Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
File: 1K5pV43Ol3ozqindV8oZD6aHd_o.mft (raw, json)
Hash identifier: G11FgrZEyu+eHOS9gr1x1DHDG9pCrpKSCjRezhECq6c=
Subject key identifier: B4:FE:0E:7C:EE:B5:35:53:F5:E2:F8:8F:BB:87:9C:E6:D0:6C:B9:1B
Authority key identifier: D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA
Certificate issuer: /CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
Certificate serial: 0194BBCDC06CAC3FD6B1EAE564FD519FE099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
Manifest number: 0AA0
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: 1K5pV43Ol3ozqindV8oZD6aHd_o.crl (hash: HsuRkxR0byWsynyb8vmZcwMH4kzsfysa7zzGGFDmXdI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c0:6c:ac:3f:d6:b1:ea:e5:64:fd:51:9f:e0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=b4fe0e7ceeb53553f5e2f88fbb879ce6d06cb91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4f:fe:4a:af:a6:3c:87:10:a4:f0:64:a1:c3:
02:4e:91:0e:28:09:75:ba:41:1e:3c:ec:df:74:e5:
3c:43:76:3a:81:1a:97:c0:d3:fd:14:4a:2c:c4:a6:
cd:6e:84:0c:94:af:7e:13:8d:e3:ac:e7:d9:b9:73:
d7:d9:4d:ce:fc:54:e0:2f:a6:44:08:93:b2:01:68:
d3:b8:0a:a1:4a:ab:3e:fb:68:cf:28:0c:93:9a:7d:
f5:f1:3e:d8:69:3a:45:b1:5c:b9:52:fb:50:f9:a9:
13:4c:1f:16:76:ec:54:87:75:6a:55:95:e4:82:7e:
ff:43:86:14:2f:30:26:9b:23:8d:3d:d8:6d:81:6f:
68:1f:af:42:f6:36:0b:b5:d5:f0:d7:e2:31:4b:72:
e0:76:a1:3c:67:0b:79:53:1a:9e:9a:f8:5f:dc:2f:
05:27:9f:22:bb:92:16:2d:c1:6b:05:ce:cb:1e:5d:
a0:58:0d:81:b7:8e:c5:85:7e:27:f5:ec:c5:68:6b:
b2:f8:f1:20:b4:bc:50:87:5a:12:07:2b:74:57:c0:
fa:5e:37:58:71:42:73:16:01:c0:9a:f3:a3:6c:0b:
de:b5:75:2a:46:a6:0d:a2:72:0b:a0:0f:c8:99:6f:
5d:b6:20:aa:a6:86:3f:84:fb:cc:45:11:a0:a9:7d:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FE:0E:7C:EE:B5:35:53:F5:E2:F8:8F:BB:87:9C:E6:D0:6C:B9:1B
X509v3 Authority Key Identifier:
keyid:D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e0:c7:0b:9a:70:ee:ff:73:ea:db:de:3c:28:27:4f:21:3d:
fe:a8:b2:90:22:d3:5e:78:ff:3b:04:6d:22:a9:61:57:6c:01:
f6:3c:06:bd:0c:13:35:43:79:c2:26:34:92:a9:63:e0:28:47:
55:f7:50:99:9b:74:46:e7:6c:10:97:74:c9:51:bb:13:37:5f:
a9:08:71:48:7f:da:f1:78:e1:94:09:ef:b8:8a:25:89:ba:82:
28:00:04:a2:88:89:e4:bb:da:2e:77:b6:d5:a1:c6:99:64:83:
76:f4:f7:5f:6a:50:4a:0b:5e:1b:f4:f4:c5:8b:1b:29:f6:4f:
61:c6:7c:76:00:09:a1:43:78:03:d9:cd:fd:d6:20:9d:e2:35:
89:18:ad:f1:0a:8c:15:26:65:a7:21:81:75:a3:dd:16:54:5a:
d2:ec:30:5b:91:c6:3d:fa:4f:24:77:76:b2:87:3d:ea:e3:53:
98:1e:d6:b2:49:5e:aa:01:72:47:75:74:77:91:72:48:af:b2:
00:2c:ff:5c:f2:75:46:6b:89:f1:b0:37:6d:6c:78:45:5f:49:
7f:f0:a5:32:38:64:fe:98:3b:ae:8a:1f:f2:3a:73:da:88:90:
b6:cf:17:b4:de:f7:de:df:ca:6f:10:6d:50:e6:9a:3b:88:79:
28:b3:27:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:23 2025 by rpki-client