Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b52709-38af-4545-a8db-c6d4c1a54a4b/1/a3tNxJzDUDQveq4ssyBbn3dfZh0.mft
File: a3tNxJzDUDQveq4ssyBbn3dfZh0.mft (raw, json)
Hash identifier: BrPZBLV/6Mq44DPF0prZWWOUZ2Fata4T+FYFTlVeshY=
Subject key identifier: 98:E8:7A:50:57:D0:E0:51:CE:B5:43:3A:F6:57:0E:1E:69:F5:E6:63
Authority key identifier: 6B:7B:4D:C4:9C:C3:50:34:2F:7A:AE:2C:B3:20:5B:9F:77:5F:66:1D
Certificate issuer: /CN=6b7b4dc49cc350342f7aae2cb3205b9f775f661d
Certificate serial: 0194BBCEC60A4DF252E6D30505914F5C786D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tNxJzDUDQveq4ssyBbn3dfZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b52709-38af-4545-a8db-c6d4c1a54a4b/1/a3tNxJzDUDQveq4ssyBbn3dfZh0.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: a3tNxJzDUDQveq4ssyBbn3dfZh0.crl (hash: FCmGkDxVErWXWGe4n77C1t3a8jNqFMy/oQOQP//p8Q0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c6:0a:4d:f2:52:e6:d3:05:05:91:4f:5c:78:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4dc49cc350342f7aae2cb3205b9f775f661d
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=98e87a5057d0e051ceb5433af6570e1e69f5e663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:38:5d:0a:bc:48:f9:f4:b3:cd:b3:64:b9:
64:16:bd:a7:30:9b:61:61:53:94:aa:5a:75:02:9c:
a5:9b:fb:ac:b9:e9:59:2b:4c:dc:e9:c4:1d:d6:47:
6c:7b:cf:29:f5:8d:ef:e9:6c:86:f0:60:76:98:06:
b5:ba:f3:81:58:c4:12:5b:ea:4f:21:f2:1d:5a:1e:
78:b7:8f:0c:00:3d:6f:b7:4a:33:26:ac:c4:77:07:
bf:cc:ad:c3:4d:bf:7c:79:cf:fc:a2:52:d5:2b:58:
dd:16:0a:e3:7b:38:b3:96:ff:70:4b:67:19:18:cc:
bd:e8:dd:72:2d:c3:a4:29:b8:c0:67:07:d7:95:c4:
eb:50:40:b2:1a:ce:5e:f6:0e:c7:6e:55:21:97:7f:
87:22:4e:f9:fa:a7:e4:dc:a9:c8:28:95:18:4f:f9:
e4:1c:e2:b2:27:24:08:b7:0a:54:4f:85:78:6a:2c:
df:1c:32:98:74:98:99:1f:9a:90:64:61:22:51:67:
41:64:13:1b:6f:32:ae:0b:06:27:40:cd:18:f4:f3:
a3:88:29:35:d4:ce:78:ee:23:d6:54:6c:a6:ea:90:
ef:a6:f9:85:ef:27:0f:26:22:19:3d:c0:e8:fb:6a:
39:2d:a9:76:dd:44:02:6e:f5:38:38:47:50:fd:72:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E8:7A:50:57:D0:E0:51:CE:B5:43:3A:F6:57:0E:1E:69:F5:E6:63
X509v3 Authority Key Identifier:
keyid:6B:7B:4D:C4:9C:C3:50:34:2F:7A:AE:2C:B3:20:5B:9F:77:5F:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tNxJzDUDQveq4ssyBbn3dfZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b52709-38af-4545-a8db-c6d4c1a54a4b/1/a3tNxJzDUDQveq4ssyBbn3dfZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b52709-38af-4545-a8db-c6d4c1a54a4b/1/a3tNxJzDUDQveq4ssyBbn3dfZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d0:15:bd:7d:e1:4e:28:61:ef:ba:1f:e0:8d:1f:42:5c:aa:
ab:fc:8d:d9:1c:dd:07:1f:9b:77:b1:a3:31:eb:39:7c:c4:ce:
d4:16:20:c9:d9:e8:3a:a1:3c:52:5e:fd:78:26:d7:80:16:18:
e9:1e:2e:a3:2b:66:25:65:a9:c9:7c:9a:26:9e:e9:cf:22:86:
7e:03:3c:05:44:d1:dc:dc:5a:0f:13:3d:dc:2e:33:96:71:db:
00:e2:82:7f:79:e3:36:e9:b8:62:df:3a:b2:4f:d7:11:97:33:
59:8a:8f:1b:4b:01:6c:0c:59:a2:fc:46:35:55:79:21:52:4c:
52:03:5d:06:c6:7d:86:03:c9:b1:50:f0:cc:88:8c:dc:98:26:
c4:99:68:3c:3d:00:31:a8:75:69:fd:95:ae:2b:ac:df:3f:9a:
6e:83:78:72:90:21:7e:c5:18:d1:cc:d6:78:f0:4e:1f:dd:7f:
4b:20:52:dc:0b:ce:01:7f:ca:72:d8:6e:9a:ca:bb:60:94:76:
99:9b:80:71:22:d0:ab:56:2a:e3:06:cc:eb:4e:9c:0f:bd:17:
fb:9c:03:2b:e3:0d:be:ff:e3:03:71:18:58:55:55:b1:4e:9d:
25:20:02:70:b8:7e:00:80:52:b2:76:59:2a:b7:a7:e2:97:53:
5e:bc:49:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:51 2025 by rpki-client