Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
File: RK3etuoTlfaY9C51Qa70kkJiX2I.mft (raw, json)
Hash identifier: mxkdwQBQ5PBXVESfYnH+18yPLPQMIvvjz+vuo9LxQG8=
Subject key identifier: 65:4C:00:9E:21:3E:42:B2:7B:A6:C4:0F:73:8F:0A:41:E6:28:68:15
Authority key identifier: 44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
Certificate issuer: /CN=44addeb6ea1395f698f42e7541aef49242625f62
Certificate serial: 0194BBCE19B9046CC2359B9EF5085B0FA3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: RK3etuoTlfaY9C51Qa70kkJiX2I.crl (hash: B5KvlNmi5q152O4IXq4K4VxTNk1rPHKOXF24tswxG/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:19:b9:04:6c:c2:35:9b:9e:f5:08:5b:0f:a3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44addeb6ea1395f698f42e7541aef49242625f62
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=654c009e213e42b27ba6c40f738f0a41e6286815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:77:1f:a5:9b:bc:f8:34:8f:4b:c4:8e:90:
dc:1a:ff:08:f9:9a:03:28:65:19:45:cb:43:8b:ca:
ca:be:4c:18:ea:a8:20:0f:d5:4a:f1:d8:a2:95:73:
f1:7f:51:a7:38:80:89:2c:6a:91:70:ca:d2:ea:a3:
21:67:43:31:4a:e4:fe:7b:24:08:63:fe:50:9f:82:
24:b6:ef:32:4b:a4:3c:ac:67:ca:96:29:98:75:74:
0b:0e:99:3c:36:7f:64:23:a7:43:35:cb:3f:cf:fd:
33:92:ed:e7:f8:9d:94:12:cc:11:e0:37:c6:ca:63:
34:3a:a7:d4:68:2c:72:06:a2:64:ac:50:9f:fa:3e:
f3:7a:d3:db:8d:8f:52:0c:9d:b0:06:ef:b2:dd:2a:
b1:fc:4b:52:c5:e8:7e:8e:20:b2:34:74:df:a9:4a:
cd:80:9d:e6:0a:2f:18:d6:ab:a0:95:ad:02:d2:02:
28:22:19:c3:7c:6e:f4:6a:3f:83:d2:fc:75:e2:35:
4d:72:a9:d6:3e:bb:8c:99:a4:45:31:31:bb:87:59:
10:18:de:da:69:9a:bb:d0:fe:a8:ea:e4:2a:44:e8:
92:d7:73:b6:72:dc:8c:78:f1:fc:c7:7a:47:e8:6a:
6b:0a:b1:c2:42:c0:fc:82:cf:ea:2e:bb:32:25:a8:
93:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4C:00:9E:21:3E:42:B2:7B:A6:C4:0F:73:8F:0A:41:E6:28:68:15
X509v3 Authority Key Identifier:
keyid:44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:17:e2:36:27:e0:94:3f:a0:98:9e:20:a2:b4:df:cb:a8:19:
aa:38:67:d4:9d:fb:fa:40:55:5b:9f:27:5f:cc:77:36:7d:89:
60:04:56:ec:45:4a:30:88:36:a0:21:b4:89:ec:34:41:7c:e9:
4a:ce:06:2d:0c:e5:08:c1:de:e7:ac:59:ad:07:1c:1a:2e:c3:
17:27:87:7c:e9:33:bc:9b:77:fa:cf:65:c8:ab:b7:a6:d1:b9:
e1:db:6c:9d:45:b8:bc:76:aa:f9:2c:1c:d2:97:0d:03:ff:64:
e6:9f:75:7f:f3:79:dc:de:62:d8:36:a1:3f:c4:7a:e0:1b:a4:
97:c6:52:07:47:a3:35:bf:3a:ce:84:e7:9e:b4:26:68:bd:a1:
91:b5:43:29:42:42:ae:e2:0d:69:73:e6:17:ff:e3:9d:9e:d2:
e2:54:95:53:3d:96:33:51:e7:30:9f:3b:b1:72:9b:42:ba:f6:
22:5f:2a:0d:af:30:c3:a2:fa:35:66:9a:bf:39:b0:2e:ec:e2:
d3:d6:a5:9a:90:fe:34:98:9c:a7:04:63:32:ad:25:b2:96:a2:
30:5a:73:b9:51:10:b9:d6:63:72:d4:59:f6:83:e6:b6:4a:1f:
98:94:7e:17:ef:5d:6a:03:02:92:6e:d5:c1:5e:4f:e1:a8:91:
b4:d7:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:13 2025 by rpki-client