Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
File: rDWoN7KvW2-xjKNdFguamhgiBO8.mft (raw, json)
Hash identifier: +QC2pfSPAYNnQPUubewaOwsWi1mzaYU5/eHiBoMEeHk=
Subject key identifier: 40:FF:20:87:19:9F:7E:71:76:B5:CF:01:AD:37:54:A3:C3:9D:35:11
Authority key identifier: AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF
Certificate issuer: /CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
Certificate serial: 0194BBCE08C7F20D6D2F8DFF84C41C340DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
Manifest number: 0F13
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: rDWoN7KvW2-xjKNdFguamhgiBO8.crl (hash: uuPyv1lXzoapDAkaIPCHPa/Ql9gT65UdFswfNlCRto0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:08:c7:f2:0d:6d:2f:8d:ff:84:c4:1c:34:0d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=40ff2087199f7e7176b5cf01ad3754a3c39d3511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:7c:8f:9c:d5:88:64:b8:20:0b:47:9f:eb:
50:81:81:c1:76:11:8e:bf:cb:ee:ce:7f:30:a0:87:
77:6d:8a:be:5c:12:62:c9:62:38:7a:7e:77:ec:95:
07:d3:9a:07:3c:32:b3:20:8b:6e:5f:10:4a:a2:ba:
8d:fa:67:5a:42:e5:54:11:f9:d3:61:89:77:9d:f0:
40:82:42:dd:20:ef:79:b0:e3:63:cf:1b:6e:52:b8:
3f:09:95:a4:cd:7d:2e:3f:fc:97:c9:90:dc:eb:1e:
7a:43:d3:46:6a:6d:cf:d6:13:e0:a5:17:e0:9a:0d:
54:9b:7f:a7:8f:41:9f:6f:cd:9f:86:e0:55:e2:dc:
01:a3:e3:e5:cd:20:6d:92:e6:bf:b1:92:4d:16:1a:
d2:87:f1:1c:45:e2:4d:0f:65:46:61:c1:55:81:8b:
09:ae:7f:5b:d3:5c:f4:7d:cb:58:79:30:51:9a:d5:
ed:c9:0f:72:56:cc:72:08:f7:8a:0a:f0:f0:56:95:
fb:2f:2c:97:dd:ad:58:c8:dd:d9:3a:0b:3d:21:60:
53:ff:98:7a:cb:3b:9d:1f:a1:27:13:9b:6f:35:8e:
99:a9:b1:e5:ee:c8:a8:9b:83:66:12:f5:3d:58:d0:
f7:5b:0b:25:16:62:34:83:2f:1b:30:87:fb:11:a9:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FF:20:87:19:9F:7E:71:76:B5:CF:01:AD:37:54:A3:C3:9D:35:11
X509v3 Authority Key Identifier:
keyid:AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a0:58:22:38:18:a4:22:bc:69:c2:b0:85:1b:48:d3:db:6c:
c2:01:a6:72:1a:7f:39:b6:df:02:5c:04:bb:21:0f:4a:2f:6b:
07:d4:d8:68:d8:d6:4a:a5:2d:f0:15:ac:c0:04:9b:39:a2:7b:
61:71:f1:a1:5a:f3:69:58:b3:d7:0e:17:d6:5f:31:3c:d3:b1:
bf:63:91:4a:b2:28:ad:23:59:00:58:02:b1:24:95:42:5d:ef:
f7:a1:74:5a:2c:ff:65:c5:65:63:59:90:29:4d:53:08:af:22:
2d:0e:c1:0e:e7:4a:67:24:e3:27:99:62:04:d3:03:c0:b3:cd:
12:a9:81:e4:12:cd:58:d4:64:7c:65:a6:33:1b:25:ee:2d:9a:
55:11:0c:4a:6d:b4:99:48:86:03:c1:35:6e:80:58:57:02:a7:
c2:5e:a8:7e:13:7e:35:cc:55:c1:1d:2e:ec:e2:16:a7:1f:a8:
51:85:5c:d2:03:da:57:a3:21:35:42:56:81:f4:b9:a8:10:aa:
80:e5:57:3e:77:14:c1:fd:a8:36:8b:0c:f7:f3:b7:af:5a:57:
1f:bc:9f:1d:92:fd:27:8d:f8:4c:d0:a7:3b:53:9f:3f:e3:f1:
00:df:07:e9:58:b4:a8:51:ef:fa:99:14:86:8c:2d:d3:86:24:
40:98:0d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:03 2025 by rpki-client