Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
File: rrlJQmajhxkETYKaSgqPF6QHBOg.mft (raw, json)
Hash identifier: D1Vf7gILmEEstBQ7aLUJIknd4L4RhkvywT60hwnAzuE=
Subject key identifier: F5:8B:59:99:5C:DE:48:CA:C3:77:5F:A1:2E:1D:15:D1:BA:FF:BB:EB
Authority key identifier: AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8
Certificate issuer: /CN=aeb9494266a38719044d829a4a0a8f17a40704e8
Certificate serial: 0194BBCDD084ACE41BCAD9D58D2123B260B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: rrlJQmajhxkETYKaSgqPF6QHBOg.crl (hash: 9rAG3k1Vreyn46DqIyVZmWRE8HqpuQeC4KtErFQ4sBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d0:84:ac:e4:1b:ca:d9:d5:8d:21:23:b2:60:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb9494266a38719044d829a4a0a8f17a40704e8
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=f58b59995cde48cac3775fa12e1d15d1baffbbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:47:79:1c:bd:a6:d6:e1:0f:55:c4:4f:b2:16:
84:e4:0e:f4:4b:a8:6f:bb:53:59:fa:01:7b:f5:dc:
59:b9:da:8b:3d:8b:90:a1:71:a7:13:cf:c6:0c:97:
76:40:d1:dc:2d:78:02:3b:ff:c4:09:4e:c3:0e:1c:
c6:a9:ac:0e:83:47:1c:79:24:87:1e:3c:e6:f2:ff:
f3:72:a1:ea:7d:63:38:81:15:f9:29:98:99:53:1a:
7f:bb:1c:4f:c3:c0:72:e9:64:39:80:53:cd:27:1b:
bf:0f:a6:d7:7d:c1:06:58:7f:3f:95:d6:d9:67:ae:
a2:5d:7c:ec:d3:9e:2e:80:ba:5a:6e:92:ae:4e:95:
a0:cd:3e:2c:f6:d8:4f:3f:4f:2e:93:35:ff:f8:d1:
79:31:37:ad:30:13:00:54:5f:4a:0e:13:78:86:8d:
41:92:72:65:56:b5:5d:19:bf:43:00:26:9b:86:6f:
8a:68:6f:18:18:87:49:dd:aa:ad:fb:fe:d0:e4:58:
78:42:d1:dd:bd:bd:76:f4:b1:cf:d0:c8:cf:f0:07:
4f:85:df:7f:91:36:a9:45:72:a0:5c:55:ca:ad:93:
eb:9c:b4:f2:fa:76:4a:2f:ab:64:6a:b5:dc:71:da:
34:d9:17:56:25:94:0e:d3:b3:75:c3:dd:b2:20:81:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:59:99:5C:DE:48:CA:C3:77:5F:A1:2E:1D:15:D1:BA:FF:BB:EB
X509v3 Authority Key Identifier:
keyid:AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:36:60:0d:b2:5c:be:61:6f:e4:f6:da:0e:06:93:06:68:20:
29:45:f0:5e:57:74:99:79:b8:d0:b8:c4:13:a1:ff:66:60:76:
7c:b7:f6:88:51:49:12:76:8f:6a:4c:73:e0:65:47:1c:be:cf:
6a:f5:3d:da:4f:a7:78:14:84:f8:d6:3a:a7:85:f9:e5:ee:82:
4c:07:c1:99:b6:a9:3d:af:20:7e:fe:8f:ed:e3:9a:10:35:c9:
e9:26:00:26:92:6c:d2:f0:47:56:ad:be:e8:ad:90:19:c4:e9:
5d:8e:13:bc:96:37:83:b1:38:53:9b:67:3c:8e:2b:ef:61:64:
24:85:1e:6e:3b:f0:06:0b:d4:08:f5:40:3b:29:ec:31:c6:b2:
44:bb:89:01:66:19:8c:f9:c4:d8:21:74:78:48:de:8a:82:e8:
50:74:ee:37:24:0c:b1:55:ce:91:2d:e9:27:80:59:ef:6c:44:
29:b3:fb:44:30:28:a4:99:9e:cf:a6:1f:b2:e5:9b:b4:b8:15:
0c:64:6d:7f:be:d8:9b:78:4f:27:f1:25:34:96:b0:8b:1d:37:
58:ec:57:f2:47:e6:14:f3:d8:52:b8:cd:60:2a:23:71:dd:ac:
5b:ff:37:c1:0c:f6:7c:73:a6:3c:c2:1a:5f:15:6d:6d:71:db:
ea:49:a2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:50 2025 by rpki-client