Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
File: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft (raw, json)
Hash identifier: AXyewhPlg0n9Z+YvIf2VTJC2qVEOi9lI3JMRSNPRzO4=
Subject key identifier: 89:57:FF:70:93:09:4E:37:D8:51:6F:4E:57:90:41:5F:7B:F4:90:9B
Authority key identifier: 46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4
Certificate issuer: /CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
Certificate serial: 0194BBCECCFDBCD15CD61081807B26F64B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
Manifest number: 0384
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl (hash: NH0lHEaZLvbZDr48VxbCV8AKohWEPhKTM6SMMvIFGhg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cc:fd:bc:d1:5c:d6:10:81:80:7b:26:f6:4b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=8957ff7093094e37d8516f4e5790415f7bf4909b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:8c:a1:ac:52:50:ed:86:fa:77:ec:f4:9f:
31:3a:a7:33:2c:b5:59:dd:ee:a7:de:6a:bd:7c:2d:
b3:10:b8:fa:a3:0a:21:58:63:30:80:b5:c9:e6:d1:
92:cf:93:16:7c:c7:05:e0:6a:fe:14:61:b0:d5:30:
e3:9b:45:0b:74:a2:db:fb:22:a2:b9:ec:17:6e:eb:
e9:eb:26:5c:47:7d:d2:40:92:11:cb:60:1f:9a:05:
09:ec:a2:64:5f:de:e2:69:d6:b8:ed:2e:59:b0:8f:
14:85:6f:4c:7f:c5:24:c4:2f:5c:77:1e:27:7b:58:
5b:0c:4f:7a:24:1c:92:3f:12:d5:22:9a:d6:c8:26:
52:58:7c:e1:1d:bb:ab:e4:ed:e3:ca:41:b3:6a:91:
d8:3d:b1:78:f6:f7:b7:88:71:bb:08:89:8a:13:6e:
9d:c5:7f:d0:c3:da:4e:98:c0:f5:e3:07:64:74:c7:
97:da:15:3f:29:3c:dc:39:ad:52:19:e3:e0:8f:50:
5f:2f:2f:22:33:34:ea:43:8d:c7:8e:e1:1f:10:c0:
73:ce:f6:5a:91:7b:81:af:06:52:a3:a9:b2:96:f1:
da:4c:05:6b:91:a2:c7:92:fb:82:7e:e0:bf:88:c5:
d8:d9:88:0c:64:fc:e6:cc:e0:c9:c3:8a:26:82:ca:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:57:FF:70:93:09:4E:37:D8:51:6F:4E:57:90:41:5F:7B:F4:90:9B
X509v3 Authority Key Identifier:
keyid:46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7f:df:e0:c3:1a:4c:82:d5:20:5f:d2:f0:ed:e2:aa:3b:54:
b6:95:05:a3:c5:66:c8:5e:1e:86:a9:eb:f0:59:a2:54:7e:02:
00:97:63:15:08:a7:3d:c3:28:8c:2d:7c:4e:fe:46:87:3c:de:
7d:fc:1f:6e:a8:74:82:a2:05:2b:c8:08:04:41:cd:48:30:e0:
49:32:72:d8:17:8f:de:fd:fa:24:3d:02:fe:3f:30:e1:6f:8c:
cb:92:35:d5:4f:84:d9:f7:7a:70:ed:ac:1d:34:b1:5f:32:0a:
a4:8a:44:a0:22:0e:8c:9b:70:00:62:70:d5:c7:d1:ea:fb:6a:
60:60:2d:e8:33:19:5d:db:51:8f:b7:c0:80:c2:64:94:4a:ac:
9e:07:38:d2:b5:ce:68:4e:5b:fc:d5:40:06:d7:39:21:7e:5f:
c8:0a:5f:76:a4:e6:b1:6f:8a:a5:39:cb:87:d2:14:68:9d:d6:
4c:c6:6c:63:80:ee:66:68:63:ca:8e:c1:3b:93:d5:4e:48:8b:
9a:80:1d:00:4c:a9:c6:b4:f0:b9:36:e7:e6:2e:5b:39:b3:ac:
8f:ca:44:4e:d4:d8:c7:c1:a6:1e:2e:e3:ff:cf:e1:38:df:65:
a6:29:2b:9c:af:45:52:cf:90:59:f9:f8:1b:65:1f:17:e1:62:
2f:c7:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:17 2025 by rpki-client