Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
File: r5aNFt0rQdNStf0zxJs-xP2tQlg.mft (raw, json)
Hash identifier: mBjISw5+QG2dE3hg2heoV1YU4pyFtXM3R8Mqn0fr9Ac=
Subject key identifier: 70:18:5C:66:43:CA:4F:87:11:13:66:1F:BB:BC:0F:FE:8D:89:A4:92
Authority key identifier: AF:96:8D:16:DD:2B:41:D3:52:B5:FD:33:C4:9B:3E:C4:FD:AD:42:58
Certificate issuer: /CN=af968d16dd2b41d352b5fd33c49b3ec4fdad4258
Certificate serial: 0194BD1771E286EAFA93465DB0A6388DA508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
Manifest number: 0D3B
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: r5aNFt0rQdNStf0zxJs-xP2tQlg.crl (hash: wZhu/BHQ6ccJVbhTQEW3GFlqHgDhFj2HCjKgTFbknwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:71:e2:86:ea:fa:93:46:5d:b0:a6:38:8d:a5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af968d16dd2b41d352b5fd33c49b3ec4fdad4258
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=70185c6643ca4f871113661fbbbc0ffe8d89a492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:0f:7c:ee:e3:7a:7f:ac:df:9d:bd:e9:0e:
8a:93:c8:d7:8e:5c:47:f8:63:f5:72:8b:c8:40:94:
26:f3:c3:bb:96:7a:ae:6c:15:b5:9a:b3:4f:b9:53:
58:31:8c:42:c7:4c:54:98:fd:b3:22:21:57:a3:0e:
e5:87:d7:45:64:d0:24:da:2b:70:83:61:39:9f:1a:
28:7e:32:91:f4:4b:8f:08:12:f0:71:4f:db:44:b2:
07:2d:34:db:e7:f6:ab:66:f6:36:20:51:d6:9d:67:
46:8b:b2:37:13:66:4f:0e:ff:25:ce:72:37:4a:65:
77:7e:e8:d1:b8:69:ef:14:60:8c:65:f7:9b:07:00:
87:9a:5a:c0:11:20:9d:e8:a7:87:9c:b6:e1:d0:46:
58:f4:5b:9b:a0:2e:32:5d:15:aa:0e:47:91:8a:d1:
c1:e3:66:a2:65:61:b4:b8:09:a4:cc:ef:45:c5:b2:
72:d1:73:37:a3:58:61:ec:46:be:1e:77:79:8c:e2:
b4:e2:24:8e:90:99:9f:7f:65:c2:d8:e5:4d:f8:b5:
c4:db:5c:6f:bc:12:af:81:7d:d7:ac:a7:8c:7b:3a:
ea:01:62:20:c8:50:83:b4:8c:34:18:3c:a1:9b:5e:
98:9d:f5:cf:24:3b:11:52:2e:47:a4:8f:cb:4f:6f:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:18:5C:66:43:CA:4F:87:11:13:66:1F:BB:BC:0F:FE:8D:89:A4:92
X509v3 Authority Key Identifier:
keyid:AF:96:8D:16:DD:2B:41:D3:52:B5:FD:33:C4:9B:3E:C4:FD:AD:42:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a5:ac:2f:1f:b5:cc:1b:09:af:0a:4d:ae:31:58:e9:24:df:
2a:37:29:d9:cf:60:ff:25:16:07:bb:50:9e:de:de:65:b8:07:
8c:86:f4:72:8d:0e:4a:ad:c7:9d:1e:6a:90:19:c9:cb:f1:f9:
32:93:d8:e7:f3:8a:15:6a:e5:15:aa:ab:32:c0:ab:44:c0:7d:
78:4d:52:ac:cb:a1:1e:c6:f1:81:66:9b:98:8c:f2:bc:3d:cb:
d8:cd:4a:ee:6e:46:ba:47:76:be:71:22:62:2a:86:c3:02:2a:
10:81:37:29:99:82:ec:f7:c8:9d:49:c1:43:34:3f:85:a6:f8:
9c:de:18:3a:ae:99:2c:81:98:f8:91:60:d2:ff:bf:8c:f5:11:
b7:05:c2:e5:7b:cd:0a:17:c0:18:fb:4e:0c:f0:d7:2c:58:fc:
e9:1f:d8:fb:1b:78:35:32:e5:ec:63:33:bd:af:12:6c:d8:da:
07:4c:d4:c0:63:7e:bf:36:13:36:72:dc:a7:d7:9e:48:cd:36:
30:7b:b1:5c:6c:1b:81:f3:6f:f8:a8:a5:34:52:3a:14:4f:8a:
e0:58:cb:f7:2a:1e:af:2a:0c:d0:f4:a2:e1:bb:86:b4:74:dc:
1d:86:06:16:12:cf:22:8c:d6:ec:c4:3d:35:38:67:20:89:1f:
ed:a5:8f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:53 2025 by rpki-client