Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: H6jjgwfXmlp5rxKMhXNODlW6sTDGUZcWwPz2P9elBwI=
Subject key identifier: 2C:77:AD:49:D6:59:6D:1C:C1:A4:FA:A7:EF:E4:C3:6A:41:DF:5C:82
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 0194BCAA41599FBCFCC34CD53A96F73FF35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 0539
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: f1+RJ/rk5v8Q+WBBM5x1/TKgzA4YRDsy80/T01n6XoY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:41:59:9f:bc:fc:c3:4c:d5:3a:96:f7:3f:f3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=2c77ad49d6596d1cc1a4faa7efe4c36a41df5c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:49:1b:29:7d:ac:03:ec:aa:80:d6:fc:1c:
3d:16:3b:70:f2:9e:52:72:a0:2d:a4:f5:03:0e:cd:
67:a0:10:bd:1f:28:28:27:bb:a6:17:71:2c:cd:0b:
88:ab:28:1e:57:54:31:1b:cd:38:88:42:21:64:bd:
73:67:fa:aa:18:5c:20:da:c5:f3:75:f6:4d:b5:ff:
33:0c:69:ce:0e:61:6d:a1:7e:1f:b9:a8:34:40:ee:
9c:52:14:db:b0:68:62:32:fa:dc:66:7e:57:a4:e4:
f7:47:b3:28:8b:54:28:f8:41:e4:3b:8d:b5:d1:ef:
df:88:05:50:0a:60:f5:05:a4:98:e4:71:05:07:25:
a1:d7:35:4d:34:83:63:ed:a5:18:24:f7:10:92:ee:
a2:90:46:b2:10:a5:04:42:88:61:66:54:d4:5e:43:
57:6d:99:5e:43:1f:44:f3:37:81:bd:d1:c0:1a:84:
65:4f:ae:50:22:14:d5:c1:98:c1:63:59:23:9b:4e:
5d:04:9d:34:47:ae:71:b2:87:06:b4:d6:12:3a:0a:
a7:c9:c3:61:f7:36:a6:ca:61:5a:5f:75:4c:12:a7:
a8:84:ed:62:74:7a:18:3f:88:fc:fc:94:7c:90:ee:
98:f7:d2:08:29:b1:5f:9f:6a:59:03:f5:8e:48:53:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:77:AD:49:D6:59:6D:1C:C1:A4:FA:A7:EF:E4:C3:6A:41:DF:5C:82
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b0:fd:c5:85:6b:3f:06:3c:b8:63:c5:23:6a:cd:a3:96:fc:
73:69:67:17:4f:b4:1d:f2:52:77:5c:48:11:0d:8a:f0:3f:48:
c5:41:26:e4:b9:2b:dd:2c:cd:2c:dc:b3:df:93:6c:a6:df:d3:
61:f3:6f:2b:d8:f4:8f:8a:67:e8:48:f3:d4:bd:bf:ae:f0:f0:
08:bc:4c:fb:8d:d7:45:c1:41:e6:91:51:e7:c2:4d:2e:59:dd:
a0:e3:25:b3:7c:12:9b:98:01:5e:d6:ec:09:87:c2:e1:6d:ea:
39:cf:30:02:80:bc:fe:00:17:4f:8d:df:c2:cb:aa:0a:f3:fb:
86:c1:f1:ac:20:93:4c:93:11:25:c8:d5:5f:70:3d:2d:af:e8:
7d:18:2b:6b:e7:e9:8d:33:16:0a:84:bd:f6:87:b2:1d:e8:ef:
18:7d:6f:80:eb:7f:2d:8c:ad:64:35:99:6e:d2:f6:87:c1:6f:
8f:20:a4:c6:46:ce:2e:82:93:32:78:bb:3d:ea:92:5d:62:81:
2a:e7:aa:ec:d2:5b:b7:b9:ce:71:39:cd:54:0b:1b:9d:4a:e2:
c1:ff:0d:06:73:15:81:3f:98:1d:c3:8b:2b:dd:ee:3d:e0:a9:
c2:53:98:d9:2e:1a:34:58:35:be:a3:26:40:1d:a5:49:fe:6e:
66:4d:06:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:42 2025 by rpki-client