Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.mft
File: raavh7Q2lN05mUwOMhQwaHVRny4.mft (raw, json)
Hash identifier: HXCmFZfCLFqysoyLPHlCOQqag79eSkHOnfTmu0QtxEM=
Subject key identifier: 14:3C:BC:D3:D6:B4:A1:36:55:F8:29:BA:B9:6D:D4:64:00:64:F5:53
Authority key identifier: AD:A6:AF:87:B4:36:94:DD:39:99:4C:0E:32:14:30:68:75:51:9F:2E
Certificate issuer: /CN=ada6af87b43694dd39994c0e3214306875519f2e
Certificate serial: 0194BBCDDE6FBB0930D1848BC37987FB088D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raavh7Q2lN05mUwOMhQwaHVRny4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.mft
Manifest number: 0986
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: raavh7Q2lN05mUwOMhQwaHVRny4.crl (hash: i/Txc/vT7chS6gatM+XjTu2jzxGUGovbX7UFnOE43hk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:de:6f:bb:09:30:d1:84:8b:c3:79:87:fb:08:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada6af87b43694dd39994c0e3214306875519f2e
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=143cbcd3d6b4a13655f829bab96dd4640064f553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:57:e2:8e:e5:56:2f:94:41:c4:a2:d2:ec:
5d:67:64:65:49:63:1d:12:2e:91:6e:88:97:66:32:
5d:c7:3b:90:4f:a7:91:b1:7f:39:ed:b2:18:73:86:
98:a9:3e:63:ba:7a:1b:e4:dd:bf:cb:76:5e:2d:6b:
34:98:f6:b3:38:71:7a:50:ca:56:d0:c4:08:c5:83:
f1:5f:85:9d:70:9d:b3:bd:10:21:0d:78:7d:6c:fb:
53:05:cc:b7:fd:42:8d:fe:3d:71:7d:8b:bb:38:8c:
8b:5d:7b:66:2a:05:14:58:5f:d5:3b:4a:80:80:5e:
fc:9f:8f:8d:ff:08:18:79:3f:61:7e:5c:98:2a:01:
1a:ae:ea:a5:47:f7:c1:0b:04:f6:e3:e7:2f:cc:b0:
ce:ed:cb:40:08:9e:de:db:e2:89:56:76:21:7b:a6:
6a:99:7a:ca:8a:89:0b:45:77:46:f7:32:3d:f5:23:
95:fd:aa:af:dd:4a:32:e7:b7:ff:72:70:1a:26:12:
42:56:f4:2d:12:0d:03:f2:fb:a0:a7:94:21:82:bb:
e7:81:8e:75:7b:d0:ea:1e:13:72:4d:64:b1:89:f5:
b7:d4:f9:3b:fd:54:fc:22:e4:9d:b9:09:8b:9b:8d:
bf:f5:2c:e6:1c:bb:3e:e6:34:2b:10:cc:73:9b:4e:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3C:BC:D3:D6:B4:A1:36:55:F8:29:BA:B9:6D:D4:64:00:64:F5:53
X509v3 Authority Key Identifier:
keyid:AD:A6:AF:87:B4:36:94:DD:39:99:4C:0E:32:14:30:68:75:51:9F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raavh7Q2lN05mUwOMhQwaHVRny4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d4:75:a9:0b:2b:70:d1:e9:d6:72:f7:c3:c0:54:8c:1f:a4:
db:76:b7:6f:cf:8d:19:b7:31:63:ee:f9:27:13:c1:e4:74:f2:
33:c3:34:41:4f:91:4a:08:b5:62:f0:72:3c:d7:0a:9e:c0:58:
93:c6:5f:ee:19:84:89:c8:5c:51:0e:7c:a6:4b:aa:ab:3e:b2:
45:f8:5d:b3:79:16:7c:39:6d:37:36:46:cb:e6:d6:3f:99:66:
cb:09:55:af:f1:f9:89:a4:97:a3:a2:8b:1f:42:37:65:ac:9a:
a1:9b:ac:04:4b:3c:1f:d3:7e:54:a0:df:b4:d6:dc:c9:53:e6:
ad:c1:1b:5b:d9:37:75:be:5b:4c:54:03:47:94:29:30:50:06:
da:72:33:29:27:58:9f:4a:4e:64:1b:99:91:9d:93:6e:2e:ae:
74:d9:92:74:81:42:ab:54:9b:42:be:6f:c3:db:e8:bd:c2:46:
4c:c6:da:00:3e:70:16:49:b6:b1:90:c4:21:eb:a3:d9:dc:50:
8a:c3:e1:f3:43:c8:3f:47:f3:5e:ac:ed:92:15:86:cf:02:57:
30:cb:89:f1:2c:d2:71:45:e6:93:6e:29:e1:28:67:ae:8f:46:
e7:48:a2:79:af:90:d3:9a:a5:d3:f8:b0:3a:33:bf:3c:01:5b:
42:77:f5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:35 2025 by rpki-client