Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
File: S6TRDarjyS2n0u6XO3SMsflJIuk.mft (raw, json)
Hash identifier: 4EiWlzPttce1QYcitD6nVSDf2+zTZyryxTVHFkAWPsQ=
Subject key identifier: CF:CD:78:85:5C:5F:0D:CE:4C:EC:0E:DC:F7:BE:AF:85:EB:E7:60:58
Authority key identifier: 4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
Certificate issuer: /CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Certificate serial: 0194BBCE3D50E487E9671A123F6EFD3C5B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
Manifest number: 07CE
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: S6TRDarjyS2n0u6XO3SMsflJIuk.crl (hash: Y0qTnGh+nEYwteDhCIHAO2Qv2/PgzhZFPAolf9nDhCM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3d:50:e4:87:e9:67:1a:12:3f:6e:fd:3c:5b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=cfcd78855c5f0dce4cec0edcf7beaf85ebe76058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:99:f7:ca:e0:cf:6d:62:8e:04:04:a5:e1:
46:e1:ca:7b:ff:bf:24:d2:f3:b4:dc:a3:97:0c:15:
62:6e:a5:a6:92:9a:66:0b:c1:d3:b9:39:ea:8e:1b:
f4:a9:6d:7d:96:7c:34:86:73:62:87:32:6f:30:9e:
97:b3:62:5f:b6:d2:89:3f:34:0c:a8:65:e5:7e:36:
1b:44:3a:72:c8:0e:15:f6:b8:7d:c6:ff:4c:c9:70:
ec:ab:71:54:ce:62:ee:4f:43:df:74:66:0a:3a:7c:
5e:b5:7c:c4:ef:bb:ab:ca:ae:8f:5f:c7:84:89:8f:
cb:0f:74:bd:fa:bd:00:c3:2b:5e:ce:d2:fb:e8:df:
ef:c9:12:ca:7b:c3:0a:3f:07:3f:c0:7d:ad:f7:14:
a1:31:99:ba:22:05:c4:da:7b:3b:e7:b9:eb:93:37:
ce:55:c6:59:d7:76:d7:c4:2e:f4:b2:34:cb:4b:79:
9f:c2:9c:4c:55:40:81:a8:c9:50:1a:24:85:9d:d9:
61:0f:48:39:49:25:d6:b5:02:4c:d3:6a:c1:b7:44:
4b:e1:60:fa:25:6a:1b:85:fa:6f:ae:06:08:1c:c9:
14:3c:93:b8:49:78:a7:f3:cd:2e:f7:90:78:57:70:
0e:af:13:1f:77:25:52:6c:ea:51:99:ad:c6:20:94:
80:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:78:85:5C:5F:0D:CE:4C:EC:0E:DC:F7:BE:AF:85:EB:E7:60:58
X509v3 Authority Key Identifier:
keyid:4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6c:f1:20:47:f0:d4:a3:57:d6:6b:9a:c1:91:f3:a8:79:a0:
22:40:21:f3:6e:67:c5:58:2f:51:74:4e:a8:ba:6b:5d:35:5c:
cc:43:2d:5d:c4:c7:f1:31:59:e6:34:8e:6c:d4:b3:c5:7a:d9:
ac:fc:fc:cd:30:18:1f:8d:7c:2d:75:3c:cd:67:cd:d0:19:e9:
30:82:99:39:8c:ac:d0:e9:c8:35:b5:33:b7:95:37:44:81:19:
71:c7:c0:6b:8e:90:f1:0a:0f:43:9f:03:57:29:1e:c4:c0:99:
9e:9e:02:b6:11:4f:7f:32:ab:69:a9:03:0f:01:1e:71:5f:61:
82:b1:8b:43:00:5e:b8:a6:48:cc:fe:c7:12:af:e2:e4:3c:e7:
86:1c:24:f4:fb:95:c1:b5:3b:95:76:94:3d:f3:dc:c2:fb:8f:
cc:16:7c:79:a8:4d:f3:df:4c:73:8d:95:06:10:74:9f:fb:6a:
3e:67:80:6d:bf:df:ca:40:ec:8c:cb:71:20:2e:23:3c:2f:8a:
5d:37:63:c4:7b:b8:5d:5c:15:93:f7:da:4a:64:12:51:89:1f:
42:43:ff:a9:db:ac:54:24:d8:bb:3e:70:8a:b1:23:fd:0d:77:
07:7d:a5:fb:66:e4:70:fc:84:55:0a:62:c6:6e:aa:14:bf:95:
9e:e9:82:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:31 2025 by rpki-client