Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft
File: rS2L1OZ06M7VoJfUPepxhETnivU.mft (raw, json)
Hash identifier: Rq/E8/udGnJfi1Sq5hMAk2fuRfygncbr5UvI7sUXG3E=
Subject key identifier: 71:AE:86:48:0E:75:27:A9:50:F4:80:43:21:05:0D:1B:7A:F3:6B:65
Authority key identifier: AD:2D:8B:D4:E6:74:E8:CE:D5:A0:97:D4:3D:EA:71:84:44:E7:8A:F5
Certificate issuer: /CN=ad2d8bd4e674e8ced5a097d43dea718444e78af5
Certificate serial: 0194BD17D0CA4005C02C3B1F368D5A418B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS2L1OZ06M7VoJfUPepxhETnivU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft
Manifest number: 10FB
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: rS2L1OZ06M7VoJfUPepxhETnivU.crl (hash: KJgJQMJHXxyPzU1qxYOHJueb9Ps7cmpGkcoubFCPgaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d0:ca:40:05:c0:2c:3b:1f:36:8d:5a:41:8b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d8bd4e674e8ced5a097d43dea718444e78af5
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=71ae86480e7527a950f4804321050d1b7af36b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:4f:95:ab:7e:d5:67:ca:53:5c:f1:fb:28:
db:33:62:6a:fb:ef:1c:be:e9:25:94:21:53:44:ac:
87:4c:2f:eb:2e:d7:2d:e4:3f:72:c9:fc:4a:71:f4:
b5:4b:3c:94:94:ef:4d:94:cc:f7:ba:07:48:df:94:
63:03:72:49:c7:1d:61:2f:d2:63:b4:2a:27:71:24:
23:e1:6a:b6:1f:8d:81:24:a5:6f:46:79:2b:80:24:
65:0a:0f:e8:a0:a6:50:d6:4e:b9:ba:f1:f8:ac:2b:
7d:b4:38:b4:8e:52:3f:c5:7a:10:d8:5b:30:f5:0e:
46:9e:83:b3:f1:1e:74:d8:35:29:ec:d5:67:0b:e1:
99:ee:2a:31:98:1b:a4:02:59:93:7c:3f:46:76:f9:
6c:6f:43:11:7f:7c:62:42:b5:79:87:a9:15:7e:4d:
09:7a:0f:f9:77:39:6b:a0:96:72:f1:e9:11:86:47:
0c:e1:3e:ee:32:50:7b:9e:a0:3e:7e:08:86:57:64:
29:89:b0:0e:44:7e:58:77:47:67:65:c0:bd:f2:2d:
f5:9c:c3:07:9f:50:68:a0:0a:88:16:57:5b:c0:bd:
10:91:4b:82:8e:74:48:5a:e0:40:95:58:c8:7f:83:
e8:03:f5:cd:02:b3:dc:44:eb:0c:fa:d5:79:3f:0a:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AE:86:48:0E:75:27:A9:50:F4:80:43:21:05:0D:1B:7A:F3:6B:65
X509v3 Authority Key Identifier:
keyid:AD:2D:8B:D4:E6:74:E8:CE:D5:A0:97:D4:3D:EA:71:84:44:E7:8A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS2L1OZ06M7VoJfUPepxhETnivU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:70:b1:9e:b1:48:6f:bc:77:7c:77:76:a4:dc:ac:29:db:ec:
78:f8:63:25:79:37:7d:64:cd:17:76:f4:11:69:d0:62:ac:3d:
e4:ae:bb:92:ee:53:80:b1:03:c8:7f:05:60:24:5f:75:61:15:
d3:24:0f:85:84:4f:af:2a:ef:9b:78:1a:dc:1a:52:0b:31:c3:
b1:25:cd:be:4c:0b:f9:48:38:4e:68:48:35:97:f6:0e:21:24:
01:4d:11:b8:7d:96:b7:e7:14:fd:ba:8c:1d:bd:f4:7d:a5:7a:
ad:8a:46:5f:a8:c2:d0:36:8c:c7:dd:83:29:7a:37:79:65:1c:
67:cd:4e:9e:e0:67:d0:fe:2b:cb:06:4e:54:22:9a:65:4f:1e:
a6:40:36:6d:50:e1:97:48:20:aa:06:16:30:f9:56:dd:8e:58:
0e:4f:e1:bb:44:bc:24:70:c5:d4:4b:64:4a:68:5b:18:93:91:
6c:a7:c5:82:04:73:f0:45:dd:fe:c6:7f:85:14:d1:a2:9c:4b:
84:00:ea:12:c5:a1:ab:ad:1c:68:32:11:f2:11:33:56:bd:d5:
c7:a1:25:df:38:f0:fa:55:b0:fb:7e:bd:ff:0f:cd:d1:c2:11:
68:fc:0c:24:1b:8b:d2:82:56:88:2b:f4:a1:0c:25:6a:29:90:
22:d2:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:40 2025 by rpki-client