Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: J4ljau1oCEHTOtMoD6+8nqd+IqmBlnd5WUv+CTVk2r8=
Subject key identifier: DE:09:03:E6:E2:30:C0:3B:02:96:0E:88:AD:DB:15:0C:43:79:89:70
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 0194BC729D041FE41726EE808D526E930252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: ZC51G0nLjKXevtyYiywnXAkGrZKpOrVTucrqVFJUAU8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9d:04:1f:e4:17:26:ee:80:8d:52:6e:93:02:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=de0903e6e230c03b02960e88addb150c43798970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:85:c7:b0:c9:74:ec:bc:8a:a2:4b:5d:46:
5d:a4:dc:58:6f:c5:65:7d:80:cf:40:d8:c3:fe:ad:
85:1b:ab:a5:0b:3a:52:de:0b:37:46:a6:ba:67:11:
fe:66:7d:d3:94:9e:be:29:d9:8e:f7:22:4b:86:e0:
6b:32:01:fb:e9:6c:5b:eb:fc:35:fc:5d:ad:76:d8:
a1:b9:eb:d4:49:14:3f:fe:0b:f9:63:4e:17:25:f0:
59:9e:a6:25:c4:c0:16:34:15:75:27:30:26:8b:f2:
e7:83:f5:9e:b5:9d:38:ad:4a:fd:e6:3e:88:00:58:
2c:eb:30:e8:4e:67:0c:a1:6f:f2:d3:84:0e:6c:1b:
63:0f:ab:09:9f:77:8a:03:cf:61:17:01:56:15:cb:
20:4d:53:09:e0:75:95:06:0f:46:90:c2:de:c4:7c:
57:51:38:2f:0a:fd:a4:62:7c:78:d9:34:9d:bf:87:
10:39:3d:7e:13:f1:f6:07:15:ce:24:35:92:99:11:
78:fd:2a:45:c2:e1:15:8f:c5:19:87:b6:ea:ba:3e:
e2:0d:66:b7:37:0a:18:f4:d9:df:06:06:53:e9:c6:
27:ef:86:1e:ea:3c:43:54:9f:fb:35:c8:67:5e:af:
2a:b3:77:37:5f:9f:84:33:52:00:63:2d:03:64:e5:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:03:E6:E2:30:C0:3B:02:96:0E:88:AD:DB:15:0C:43:79:89:70
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:43:99:b1:77:9f:de:0c:96:42:ec:61:d7:e8:12:05:ea:0a:
28:d7:00:65:76:94:22:0e:e8:69:06:0f:e8:20:a5:02:4e:1e:
e6:93:8f:17:21:4e:11:3b:ac:4a:ce:53:5b:b3:19:b5:6f:1c:
43:82:f0:1d:aa:08:c1:1e:87:97:dc:79:86:0e:f8:94:97:56:
3f:59:bd:8b:56:a8:9d:fa:99:35:f1:82:3a:3c:17:e7:a2:05:
9a:2a:72:5e:b9:f1:4a:45:34:87:db:84:54:a6:56:12:78:fa:
47:99:c8:b9:89:4c:6a:e2:87:cb:d6:84:31:66:be:53:40:e7:
6c:2c:c0:96:2b:38:d4:99:76:6b:7d:71:a4:53:7e:df:ca:e8:
1e:2e:ea:74:f9:d5:3a:61:3b:ec:af:88:30:40:96:9e:a5:7f:
79:c3:1e:09:2b:4b:88:b7:ad:fb:1a:a2:e8:4d:74:51:77:65:
36:35:04:23:ec:b6:ce:d7:09:4c:c5:42:44:3f:1f:9c:a8:4f:
fa:e6:22:29:94:30:54:46:65:f4:49:da:5e:a2:81:98:b4:bd:
4d:b4:19:4a:13:6d:14:87:b8:9f:2c:d6:35:24:30:52:2b:c0:
fa:e6:0d:ea:e9:e1:fd:3c:f2:5d:88:b5:fb:1d:82:99:23:2a:
48:30:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:21 2025 by rpki-client