Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
File: r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json)
Hash identifier: BT3OKpoJx+WJwVs68BZaK5i7DGqn6t4ZYA0gOhGYbT0=
Subject key identifier: BD:5C:43:81:D7:BD:7B:AF:19:3D:5E:A5:7B:36:84:9A:78:C0:03:41
Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
Certificate issuer: /CN=af542dad0baede4a8b1150f459a03f011cdba654
Certificate serial: 0194BD178536DD2BEAA4766751DE07C162AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
Manifest number: D0
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: MHbJqlIhTTdYGQg3aUGEi7GeF4IrU4wHfoKoYvMoDwE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:85:36:dd:2b:ea:a4:76:67:51:de:07:c1:62:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=bd5c4381d7bd7baf193d5ea57b36849a78c00341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:00:02:f8:f9:b3:a5:31:ca:f8:74:50:d1:
7d:04:a0:74:13:19:62:9d:ae:73:78:c0:70:b3:a1:
4b:70:3e:73:ce:45:cc:8b:7c:dc:7b:00:ff:b9:ad:
ee:70:1c:c5:f0:28:65:03:1f:9d:b1:4b:dd:ca:6e:
eb:43:00:99:3b:27:3f:e4:ea:a0:d8:c5:77:a2:30:
e2:2a:a1:39:71:a1:31:82:23:26:a6:bb:89:f9:f4:
97:42:56:f0:49:7f:f7:cc:23:66:71:9a:36:20:27:
03:d2:aa:53:36:71:49:7d:e5:b9:46:04:f1:73:d2:
d5:1f:ef:8a:92:2a:43:1c:e3:79:aa:ff:ba:99:9e:
f2:7b:4a:a4:d7:02:d3:33:8d:49:a5:da:8e:a2:2d:
4e:8b:18:93:fa:bf:a0:c3:5a:84:ed:5d:f2:2c:bc:
9b:50:17:b5:aa:77:0f:4a:e3:09:28:86:70:54:ec:
e3:72:21:23:00:05:88:3a:21:1a:da:df:ba:41:22:
2c:86:58:c2:07:b1:57:f3:ff:cf:42:c8:8e:7e:2e:
77:0e:c2:4f:95:05:d9:e9:6d:65:89:43:fc:3d:36:
c3:b6:0f:04:11:55:cd:3c:0c:ae:32:78:35:e0:59:
aa:5a:2e:89:38:15:b1:ba:69:ec:a0:56:66:d4:fc:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5C:43:81:D7:BD:7B:AF:19:3D:5E:A5:7B:36:84:9A:78:C0:03:41
X509v3 Authority Key Identifier:
keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f6:6d:7c:27:97:69:6a:a1:6f:33:16:f0:e1:4a:cd:d8:e5:
f6:76:6d:6b:5c:e8:35:61:4d:61:29:d3:e1:a0:b5:1e:44:5c:
2c:6b:7d:a0:1f:01:8e:5d:26:97:85:ff:8a:a5:d7:6b:ad:a2:
37:ca:b8:1f:65:13:e5:7a:ee:b6:a7:31:33:f3:0a:a4:4f:95:
1a:fb:90:15:94:1f:c8:89:b8:7a:ac:4d:07:81:97:c5:07:21:
61:f6:49:93:cc:59:86:4c:28:eb:a5:83:46:40:64:65:13:ad:
84:f8:e4:40:bc:ab:42:67:99:87:9d:4f:c5:78:b3:b5:31:d3:
2d:b5:4b:be:2d:88:66:4e:64:16:8b:54:ad:ed:71:68:c5:28:
20:78:1c:5f:e3:9f:ab:b5:9e:2f:ae:74:f4:54:86:c9:fd:6c:
80:13:d8:77:9d:9e:ad:35:13:1c:d9:7b:d7:fa:77:84:ad:ed:
90:4d:c8:38:95:9c:0f:2b:cf:45:8b:79:b9:5c:75:e9:cc:7f:
b4:be:0b:0f:27:91:8a:54:8b:54:3c:33:af:a5:ab:93:64:86:
c0:5d:e6:de:1d:84:af:ab:9c:ae:b7:11:70:4d:1e:38:6b:83:
3e:b5:5f:a2:0b:c0:0b:30:3a:13:6d:bc:e2:60:a4:cd:9e:ae:
81:ba:8d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:51 2025 by rpki-client