Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
File: V9wqO2671XpOSCmt0_KgKnbld4k.mft (raw, json)
Hash identifier: qLHVVc4WkLZoc9Q4uk6n63TItz8Mgagk7MpwJbFoPP4=
Subject key identifier: F9:F6:62:EB:4A:A0:71:1E:85:52:C6:42:72:A3:A8:86:F8:06:3B:BB
Authority key identifier: 57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89
Certificate issuer: /CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
Certificate serial: 0194BCE0A25AA3B0AA1297DB015EDB37E4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
Manifest number: 0121
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: V9wqO2671XpOSCmt0_KgKnbld4k.crl (hash: pesVB/iLxXMYeCMYzsxcvvB2tkYpfUe12xmuut+L8hI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a2:5a:a3:b0:aa:12:97:db:01:5e:db:37:e4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=f9f662eb4aa0711e8552c64272a3a886f8063bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:68:d7:68:65:95:af:df:ef:d3:de:e6:d4:90:
65:1e:7e:25:37:e2:77:6c:da:0f:57:08:85:c2:5d:
15:3c:fc:17:4e:ac:2c:94:90:cb:2b:7e:b1:f8:e7:
8d:2b:58:d2:17:ea:a5:19:a1:1f:dc:17:e4:16:d0:
ca:22:72:6c:00:88:cc:96:7b:5c:5c:54:7e:aa:c9:
3f:a4:51:1b:9e:9c:59:c3:56:55:b5:fb:13:e8:7f:
a1:04:d3:b6:47:fe:1b:1f:39:c9:74:f2:83:d4:63:
ac:37:69:71:dd:a6:7f:d4:d1:a6:0f:37:6f:f6:04:
89:9d:d4:ed:4d:f2:98:8c:6d:a6:b9:07:27:dc:9c:
2f:c3:e7:81:10:1a:12:1a:18:ba:f0:df:90:fe:5f:
83:2f:ab:f2:0e:52:16:0c:ff:ee:fe:8f:ac:24:05:
91:93:bd:51:29:8e:03:01:30:56:4d:bb:54:d6:53:
48:3b:0b:4f:f7:8d:02:45:60:60:cf:2f:b5:78:93:
97:49:bf:8a:8f:e2:20:7d:4d:7d:42:5f:ce:27:4d:
e3:91:21:34:1b:7b:e5:ea:ab:cd:00:2c:d8:8d:28:
1a:ed:d2:cd:ea:5d:05:1f:de:53:4a:86:5d:5f:2a:
a8:3f:73:59:f0:09:c4:cb:44:52:aa:e3:99:88:5e:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F6:62:EB:4A:A0:71:1E:85:52:C6:42:72:A3:A8:86:F8:06:3B:BB
X509v3 Authority Key Identifier:
keyid:57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c2:77:49:f8:7c:11:b0:86:e7:d3:e7:0a:b8:b8:fc:cd:05:
56:0e:f3:4f:20:e0:e3:b2:63:4c:e5:4b:da:8e:8a:8f:16:b5:
35:07:57:50:89:f3:7d:1f:91:ff:a1:9e:d8:4c:64:84:65:70:
8b:14:05:d3:25:05:8d:a3:3f:55:c7:eb:54:cd:e9:2e:6c:47:
98:1e:3f:61:27:6b:8f:b3:71:1c:b9:40:6d:51:fa:8d:e6:49:
15:ae:3d:a0:1e:89:c6:bb:2f:10:fb:7e:72:f0:32:dc:70:f7:
74:a3:23:91:17:9e:ad:35:03:32:96:71:bc:03:90:32:df:f4:
40:b3:2e:9b:c1:c3:07:a3:49:ea:20:1d:a9:df:d1:ab:64:5a:
ff:ad:60:10:24:af:87:d0:b4:cd:78:ab:fa:2b:22:1e:74:3b:
22:8d:e2:bf:e3:0d:27:b3:2e:79:7d:d0:3f:75:7a:c2:5c:73:
d2:05:d2:76:1f:41:db:ea:f5:57:59:43:32:79:03:dc:2a:19:
93:9b:e9:da:3e:24:5d:b9:30:fb:0e:76:08:ec:cb:51:51:d7:
3b:86:78:bc:f3:df:d9:b7:c1:c9:55:29:73:f1:66:4c:71:78:
e2:f0:56:6b:90:73:59:b0:8f:8c:72:e1:15:b5:0b:03:80:a2:
c3:66:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:40 2025 by rpki-client