
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: Bneudtwg8pvG7po9L72kC20CQoK7lefdeXzlxh2ZlaA=
Subject key identifier: 21:F8:C3:3D:3B:A9:66:26:DC:78:47:31:61:FF:43:AA:C6:21:C7:8C
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 0194BD17F5EE0E2839DBF9112A39EC8DD862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 0DA6
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: uv8Hd6HKnB/lcOZNW4ygmn0qdJO1CCjt6EVaSV9eppc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f5:ee:0e:28:39:db:f9:11:2a:39:ec:8d:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=21f8c33d3ba96626dc78473161ff43aac621c78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:7b:a1:64:aa:65:db:26:ca:9a:fc:52:5a:
4a:ca:9e:04:ae:de:b2:e0:24:89:93:74:25:0c:47:
ab:ce:37:b6:fe:be:2d:bb:61:d3:2f:00:ff:47:76:
a6:0f:4a:89:5b:cc:15:aa:c9:2e:3d:d8:e4:85:2c:
ed:f9:25:5f:04:0c:6a:35:ae:b6:96:e3:ff:70:64:
8a:7b:6d:3b:31:4a:49:9e:25:43:a8:43:a0:f0:e8:
e8:16:31:f1:7e:7f:3d:de:c5:68:15:fd:a2:2c:e3:
d0:8d:d0:4f:a2:56:aa:84:23:8a:4d:55:5a:1d:f8:
b6:31:a3:4d:29:eb:d2:1f:83:84:bf:d7:99:61:95:
c4:56:9f:7f:68:65:5e:46:c0:8c:89:d0:e5:c7:55:
33:84:3a:c9:19:0b:8d:f7:56:76:ca:72:fe:d8:6e:
63:e9:43:fd:53:61:cc:4d:22:9f:6a:a5:74:99:fd:
ce:80:14:86:4f:87:c3:05:b6:aa:14:63:b1:e3:ba:
8b:2f:bf:d8:69:c3:8d:36:85:53:e4:ac:59:ed:a8:
ca:ef:36:94:8f:92:cc:2e:c3:d0:dd:96:d6:31:96:
26:4b:61:ad:39:65:1a:5d:1f:c2:c5:00:45:6a:21:
98:0c:d3:92:9f:f3:cf:14:a4:72:7d:ea:b1:b0:97:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F8:C3:3D:3B:A9:66:26:DC:78:47:31:61:FF:43:AA:C6:21:C7:8C
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a1:39:43:ab:55:34:60:ac:7b:f2:da:66:84:17:17:20:c1:
3f:21:98:87:71:25:d7:41:f2:66:58:05:57:53:62:6e:33:c4:
59:9c:24:b6:fe:1c:aa:97:e0:c4:06:f2:97:f4:aa:e0:50:20:
2e:38:72:a2:4b:93:4d:70:b4:a9:49:1c:19:f2:67:d2:f2:ad:
77:5e:bf:7f:39:7a:c9:57:bb:10:07:96:9f:a9:db:f1:91:70:
11:8a:12:fb:57:04:e0:5b:df:7f:37:6d:16:1a:d2:ed:25:08:
e5:95:ff:6f:97:73:b8:9d:76:d0:36:00:c2:99:bc:1c:08:1f:
5d:94:d1:0c:36:72:8f:3a:22:56:ef:4b:71:55:ea:dc:a5:d6:
1e:20:42:c6:b2:1b:05:0d:42:f4:bd:12:4d:4a:e5:1a:9c:92:
29:fe:96:75:44:5b:a6:3e:83:e3:a4:38:bb:f8:5b:67:99:ba:
06:2c:73:35:cc:07:64:0c:82:19:38:6a:03:5f:e5:52:e6:86:
0f:e9:97:ef:d9:1e:44:ed:07:e5:1d:a7:3a:bf:4c:37:50:7a:
7b:0f:38:4a:18:e7:00:a7:59:9b:44:b7:da:bc:51:11:14:0c:
20:2f:a7:f3:09:39:9b:9f:d6:af:f8:9f:b4:3a:75:f2:1c:75:
a1:71:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:18 2025 by rpki-client