4:5e:
01:6b:fd:32:cb:2d:64:43:3d:6c:ea:18:2f:d5:2e:
c6:29:45:63:93:95:f7:2e:4c:09:ea:2d:cf:6f:4d:
83:5e:29:e7:87:57:1b:b6:d8:7a:61:c9:db:25:14:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FC:D4:28:4A:BC:30:9C:6C:40:F5:7C:92:AB:B0:55:B2:66:7D:40
X509v3 Authority Key Identifier:
keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7f:df:88:b7:a5:f6:ba:b0:7a:d4:37:fa:be:7c:6f:c5:48:
10:0d:1a:63:e0:ce:5e:1f:78:f8:c4:d2:08:ee:53:7b:73:9c:
8a:19:9a:db:86:6e:ed:81:95:fb:64:6f:16:fe:e8:c1:ad:2f:
bb:e8:d7:69:f1:11:92:c2:b7:9a:dd:1f:0a:c2:b9:33:b2:5d:
45:c3:7f:ed:9c:a3:85:38:92:ef:3d:40:d2:2a:bf:73:50:ae:
77:3d:ef:9d:01:09:13:a2:bf:db:fc:3c:6d:5d:b1:91:49:19:
09:3b:4c:3a:55:c1:f7:78:35:3e:f6:ab:89:7e:9b:93:0b:2d:
eb:c9:a8:36:5f:e1:65:55:66:29:c6:ad:51:48:12:14:51:4c:
17:3a:78:77:7f:34:39:78:36:82:62:28:4b:31:53:ef:ee:28:
04:90:29:e0:4c:32:b1:f6:c8:30:a1:48:93:e8:bc:8a:52:d0:
2e:fc:77:67:3e:2b:c9:ab:a6:cb:a6:06:65:ed:18:42:1d:59:
9a:82:2d:7a:75:76:54:0c:bc:78:b7:0e:69:bd:b2:de:d9:b3:
5e:52:64:17:66:4c:b5:8e:d9:e9:4d:64:0f:8e:01:55:f6:01:
dd:4c:f6:9a:e7:d2:fb:af:b8:1d:8e:d7:1b:c3:41:b6:c5:bd:
05:ad:ed:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:31 2025 by rpki-client