Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
File: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft (raw, json)
Hash identifier: E3iEewobK9ddjcodjhe3wUR6+9bgwDKBlnjlsar9c7s=
Subject key identifier: A3:8F:62:45:66:AE:1A:F0:49:32:39:40:C4:DD:AA:38:A7:0B:F7:70
Authority key identifier: 47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
Certificate issuer: /CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Certificate serial: 0194BC72B233F9F4B8CC4DE4702340DEB458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
Manifest number: 017A
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl (hash: 4EF0KVokRsWTW1uLM95F2wGz4z7VRN7dLgLK1/ahSoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b2:33:f9:f4:b8:cc:4d:e4:70:23:40:de:b4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=a38f624566ae1af049323940c4ddaa38a70bf770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:22:15:cb:a6:96:fd:e6:f8:6c:4f:f0:69:
3e:1d:29:27:de:bd:b2:b3:46:84:2d:a5:2a:18:02:
d9:9a:31:60:f1:bb:e7:20:c9:bd:fc:25:e9:05:2b:
63:c5:d3:59:85:65:28:b8:e8:a8:e3:a0:0f:3c:d8:
fa:6f:de:06:34:03:7f:f9:4f:81:1d:64:e5:17:8f:
53:9d:56:ad:d8:04:4f:5c:cc:09:40:a0:af:cd:98:
95:af:52:1d:f4:3d:56:0a:53:83:c2:75:f8:53:30:
9d:b3:3a:f3:85:37:37:89:f2:e2:8b:bc:de:70:fb:
a1:70:b7:64:c3:0a:f7:17:a0:22:5a:70:24:c6:64:
11:03:66:84:2f:67:b4:9e:74:3a:6c:cc:e2:fb:3d:
1c:5d:68:f2:0a:e1:6d:77:cf:d0:03:f7:ce:36:18:
71:24:40:5c:7c:fd:e4:43:fc:b3:18:2c:02:f1:40:
07:1c:39:7c:ef:27:59:72:d2:a2:9d:a0:23:46:42:
9e:a7:86:0c:a7:7a:b2:ef:52:d2:14:45:e8:39:f0:
1f:0f:72:3e:20:f9:df:4b:7f:08:02:b5:b0:09:c4:
a1:aa:0a:f6:d6:16:e6:c0:96:54:6f:d5:40:d8:9d:
21:92:2d:15:11:4f:f6:1f:ea:17:70:ad:07:94:ba:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8F:62:45:66:AE:1A:F0:49:32:39:40:C4:DD:AA:38:A7:0B:F7:70
X509v3 Authority Key Identifier:
keyid:47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:33:8b:84:e3:0d:34:47:96:7f:54:02:e6:7c:10:94:8d:e8:
5e:94:e4:b7:e0:49:d0:4d:25:e7:72:ba:92:11:0d:ec:86:61:
d8:33:be:c1:3a:46:66:55:95:76:56:93:ea:b3:c4:42:bb:eb:
71:c8:76:d7:d9:a0:c6:1f:52:57:e5:c6:91:60:af:f3:e8:47:
a6:25:53:1c:5b:75:fd:2a:50:f8:9d:13:34:73:3b:71:f9:f3:
2e:3f:7c:d5:5a:a3:d0:d7:a2:a3:96:46:0b:c3:fa:5a:2c:17:
2a:e2:79:d6:d5:bf:f7:00:df:5a:0d:05:a2:f2:a6:fd:d1:3d:
59:b2:6b:46:94:9f:4c:1e:fe:44:b8:a4:29:a5:d4:d7:ed:1c:
ac:a2:75:6c:56:22:ef:3e:11:71:cb:98:32:a3:e3:de:01:85:
81:f9:20:24:d6:80:65:b1:77:9e:8b:45:10:7a:69:b5:ae:6e:
13:a7:18:66:8e:2d:93:58:c7:12:60:cf:3e:15:f9:5f:d1:a2:
6b:57:24:b9:ea:31:47:7e:b0:77:9a:f9:23:2f:73:5d:7c:44:
de:63:c4:23:49:6e:e2:cb:c2:6b:72:64:e5:36:32:0f:ba:d0:
a5:f6:f4:01:ae:3a:dc:9d:28:33:c9:41:ad:c7:41:25:ed:58:
52:94:df:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:45 2025 by rpki-client