Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
File: sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft (raw, json)
Hash identifier: PKIKnwZ7o5Id8k2iiU9uXeHp/TarOLa1zzkn5Fk8s1Y=
Subject key identifier: 8F:39:3E:DE:4D:12:55:E5:96:0C:5F:1E:A4:3B:84:7E:74:9A:E7:7A
Authority key identifier: B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
Certificate issuer: /CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Certificate serial: 0194BBCF0E9C40BEE0A314CCC0D92B93C5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
Manifest number: 017E
Signing time: Fri 31 Jan 2025 10:01:36 +0000
Manifest this update: Fri 31 Jan 2025 10:01:36 +0000
Manifest next update: Sat 01 Feb 2025 10:01:36 +0000
Files and hashes: 1: sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl (hash: T6oJG7FA9mru9vTieEvJkVfjyAnUHrLga+THunrdCd0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:0e:9c:40:be:e0:a3:14:cc:c0:d9:2b:93:c5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Validity
Not Before: Jan 31 10:01:36 2025 GMT
Not After : Feb 1 10:01:36 2025 GMT
Subject: CN=8f393ede4d1255e5960c5f1ea43b847e749ae77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:ae:ef:4c:69:3d:1b:25:46:0f:42:d8:8a:
0d:b0:da:2a:88:01:52:2e:ab:be:b2:7a:30:a0:07:
cf:b9:87:99:95:58:c6:e5:76:37:3d:69:e0:5f:18:
ee:37:27:54:8b:fd:9d:b6:7d:c0:d9:4e:53:e7:30:
38:8b:96:dd:33:04:02:80:b3:aa:f5:c9:e5:b7:d4:
1a:31:2f:b3:5b:8c:6c:a7:86:29:21:82:a1:63:ad:
03:c7:c2:bd:c0:1c:0e:d9:00:1d:44:73:15:c9:bf:
ed:1f:70:e2:e7:bd:46:31:b6:b1:46:43:4b:15:5a:
b0:c2:f8:0f:97:fe:86:ff:d5:04:c5:ca:2e:6c:c1:
4a:42:e6:18:21:b6:59:4b:8f:65:05:61:0d:0a:d6:
5f:2b:41:a8:fe:ce:c2:fb:3a:08:54:4f:8c:9b:4c:
23:3b:53:ef:93:67:ce:af:d1:09:f2:62:e5:b9:de:
5b:a0:07:1d:b3:53:f8:53:21:b9:6c:ce:00:22:b9:
1b:ac:4a:9f:bd:99:fe:0d:af:15:c6:c8:1b:98:e3:
88:53:02:08:b1:0f:6d:51:49:f6:1a:6e:ae:3a:98:
b2:96:03:b5:0e:8d:82:60:40:1b:ef:68:9c:71:4b:
30:a0:7d:62:4c:21:02:65:f6:6a:ce:71:d8:b2:db:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:39:3E:DE:4D:12:55:E5:96:0C:5F:1E:A4:3B:84:7E:74:9A:E7:7A
X509v3 Authority Key Identifier:
keyid:B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e2:39:86:5f:48:d7:c9:07:2f:bb:89:2e:fd:41:82:79:31:
ca:ec:a4:72:34:6c:c6:7c:75:24:e2:f1:aa:5c:26:38:9b:12:
79:f5:59:cf:a0:84:ec:bc:72:9f:60:f7:4c:6a:ec:18:ef:00:
cd:cb:db:16:77:a6:d0:c8:74:8b:15:f2:d3:1c:b8:58:90:46:
82:05:37:eb:8e:6b:80:25:0d:71:7c:ec:d0:45:fe:7c:6a:ba:
ac:93:ef:4b:40:56:f5:74:4b:2a:14:ec:d2:1d:0c:25:74:40:
34:e2:51:92:a6:19:aa:67:03:b3:49:c7:a7:72:cb:83:ae:a0:
49:a8:92:de:04:0e:76:8a:a4:7f:00:86:45:6c:94:5e:8f:b8:
10:af:1a:12:05:fd:8a:d4:a7:33:2e:2d:78:c7:6b:dc:48:5c:
0a:02:b0:07:56:c3:a6:6e:ea:1d:30:f8:37:ac:a7:d1:3a:72:
83:40:19:97:71:4d:5a:03:b6:d0:c3:3e:30:bd:36:c3:e3:ce:
c8:f4:66:17:db:94:3d:14:07:04:ca:e9:01:3a:4f:2f:d5:4c:
5e:a8:c5:49:fe:c4:6a:b1:c7:ef:0d:71:6b:35:cf:ed:10:10:
d8:8f:5f:a4:a7:61:03:59:4b:fd:f7:47:5a:a1:8b:89:cc:8c:
f9:0e:86:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:03 2025 by rpki-client