Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
File: A1mTnOHGqpvru2WA4VbuvYcd87I.mft (raw, json)
Hash identifier: JWbYQ2G4zYJDBWnlUfn7ywI8hfZFJg+pY5qBoAXD/LI=
Subject key identifier: F7:8D:0A:A3:48:35:FD:3D:C8:39:72:A7:BA:FC:7E:D9:EA:FB:6F:62
Authority key identifier: 03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2
Certificate issuer: /CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
Certificate serial: 0194BC3BFC46093F272B13CA240D77C39890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
Manifest number: 0281
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: A1mTnOHGqpvru2WA4VbuvYcd87I.crl (hash: aOjm68xlDzY1fWr1YRA9wRO5wvk5rNJzEg/1kz1mtPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fc:46:09:3f:27:2b:13:ca:24:0d:77:c3:98:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=f78d0aa34835fd3dc83972a7bafc7ed9eafb6f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:0d:5c:f5:3c:09:87:be:ac:40:68:c8:00:
22:b9:eb:e1:89:ce:09:18:d7:60:3e:7d:ba:2b:e6:
d7:b8:66:fb:29:d2:81:68:02:cb:d2:ab:f8:62:4a:
f5:39:8e:8c:59:15:19:d9:37:44:2e:44:58:a9:e8:
50:70:05:c3:03:24:69:0e:f2:c6:d9:79:cf:ff:45:
bb:ee:5a:85:cb:81:32:83:ae:61:18:2c:87:81:7c:
21:f8:3c:fc:5f:94:aa:72:82:77:64:f7:97:9d:c1:
e3:8d:5c:32:ed:7c:87:59:93:33:2b:b5:07:80:9f:
0a:40:5c:1f:97:ea:c4:8a:07:f2:6a:9d:6b:34:3f:
17:91:57:ea:6a:bd:a2:a6:30:98:40:a4:3f:86:8e:
c2:c1:23:cf:4b:9b:8e:03:72:bb:91:a1:03:e9:37:
75:25:34:c1:ce:91:99:de:14:cb:4f:a9:59:d5:c5:
c5:58:67:a2:47:15:0c:e9:ed:74:4d:00:0f:46:9b:
82:2f:a0:b2:0a:46:6b:6a:0e:d4:47:a1:55:59:b7:
62:93:59:2f:70:66:4a:45:83:d9:cb:a7:30:c8:d1:
c0:28:3d:0d:6b:66:93:ba:7b:80:b5:37:59:44:5e:
93:de:73:3c:2d:a8:41:c1:60:70:f0:e1:d9:e1:e1:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8D:0A:A3:48:35:FD:3D:C8:39:72:A7:BA:FC:7E:D9:EA:FB:6F:62
X509v3 Authority Key Identifier:
keyid:03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:53:e3:1c:00:7c:88:8e:42:dc:ee:6b:a9:7e:da:d3:f6:4e:
ee:a8:e1:7e:d4:45:1b:6f:43:e7:7e:b9:e0:69:83:57:9a:65:
e5:47:d5:1a:ad:4e:fe:52:a5:63:4a:38:ec:87:90:0c:97:2e:
00:5f:0c:6c:21:fd:2b:a3:da:64:51:14:5f:b3:22:19:34:5c:
d9:53:12:a4:56:5a:83:4f:36:30:c5:51:86:77:62:78:3d:d0:
0c:bb:54:95:c3:7a:f2:5e:0f:e2:63:2a:b9:81:26:2a:51:12:
d9:88:15:df:27:04:d5:71:45:13:76:7d:27:77:d8:4a:3d:1d:
df:e0:1f:ef:48:0e:6c:0f:e2:03:a2:cd:38:e0:d3:bd:7f:7c:
5f:64:d2:f1:94:52:62:e2:1a:80:0e:7f:7a:f4:aa:6c:a6:ac:
94:d1:4d:c5:2f:ea:09:9e:75:01:93:e0:c2:94:d8:cb:79:97:
7c:17:01:18:69:ec:85:86:66:86:08:f7:7c:e4:7c:08:fe:81:
06:f0:64:99:d8:4e:87:1e:a1:43:36:72:01:39:f7:84:7f:9c:
f5:1f:b6:f8:a0:73:d5:ce:bd:8f:c8:23:a2:29:68:13:52:77:
ed:05:6b:39:e9:28:47:33:fd:16:d1:80:10:42:c6:b5:8d:ce:
0d:85:c4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:15:55 2025 by rpki-client