Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
File: g502OyjxyQhOHBmGh2u0CbeaE4w.mft (raw, json)
Hash identifier: 6yLf/vNkCGn2UUnkCNjQxtkT11H/th9/j73hQ4rsmd4=
Subject key identifier: AE:59:1B:9D:DA:2A:68:A6:C1:70:2F:D3:1B:3C:0C:A4:25:B1:D3:14
Authority key identifier: 83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
Certificate issuer: /CN=839d363b28f1c9084e1c1986876bb409b79a138c
Certificate serial: 0194BBCDD27C73A54ACBEAFD33CBFB6CEDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
Manifest number: 0C15
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: g502OyjxyQhOHBmGh2u0CbeaE4w.crl (hash: uwNV89xpN9Q7ryu9NAXDtTkmwoTxYMTtJ2Bg4HDKoAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d2:7c:73:a5:4a:cb:ea:fd:33:cb:fb:6c:ed:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839d363b28f1c9084e1c1986876bb409b79a138c
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=ae591b9dda2a68a6c1702fd31b3c0ca425b1d314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:9b:11:8f:f3:4b:c6:67:00:72:d2:01:22:
86:a2:c0:f4:eb:8d:98:38:20:25:88:a9:a3:00:6f:
e2:9a:50:90:34:e7:e8:0b:b2:9e:f8:bb:fb:56:26:
1d:d6:25:02:f8:a8:69:16:cc:9e:ac:d0:1d:3b:98:
6e:a6:a8:9a:bc:64:40:cf:ed:51:0d:03:36:8e:c8:
6f:16:21:14:47:7f:00:fb:f7:f3:8b:50:f6:c7:a3:
7b:b1:db:7f:d0:65:99:f3:0a:70:55:ed:dc:87:51:
8a:9c:75:6c:e7:63:d0:89:ae:d0:a7:7b:56:d7:bf:
0e:b0:23:5d:1b:a7:01:89:e1:3a:e6:87:df:44:74:
4d:c1:f1:a6:84:4c:6d:3b:69:20:76:ed:3c:de:47:
f6:d6:a7:39:65:13:af:8b:b0:e3:f1:60:b1:e4:b0:
fc:c4:38:b2:a3:80:ed:9f:13:c7:94:a8:47:1f:0c:
0b:a7:87:8d:34:b2:24:d6:c2:a4:e3:3a:c6:63:82:
0b:eb:85:d2:51:2b:b4:ef:da:55:4e:35:86:aa:2c:
c6:ca:07:7b:b9:cf:3b:f0:96:da:f8:2e:20:71:a4:
af:11:2f:cf:48:33:ab:71:1b:9f:b1:50:1b:89:2a:
5c:c3:b0:4b:47:00:2c:dd:18:3f:73:6e:85:92:02:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:59:1B:9D:DA:2A:68:A6:C1:70:2F:D3:1B:3C:0C:A4:25:B1:D3:14
X509v3 Authority Key Identifier:
keyid:83:9D:36:3B:28:F1:C9:08:4E:1C:19:86:87:6B:B4:09:B7:9A:13:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g502OyjxyQhOHBmGh2u0CbeaE4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a9e8a6-1cf2-4c87-b49a-5228823fb97b/1/g502OyjxyQhOHBmGh2u0CbeaE4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e7:52:cb:5c:2a:ab:95:f9:27:4c:76:06:58:ac:d8:08:55:
10:47:cd:f3:16:dd:11:ef:91:b3:66:af:58:03:37:25:df:a8:
78:83:a5:d0:53:36:67:e6:fc:66:f7:74:c8:f7:ed:b5:9d:20:
a9:64:9b:47:d7:9f:c7:68:b1:9c:ba:d9:8b:df:79:62:dc:82:
41:a0:3e:84:d7:1d:ea:0f:1d:0c:1b:f4:8f:66:07:3d:49:97:
3c:a1:75:8a:85:14:6a:9f:98:06:fc:47:cb:65:19:20:a9:2f:
92:fe:ce:39:93:e8:15:b7:91:d5:59:1d:e3:7f:84:e5:c9:5a:
22:89:75:ec:43:0a:8b:54:da:f2:c7:d4:ac:32:55:4c:18:03:
8f:66:2c:f2:c6:6c:ce:70:2c:bd:7f:99:e4:10:83:ef:ff:35:
eb:88:00:9b:e2:43:35:17:57:d3:73:50:f4:c5:0c:84:57:83:
d3:ee:6d:36:20:cb:9c:cb:03:2d:22:16:cb:d9:3d:27:a2:6b:
77:90:19:5a:25:ae:2c:ba:d8:f6:bc:1c:fb:18:67:d1:29:ff:
d0:f1:5d:cb:7d:df:07:97:a0:5e:eb:7d:05:d7:14:d5:41:e7:
98:8e:52:7a:d1:9c:87:ee:59:d7:61:8d:61:8a:76:5e:b5:aa:
21:1a:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:21 2025 by rpki-client