Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
File: sV9qUOakiH4XxTsPwQ5LfhST7rU.mft (raw, json)
Hash identifier: wjEfGrs78nsOJbZlL1/N1awPmnemHFdcFDf+WxoVF4c=
Subject key identifier: 5A:39:AB:8A:5C:F3:4D:6B:73:48:24:EC:E7:1E:17:F0:35:81:DC:F3
Authority key identifier: B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5
Certificate issuer: /CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
Certificate serial: 0194BBCE2F233FD4C29065DFE2F81481FA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
Manifest number: 1011
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: sV9qUOakiH4XxTsPwQ5LfhST7rU.crl (hash: NNO5wMraztkmKJDvRNVWohCw4Hh6FqYAkpKMeWDiDfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2f:23:3f:d4:c2:90:65:df:e2:f8:14:81:fa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=5a39ab8a5cf34d6b734824ece71e17f03581dcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:37:a2:8b:39:a4:a9:ce:17:bc:65:b3:10:
75:a1:af:ca:08:47:77:2f:91:b6:05:76:b6:ea:4d:
b7:21:8a:ba:fd:4f:67:69:a9:b6:32:73:21:88:27:
40:c9:6a:73:9f:a9:bb:a6:46:e5:1b:e4:76:32:15:
f8:38:1d:02:21:2a:f8:f5:26:97:19:c5:53:80:06:
72:d0:04:8c:c4:98:cf:c9:9e:b7:bb:e9:ed:84:6c:
04:c6:6c:b2:21:66:3d:77:4c:93:bb:df:ec:9b:22:
d4:c3:19:3c:92:e5:45:2e:70:f4:05:e7:c2:85:22:
89:76:17:e1:bd:47:55:16:af:da:7f:83:4e:57:39:
df:6d:ef:3a:e3:9b:fd:e3:f1:2c:fb:e6:98:13:69:
3a:4c:63:28:b3:1e:98:fc:1a:ab:18:f6:94:4c:eb:
50:53:50:24:7e:98:5e:72:61:79:ae:99:c9:47:0e:
06:69:86:01:72:a1:34:20:a7:11:fc:7f:b3:6f:c9:
13:b0:25:4f:e4:60:d1:16:f7:fb:77:59:eb:53:78:
cd:4c:2a:f7:b1:8e:af:68:8c:a4:58:24:57:0a:d4:
86:3a:8c:08:f1:61:3d:e3:24:35:55:9b:30:6f:ba:
ff:8e:69:3a:8b:b8:76:3d:1b:97:56:17:40:aa:fd:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:39:AB:8A:5C:F3:4D:6B:73:48:24:EC:E7:1E:17:F0:35:81:DC:F3
X509v3 Authority Key Identifier:
keyid:B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2a:f6:2f:f6:b1:55:b5:84:30:1a:65:12:8b:22:0a:f2:30:
bf:00:88:c4:7f:7b:6a:f1:aa:71:3b:d8:9d:2b:03:f8:0c:69:
b9:e1:03:e6:b0:0c:7f:43:be:ad:b0:2a:39:9b:64:93:9c:4b:
80:14:0a:9f:59:ce:42:57:1d:86:45:8b:32:e2:47:91:62:2d:
20:69:18:34:eb:65:64:ed:f9:50:a9:55:65:16:33:8f:85:b7:
11:03:b4:f5:c3:9d:cb:1e:13:54:e2:50:4d:d5:40:af:16:ef:
37:23:65:bf:9a:7d:10:d7:4e:18:fa:48:35:e7:6b:b4:b3:0a:
f0:6f:6e:9a:b0:95:eb:e6:83:54:d7:bc:53:9b:22:10:af:ec:
be:14:ba:8d:13:bb:e4:35:6d:99:45:f0:b0:27:a8:9c:1a:47:
d4:44:1e:47:4b:c3:9d:f6:c7:3a:2f:6a:10:4f:3e:71:ae:05:
ff:7e:1e:e6:f0:d5:d1:7b:3a:ec:c8:0b:90:f3:05:2b:71:a4:
09:ef:5a:ea:26:03:99:01:ba:a7:8c:e8:18:37:1d:fa:72:86:
6f:db:18:cf:52:90:c5:d7:90:61:ae:03:3a:98:d4:10:cf:09:
4e:ed:a9:29:e9:f1:7e:88:5d:e4:db:5d:17:b9:3e:35:8e:3c:
c9:89:5e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:20:39 2025 by rpki-client