Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
File: sEAqOILi-MUlQrB73sCypQ1ZgNs.mft (raw, json)
Hash identifier: qb76OElWk3iSFlHBBqp9n5lbXK9cIwE8BeeIv+Z/HWA=
Subject key identifier: 31:D7:15:46:95:83:ED:4F:14:81:2A:75:70:4C:EE:82:D0:80:CD:61
Authority key identifier: B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
Certificate issuer: /CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Certificate serial: 0194BC3C1113236C4F8019C333D9C41BD2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
Manifest number: 0D03
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: sEAqOILi-MUlQrB73sCypQ1ZgNs.crl (hash: wRdY4xGgu3EDvVh+hLtM1VToETqvAaedyurpW2Qa6W8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:11:13:23:6c:4f:80:19:c3:33:d9:c4:1b:d2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=31d715469583ed4f14812a75704cee82d080cd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:83:6e:27:3b:76:36:8a:38:41:0f:a8:b7:
ac:59:5f:60:7f:64:af:5c:d3:03:d0:17:a7:c9:0f:
78:11:84:b7:d5:a6:27:fc:3d:70:d5:aa:ab:d1:13:
72:37:2a:20:58:91:b5:e7:a5:56:dc:28:a8:60:3e:
06:d4:af:39:b6:c2:19:bd:48:b1:08:54:74:76:65:
22:88:86:c0:9b:ec:57:db:1d:f2:c2:4f:ef:ca:94:
1f:1f:94:0a:91:68:9c:b5:1b:89:54:fd:7e:26:25:
2a:28:ab:14:e9:46:da:39:1d:64:5b:58:ea:ad:8f:
fa:f5:b5:a5:c5:38:82:de:ef:a6:38:d4:02:9a:34:
fe:4e:be:cd:a5:20:87:3a:67:5f:ba:b6:63:20:d5:
71:17:0a:c1:2a:30:29:b5:da:d3:01:bc:2a:69:22:
80:30:4b:ce:1f:dc:c0:1b:bb:9c:54:1d:43:03:17:
6b:70:96:0d:a4:6d:e8:14:a0:08:d3:63:d0:dc:31:
40:35:22:48:57:d4:6a:a0:39:f8:b6:3e:28:ee:f1:
80:67:c5:3b:ef:f6:55:3e:6b:ad:c8:b3:8a:57:be:
e6:b8:c0:b5:d2:3f:e0:7e:60:25:69:36:8c:8f:81:
a7:8f:37:3f:9e:56:a3:20:5b:7f:5a:f3:3e:01:8f:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D7:15:46:95:83:ED:4F:14:81:2A:75:70:4C:EE:82:D0:80:CD:61
X509v3 Authority Key Identifier:
keyid:B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a1:3e:a2:03:d5:e4:71:b2:e8:62:8f:42:a9:e4:cc:23:eb:
ad:3c:94:ce:cb:3d:73:55:8f:5d:26:b7:1c:20:14:ea:ea:6d:
91:a9:11:1d:d1:46:c7:bb:ee:58:87:66:87:1e:f8:93:96:27:
e3:94:ac:8d:64:9a:d0:3a:89:98:07:0a:97:ac:58:7e:29:73:
8b:6a:53:64:ec:7a:1a:ff:f3:65:6a:13:e9:37:f4:59:1f:cf:
87:5f:18:e2:ce:97:8f:fd:e0:05:8c:cf:10:b8:d3:70:fa:32:
ba:84:0e:66:a4:91:d3:6e:28:d3:a9:f8:a9:ab:40:a7:31:8e:
ef:55:af:75:0b:6b:03:20:be:9a:fd:d4:ca:f4:5f:2e:df:a6:
69:4d:12:35:6a:91:4d:5e:ea:08:e7:2f:20:71:d5:a4:d9:cb:
08:01:1e:ab:db:8e:22:32:ac:7d:13:b1:55:a0:5d:c6:4b:43:
44:d5:c6:68:6c:c5:8b:3a:bf:3c:71:7b:8d:d8:30:50:01:12:
65:e0:b2:34:51:17:28:cf:2f:59:ca:4b:8c:73:21:87:7f:f2:
7a:da:f2:df:4c:9e:99:88:90:26:17:8a:c1:ba:3a:0e:02:2a:
62:d3:88:0f:7f:cf:14:9f:0f:06:f1:90:9a:b5:04:59:43:eb:
55:e3:4a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:46 2025 by rpki-client