Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json)
Hash identifier: 7/GmKuoXKZr1qGlOJyZK5aNje8h1SWbTVCBh5jPnlT4=
Subject key identifier: 80:1E:58:69:6B:0D:6A:69:16:93:80:AD:85:4A:8D:7B:B4:8F:1A:51
Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Certificate serial: 0194BC72CF5AD598ECA54114287FFFABB07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
Manifest number: 031C
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: lF5ajpC6Uw5Z95FF2yZYDpSOf//hIoUV3Y25+SXRs9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cf:5a:d5:98:ec:a5:41:14:28:7f:ff:ab:b0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=801e58696b0d6a69169380ad854a8d7bb48f1a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:58:75:7e:70:88:28:31:27:9c:81:06:b3:
c3:a6:ee:55:67:34:f7:14:ae:95:e7:02:fa:16:d1:
e1:1c:ff:b1:50:de:a9:16:8d:d7:6e:39:58:17:0d:
0b:eb:50:96:b0:3b:f4:28:ad:02:77:8e:d4:5c:23:
fe:31:6b:e6:c2:4e:66:34:21:27:38:aa:91:1e:25:
07:68:e0:4a:48:bf:a3:32:d6:c1:a5:25:df:9b:b4:
4d:b6:04:57:87:05:2c:9f:dd:34:9a:35:2e:46:33:
9a:41:f4:52:e4:6c:37:a2:2a:fd:7a:14:dd:71:5b:
54:12:be:34:7d:a7:95:fa:2f:71:1a:35:dd:7f:80:
ca:11:79:77:81:86:1c:5b:65:67:27:64:18:69:00:
73:8b:ae:24:58:84:6a:5d:d8:dc:89:4d:30:61:11:
e1:bd:1c:02:d9:d5:a3:47:80:1e:d1:dd:5a:36:2b:
eb:db:5e:f0:bb:24:29:c8:b0:86:b9:f2:74:0c:7c:
7f:a3:71:0c:3e:66:ae:0e:38:f8:95:b1:33:2f:9f:
8f:ce:49:60:e7:88:66:f9:77:e9:2c:3b:fa:70:83:
b6:cf:ed:a1:88:71:40:46:0e:e1:2a:63:5d:e2:ac:
96:0c:d5:13:78:fe:58:1e:da:1f:a6:48:86:7e:c0:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1E:58:69:6B:0D:6A:69:16:93:80:AD:85:4A:8D:7B:B4:8F:1A:51
X509v3 Authority Key Identifier:
keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3b:9a:a1:ea:c2:18:c0:c3:7d:1d:17:ae:a7:63:6b:cd:0a:
04:90:30:d4:3d:df:a5:4d:d2:82:ce:2e:b9:27:9e:ba:89:b2:
c3:71:ac:85:56:30:55:ab:d5:f1:3b:02:97:5d:f2:2a:b2:7c:
91:b8:c5:cb:2b:ad:86:68:90:6a:31:92:9b:a9:c4:c9:b6:5f:
64:1a:1f:10:34:2a:48:15:e9:07:48:dc:5f:a7:81:0b:3c:e6:
f7:e7:f2:71:12:f2:72:ba:ab:05:16:43:96:d2:6a:77:7c:a3:
12:26:bf:be:89:aa:81:e5:c0:87:eb:55:bd:99:5d:bd:e3:69:
36:9f:cb:da:f4:2a:a5:65:13:cd:db:90:e8:56:64:2e:67:85:
29:e6:3e:75:06:a6:3e:46:cd:18:5f:f0:9a:d8:ae:cb:47:4e:
83:ea:85:34:fd:92:f3:cf:8e:bc:2d:7c:1f:a1:4e:0f:8c:91:
62:7d:60:b9:83:00:6c:59:5b:26:bf:d3:ef:10:78:bd:a3:2b:
ba:43:21:ae:57:5a:9b:1b:26:41:60:14:85:a0:f1:2a:01:66:
d7:c2:60:b9:86:02:6f:39:a3:19:70:6a:ca:1f:36:7a:42:69:
0e:32:b6:0e:fc:b4:8e:73:7d:12:e8:72:c2:c9:37:4b:34:48:
f1:bf:fe:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:35 2025 by rpki-client