Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
File: D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json)
Hash identifier: GJqwxwc138iEHn24Xsz8zghNFbnd1UI8qq10dgSulBA=
Subject key identifier: 0F:BA:C2:70:7D:31:B4:FF:BF:29:A1:1B:7B:F2:D8:05:6B:CF:8A:E0
Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
Certificate issuer: /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Certificate serial: 0194BC04DE37A9FF16071905002F50A4679F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
Manifest number: 30
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: gLnxnGoYqrUYWn6Kmcg+WZkMaYsW4GLMn6xZm7mLpBw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:de:37:a9:ff:16:07:19:05:00:2f:50:a4:67:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=0fbac2707d31b4ffbf29a11b7bf2d8056bcf8ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:b5:61:33:1c:87:6f:c7:31:20:71:65:ec:
38:5a:04:46:7a:e2:82:48:77:a7:2f:ab:9e:0f:6e:
3c:fa:67:01:88:f8:d0:60:31:8d:a0:0c:6e:64:74:
f6:60:0b:d2:4d:7f:ca:a2:42:0f:ca:a6:ed:c2:ac:
bb:b0:4c:55:c7:d0:e4:e0:5c:50:cc:1a:08:5e:c9:
39:89:37:8f:9a:bd:2c:6f:7d:0d:8e:34:1d:44:bf:
d7:b4:59:d8:43:64:6b:3a:68:e8:45:9d:d6:70:4c:
f4:64:92:91:bf:80:02:4f:13:59:74:bd:5e:28:1e:
fd:47:61:96:20:9d:bf:fe:47:67:b2:cc:4c:b9:e4:
b2:d8:38:cb:2b:49:80:98:b7:ad:c1:94:53:02:be:
3c:d7:e1:67:b7:3a:b1:1b:d6:e4:12:e8:4f:96:ad:
59:cd:f8:57:a0:5f:ca:e7:5a:41:b0:93:fe:a6:2a:
85:c5:d6:80:2e:6a:47:57:97:17:7e:8c:19:94:dc:
61:d0:a8:9c:b4:2a:68:9a:08:8c:4a:0d:1f:6c:e3:
9e:81:ad:62:47:62:cc:dc:af:cb:10:12:83:55:3e:
fc:e1:c5:75:34:4b:fa:32:b0:42:1a:44:ee:ef:04:
78:5d:cf:ae:22:4c:df:e6:88:90:88:b4:77:ce:48:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BA:C2:70:7D:31:B4:FF:BF:29:A1:1B:7B:F2:D8:05:6B:CF:8A:E0
X509v3 Authority Key Identifier:
keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6c:75:4b:c5:76:75:9c:fd:f9:10:31:7e:c8:31:0f:80:1a:
9c:57:eb:c5:0f:22:a0:74:19:4f:dc:4b:46:8c:e5:b0:32:dc:
00:56:22:ee:9f:28:92:dc:8a:5a:f6:f4:72:d7:61:0a:5c:63:
6b:03:04:6e:7d:b7:2b:6c:78:39:94:ea:0f:94:31:66:85:4a:
9a:93:ea:7e:7c:d2:03:48:cf:ad:8a:77:e9:54:ab:be:f5:b1:
f5:4c:da:c1:74:d7:13:b8:e5:ec:38:8b:66:13:b4:94:2e:b5:
4c:44:41:8c:ad:44:31:81:a5:e5:26:01:b2:72:d7:09:1d:f9:
5f:d0:4e:a2:55:1b:9f:1b:37:68:c7:4b:08:da:83:ab:d8:e4:
3f:2c:6e:96:ef:35:56:f9:68:83:0e:ed:8f:47:0c:45:c5:e5:
06:57:80:be:9b:5f:54:1a:13:3a:3c:19:95:46:e9:48:af:08:
c5:63:1f:00:ec:60:e7:9d:d0:07:59:4e:db:4b:ff:70:8f:b2:
6b:ae:13:41:4e:43:14:8b:cf:de:7c:09:81:0c:d9:11:36:db:
ac:3d:ed:6e:45:b3:05:ac:47:e9:47:0e:ed:6b:be:a4:a2:18:
ae:fd:7d:35:5b:66:0f:01:a7:ef:97:bb:88:58:08:12:88:57:
cf:d4:59:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:41 2025 by rpki-client