Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: tLxN77a9diJEVlfiW1GztjJm8yTtaC8COD0ecIcxyjg=
Subject key identifier: 9C:D1:63:01:9C:2C:9B:E2:64:FF:BD:D8:94:AB:26:4B:A6:E6:DB:6E
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 0194BC732824BB816F01406AAF96ACEF1A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 0FB9
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: +IV958yWEgyRpFtbBgPsMT9ZBTASCBiKz2bYPdkOzZ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:28:24:bb:81:6f:01:40:6a:af:96:ac:ef:1a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=9cd163019c2c9be264ffbdd894ab264ba6e6db6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:ca:43:e0:ad:47:5f:84:60:a2:49:a9:55:
93:78:9b:06:43:74:f3:97:fa:b4:00:21:d2:10:32:
87:6b:fa:e4:e2:69:7a:e0:42:b0:6a:f0:b9:71:35:
95:34:38:72:39:8f:58:ae:da:c6:10:16:92:55:a5:
41:e2:e3:97:01:1b:cc:be:73:a3:34:e9:18:c8:75:
76:3e:cd:0e:60:bf:f0:98:6c:4d:2a:39:ae:81:05:
c8:3c:9f:10:6e:74:e6:e9:ba:7f:31:7d:cb:e3:ad:
59:90:ed:44:26:fa:90:a2:48:06:d3:44:49:a8:0f:
3f:89:e7:97:9c:61:ac:fa:fd:24:f1:e9:a5:d3:a3:
52:e0:b9:a5:e1:01:23:93:a8:5e:60:2c:48:cb:6c:
2c:b0:5c:05:be:d4:40:a6:57:df:4b:ee:25:ed:1d:
a9:2b:47:13:79:71:22:d6:48:0d:cd:78:de:7b:1a:
e5:9f:4d:ef:ef:72:b6:c7:bb:e2:08:7e:c4:11:ec:
1e:72:3a:c6:4c:da:67:7d:91:b4:e0:d1:bd:8b:f1:
9b:97:dd:1e:4b:59:b2:ee:3c:32:8e:99:f0:dc:cc:
fd:15:6e:a8:02:3d:45:b0:d2:80:3a:b8:95:52:63:
ce:71:e1:13:f9:b5:c3:38:63:ca:52:a6:fb:22:a8:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D1:63:01:9C:2C:9B:E2:64:FF:BD:D8:94:AB:26:4B:A6:E6:DB:6E
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fc:2f:e2:45:da:01:37:6d:58:75:a2:22:89:cc:cb:d9:af:
7c:97:7f:cc:ed:9f:3e:0f:45:30:60:3e:39:54:ee:2d:2f:13:
fe:8b:c2:8e:17:41:3a:0d:77:84:78:79:44:87:cf:47:43:c7:
93:de:10:99:1e:32:4b:3d:1d:39:d3:15:d8:9d:6c:c3:f7:94:
ba:e1:9d:da:5a:4b:ea:52:94:29:0a:f8:6e:cd:89:c0:4d:25:
58:88:dd:4c:b6:67:4a:84:07:ee:6b:cc:78:9f:34:57:12:42:
8c:38:4d:0f:cf:06:be:e8:ca:1a:4c:ad:00:e7:e2:f2:7d:3e:
59:57:fd:bf:6e:56:b8:d8:5d:e7:10:9f:bf:63:6e:bc:3a:e9:
e2:2b:2b:7a:83:3a:67:b0:19:62:0c:5b:de:cd:66:e7:77:f5:
ed:be:69:eb:09:3e:25:d8:ac:60:4a:90:f4:60:d9:5a:51:1a:
d8:8c:69:2c:31:cb:0d:57:42:b4:25:e9:87:78:30:97:7c:24:
d0:86:0a:53:54:33:3b:21:84:4c:5d:04:21:5d:c6:4d:5b:5a:
9c:82:83:55:59:d5:73:de:1a:6e:47:1d:87:8f:52:d4:0e:4d:
f5:ec:5a:d0:e0:54:52:16:66:a8:0b:0b:a2:c9:50:f4:57:08:
d0:3a:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:51 2025 by rpki-client