Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
File: rkyfGKFH6zVjDiNFxUAOFop8icE.mft (raw, json)
Hash identifier: LG5FM9WpJGgv3ekcNJl7l3AM/82jvJ/mp1BxxkToCIE=
Subject key identifier: 0C:D2:4B:CA:C7:DA:2F:AD:5B:6B:6C:D1:4B:66:A5:90:EF:3F:06:89
Authority key identifier: AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
Certificate issuer: /CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Certificate serial: 0194BBCE97CCEC46BF86618AE98714743095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
Manifest number: 0971
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: rkyfGKFH6zVjDiNFxUAOFop8icE.crl (hash: E5xiZUXRDPaQw6ksgFwbVo3ktCYemp8LdWL+LR7nXaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:97:cc:ec:46:bf:86:61:8a:e9:87:14:74:30:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=0cd24bcac7da2fad5b6b6cd14b66a590ef3f0689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e8:50:29:b8:b2:67:1b:e7:4a:a7:de:6c:73:
55:db:84:a2:c0:d1:7b:e1:f7:24:aa:dc:06:3f:50:
da:b9:47:a6:ec:50:8d:a3:c0:65:f3:13:48:b1:80:
9b:87:3f:70:2d:10:a0:45:a9:72:aa:a7:76:a2:21:
b8:e6:75:75:f6:19:2c:2b:df:27:d0:66:9d:7b:f2:
c6:23:90:af:14:12:8a:1c:4e:5a:8d:84:ab:9c:63:
19:29:00:da:d0:72:26:7f:f8:9d:a3:b3:b2:64:ce:
ed:6d:21:6d:ad:2f:71:c7:f4:58:53:ae:a0:8f:5d:
41:cc:ce:f7:7d:b0:c2:26:b1:a5:13:b9:30:6b:b5:
f6:1c:a0:ea:76:e2:db:63:43:99:44:af:87:62:d3:
6f:0c:07:39:c4:1c:a3:d6:57:c3:46:a1:04:2a:03:
18:fd:86:5b:6b:2b:da:41:ec:99:a3:d8:20:cb:ab:
fd:44:b9:e2:18:d6:0e:d4:11:f6:7e:87:01:c1:89:
4e:d8:95:cb:44:92:3c:51:c6:af:fa:85:83:39:47:
da:e6:32:a0:f2:0e:cb:a1:ce:99:18:64:11:12:ab:
8a:a2:e1:a5:13:38:cc:cc:b1:0f:dc:82:9e:61:4e:
7f:18:46:bf:96:5b:92:1d:c9:35:b0:07:6d:f3:12:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D2:4B:CA:C7:DA:2F:AD:5B:6B:6C:D1:4B:66:A5:90:EF:3F:06:89
X509v3 Authority Key Identifier:
keyid:AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d8:b4:03:98:0b:55:59:83:b6:d6:65:d7:bd:ef:15:29:08:
f5:fc:d9:8e:4e:a2:48:4a:72:ee:35:6c:2c:b1:74:40:b2:24:
2b:de:fd:44:f0:7e:44:5d:ed:ec:24:9e:c9:8a:66:dd:20:ae:
9e:1d:3d:52:62:8d:7f:4f:4b:52:d0:5c:c0:74:0d:61:a0:cc:
b3:a0:84:3e:3f:53:00:7f:4b:4e:f2:53:58:74:f6:1c:20:04:
3e:70:65:ba:aa:98:7e:52:27:23:1f:40:f5:ec:7f:45:aa:d7:
b4:7c:1e:25:81:40:b6:12:b7:38:88:dd:02:01:f8:e7:d8:6d:
50:db:21:42:b1:61:bd:65:c3:c3:d3:cd:60:17:dd:60:6c:03:
d2:1b:86:46:9c:f3:21:51:97:e5:a6:ec:44:8e:87:3e:ee:61:
79:07:21:2c:1f:a4:65:8b:cb:fb:14:89:35:61:c8:91:51:e6:
c4:9f:c1:fa:30:6c:71:e2:25:fc:d8:02:a9:e8:44:ae:28:7f:
9f:8e:53:14:98:93:58:59:76:df:d0:b1:02:5c:d5:97:51:68:
3d:20:79:62:7e:a1:d7:da:5a:71:81:c2:a8:74:ba:e4:ba:d1:
a5:d6:e6:42:97:ef:c9:aa:b5:84:92:3d:79:9a:3a:9b:35:dd:
01:37:c4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:00 2025 by rpki-client