Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
File: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft (raw, json)
Hash identifier: sCcHqWdckqUCOoqI0N4wkmxqLDRt/fh2RnESe4IcNKU=
Subject key identifier: E7:26:71:86:2B:63:46:03:4A:EC:6F:E4:DB:3A:7F:2D:4D:65:6C:F3
Authority key identifier: 71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
Certificate issuer: /CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Certificate serial: 0194BC3BF7BDF5A7A51CC1874B97B66FBA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
Manifest number: 049E
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl (hash: WcvscZvF4d2T161SiBvap0aECpvSVfYXHEUAMPeePaQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f7:bd:f5:a7:a5:1c:c1:87:4b:97:b6:6f:ba:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=e72671862b6346034aec6fe4db3a7f2d4d656cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:a8:5e:8c:55:41:16:06:64:f6:ab:73:d8:
3e:6d:db:42:cb:74:0b:43:a6:13:e2:c5:02:a1:29:
c7:59:52:04:c4:38:67:ef:dd:32:55:52:e6:50:59:
f4:09:62:a0:6b:16:18:a5:c8:d3:1f:44:7b:f9:fe:
5b:57:4f:12:7a:b7:16:fa:b8:ca:6b:35:97:a5:5e:
99:56:ec:a7:86:8d:e1:dc:79:02:4f:79:79:c7:e9:
80:20:5a:ee:ba:a4:f3:00:7f:0b:81:24:6f:00:65:
c6:bc:ac:a5:5c:c4:76:71:19:61:81:fc:12:39:6c:
78:11:f6:fa:d4:40:bb:62:60:fc:70:7e:9c:50:d0:
5c:4d:e2:f6:b7:ac:4b:c6:1b:68:05:b5:d0:b2:7a:
dd:7f:c4:0b:42:ac:6b:b7:11:f4:d6:27:c4:16:15:
10:24:12:3a:f0:73:0d:7d:c8:36:2f:f9:79:77:04:
ca:cf:21:5a:30:8c:18:5f:22:f1:8a:29:54:1d:2e:
0d:7a:60:98:ea:e5:b3:1f:24:a5:a2:17:41:f8:5a:
34:d4:5e:3a:3e:08:99:db:fb:88:d6:09:95:c4:89:
1f:65:94:08:e4:19:d1:83:1c:e7:7e:72:59:da:9e:
70:8e:0c:08:ae:1e:63:27:7c:d1:34:b0:ca:ab:7f:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:26:71:86:2B:63:46:03:4A:EC:6F:E4:DB:3A:7F:2D:4D:65:6C:F3
X509v3 Authority Key Identifier:
keyid:71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:dd:32:17:48:2f:59:fe:58:8a:c7:69:2e:cf:28:c5:7b:ae:
e7:75:ae:b6:01:d6:11:79:a8:c6:72:1e:9a:dc:9f:50:a0:0d:
37:d8:24:e2:0a:17:13:b9:a8:c7:56:4c:4d:cc:fa:2d:b6:a1:
1b:de:c8:78:2c:9d:d3:21:6e:8b:9a:05:c3:4a:82:de:a5:c6:
81:65:b4:35:b8:c1:85:ee:d9:de:bf:78:29:5e:5b:77:16:a0:
7a:5d:22:8c:b0:60:4b:6f:ab:74:c5:90:10:16:26:a3:22:7f:
a5:04:12:1b:cb:98:03:4e:1c:e0:64:14:d7:de:21:be:7a:3d:
30:8d:72:e1:72:dd:a2:91:b0:ff:28:9c:ba:b5:fb:74:0a:0c:
8a:f0:a8:9c:5d:9a:85:a6:b9:ae:8d:65:23:03:b0:c6:44:ee:
44:06:8f:bb:eb:38:85:59:6b:79:4d:d6:e5:8b:ea:5c:ef:e5:
67:0a:89:63:6a:cd:15:5a:9f:72:22:10:1c:f0:91:f9:e6:8b:
a0:0b:be:b9:54:3b:0d:db:28:4d:cc:f2:9c:89:42:e0:54:d4:
f4:94:45:52:9b:cd:78:8a:8f:08:10:e2:5d:5c:80:de:30:89:
be:3c:ca:a5:9f:2a:ff:c9:50:2a:7d:9a:1b:aa:3b:92:57:1c:
36:09:4c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:16:49 2025 by rpki-client