Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
File: RrLFRAI1IgBtccF5VhxL0wW6030.mft (raw, json)
Hash identifier: aojjHjfda7L4IMLvxLW1cKBww8CYQb7yUP9kJZtJuXY=
Subject key identifier: D8:CC:CF:A3:9F:B4:1C:7F:62:A4:E4:12:05:09:48:A6:2E:94:0F:B0
Authority key identifier: 46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D
Certificate issuer: /CN=46b2c544023522006d71c179561c4bd305bad37d
Certificate serial: 0194BD179B52A83BB0BD11A74E079DE9E5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
Manifest number: 05AD
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: RrLFRAI1IgBtccF5VhxL0wW6030.crl (hash: NPtcdYjvykWBo6qqotk5up2zUNRdtF1AwrmQSfEfLG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9b:52:a8:3b:b0:bd:11:a7:4e:07:9d:e9:e5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46b2c544023522006d71c179561c4bd305bad37d
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=d8cccfa39fb41c7f62a4e412050948a62e940fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:96:d9:46:d4:16:56:29:4b:8d:cc:c8:38:38:
2f:12:42:be:cc:c0:a2:4a:f5:87:c6:65:e0:b4:f2:
3e:77:ee:5c:e8:a8:69:b0:e7:5b:58:d6:97:c3:6d:
07:07:0a:b3:52:96:9c:95:4d:ed:5e:b4:0b:6e:04:
97:b2:4b:bf:75:41:ed:41:6f:c5:32:36:ce:f1:9c:
14:1f:88:15:82:b1:21:68:7e:43:79:04:3b:35:2d:
bd:d1:77:23:f8:ab:31:e9:35:f8:d5:3c:83:4a:c0:
96:de:cb:a2:bb:2d:d8:84:62:47:69:d8:e3:5b:37:
c7:c0:1f:44:9d:cb:8b:f3:84:e0:7e:60:89:4b:f9:
0d:34:16:e8:3b:f9:14:5e:c0:40:cf:ff:24:5e:2f:
36:f9:21:44:5f:bb:9c:5a:04:53:c3:6a:42:c9:b2:
d3:0e:9f:d7:d2:19:a7:ce:ba:60:07:1a:6f:dc:61:
58:9d:d5:e3:ae:5a:ca:43:c2:4a:71:9c:b3:0e:fd:
90:aa:13:28:21:a7:dc:84:37:99:66:67:c0:bf:f7:
d5:cd:e7:04:dd:fb:27:67:33:19:1d:fa:57:45:1f:
0a:21:71:df:07:2a:89:82:d7:5e:f2:dd:a1:6c:24:
ae:76:57:c9:77:60:06:d7:6e:7b:ee:e5:cb:c3:f7:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CC:CF:A3:9F:B4:1C:7F:62:A4:E4:12:05:09:48:A6:2E:94:0F:B0
X509v3 Authority Key Identifier:
keyid:46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6d:cf:9a:49:a5:44:d5:bb:b9:be:86:c6:60:8a:64:d1:53:
a0:82:f6:2d:4f:da:51:84:98:0b:f0:c9:d5:6f:3a:4a:9c:89:
1d:4e:46:20:c0:08:85:6d:77:5a:c1:1d:df:18:69:a3:a7:9c:
c3:cb:4a:d3:1f:fd:84:2b:6b:af:60:92:ab:b3:88:c7:62:5e:
b9:0a:5a:f2:0b:20:da:ae:46:e2:cd:60:5a:9b:09:dd:73:cb:
f7:13:da:fe:b1:e8:83:bd:38:e7:6b:00:7f:c1:65:23:9e:f8:
a2:dc:30:6c:99:e2:9d:ea:ed:c2:a7:ed:27:1d:59:fb:27:0d:
9e:3b:c9:2c:62:49:be:84:a2:cd:31:a8:8a:95:71:70:fd:94:
bd:22:61:68:41:03:e1:3a:12:7d:17:09:db:99:b7:62:3b:36:
41:cd:10:bf:55:bb:11:f0:04:fc:1b:e9:2a:27:4b:6a:27:47:
3a:43:bf:87:6d:a6:41:bb:e7:8b:a8:61:67:cb:42:fe:1a:7f:
d4:7b:8d:4f:95:24:d0:1b:8e:4f:d1:1d:8b:ff:83:ea:ed:07:
0f:fb:77:17:99:d9:ba:71:de:a6:02:d1:b9:79:99:05:cc:72:
5c:69:01:2e:11:43:80:48:ce:81:40:08:64:cc:1c:22:25:69:
7b:15:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:07 2025 by rpki-client