Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
File: tDGAKt-CucbF8IagvPYLr9MnyGU.mft (raw, json)
Hash identifier: ItJDhsVrMeEw2AMGpBPy2dL3wdPvElKj2GfShMrVJ6U=
Subject key identifier: 37:2C:13:06:F9:43:09:30:6D:21:3B:A8:15:4F:C9:A0:6C:BC:D3:D5
Authority key identifier: B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
Certificate issuer: /CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Certificate serial: 0194BC7297E9AEB3409FA4F5A8E3A0423358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
Manifest number: 0326
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: tDGAKt-CucbF8IagvPYLr9MnyGU.crl (hash: Qm4GybKNnBspPkBUCy/w4OslOVIzGZMnJ73YT9Qx2Mk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:97:e9:ae:b3:40:9f:a4:f5:a8:e3:a0:42:33:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=372c1306f94309306d213ba8154fc9a06cbcd3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:f9:c2:eb:db:fe:43:51:bb:e8:6b:20:97:
c9:c2:cf:fd:0d:e7:73:04:54:09:10:c1:59:9c:a4:
3d:28:1a:95:9a:db:20:30:e3:20:95:bc:99:7c:c9:
0b:42:1f:6a:09:df:45:bc:18:49:07:b6:32:31:a6:
1e:6e:41:f2:0a:c1:5a:9a:47:28:75:24:35:6b:94:
8d:4d:24:08:ca:78:b7:74:44:58:88:80:e1:c2:4d:
f8:5f:62:52:3f:92:85:d6:64:78:13:ac:ed:b3:5d:
58:ff:19:21:de:e9:ba:81:4e:21:1c:e3:4f:30:21:
9f:bf:f9:11:29:17:5c:70:89:63:57:08:36:d4:85:
2d:f6:a3:bb:8e:55:d4:38:ec:fa:03:8d:a6:d3:90:
7c:6c:8a:18:ed:d6:ee:3a:3c:85:70:11:c0:47:fb:
29:6f:57:cd:cb:fd:08:1c:cc:fa:fc:f2:06:60:67:
ee:07:da:e2:92:11:55:cf:e3:57:c5:4f:fe:a2:e4:
e0:c1:54:76:69:44:ea:93:a2:5e:e7:ed:43:24:4c:
8b:de:8f:12:13:73:21:f7:89:c0:09:f2:51:34:0c:
0a:91:7f:f1:29:84:74:0d:a8:4e:16:0c:58:7e:e7:
72:be:94:3f:ba:7c:f1:df:d5:8b:23:85:de:0c:80:
85:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2C:13:06:F9:43:09:30:6D:21:3B:A8:15:4F:C9:A0:6C:BC:D3:D5
X509v3 Authority Key Identifier:
keyid:B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2b:4b:5f:23:98:a0:b7:35:2b:ae:9f:01:03:3f:4a:01:c5:
cb:8c:fe:ba:a0:73:26:e2:53:e4:04:45:65:76:35:f4:ad:49:
ce:0a:4e:6b:b2:c0:dd:57:d7:24:91:75:3b:f7:3b:49:be:0a:
ff:fe:7a:e2:a2:d3:e2:81:4e:a9:d2:60:12:85:6c:61:06:8b:
5d:89:60:92:15:92:b5:fc:04:fb:63:51:5a:6b:4b:83:48:dd:
ff:a7:22:be:95:67:15:ff:db:82:91:55:90:20:5f:37:14:1f:
32:c9:b7:62:b9:eb:a4:44:96:7e:58:b7:5e:a1:d2:2e:ce:48:
b9:a7:32:4e:6d:b2:4e:e3:09:f9:fb:f5:b3:4f:72:86:92:d8:
79:5a:84:d9:b7:50:d9:36:64:3c:80:37:46:6b:ff:cd:9b:92:
17:ea:82:c1:00:84:9f:ba:9e:e9:e8:17:92:48:74:3b:26:1b:
6c:97:e8:40:4f:58:ed:c2:58:68:93:2f:04:90:58:bd:38:ea:
71:9c:0b:9b:f1:ef:26:ed:19:f4:05:9f:f6:c3:d1:73:4b:8a:
87:a6:d2:ec:e6:1d:3a:41:d7:b9:89:52:07:60:b5:e9:09:1d:
21:49:42:c4:a4:b1:36:0d:14:37:54:77:80:94:e4:74:40:e7:
14:63:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:16 2025 by rpki-client