Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: ahRTSGbu6TgVUiU5ngV0Md9fHZ3IPjNSLPxoKM4ELSc=
Subject key identifier: 75:C1:62:9C:6D:28:51:C2:9D:60:23:4E:2F:C0:19:AA:71:AD:97:80
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 0194BD17FD3715A6D19DA03011B328752D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 10BC
Signing time: Fri 31 Jan 2025 16:00:53 +0000
Manifest this update: Fri 31 Jan 2025 16:00:53 +0000
Manifest next update: Sat 01 Feb 2025 16:00:53 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: tK8PkL7fZ0WhORhpyIIaRRvBDhtgKnG33luOg4Fns+o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fd:37:15:a6:d1:9d:a0:30:11:b3:28:75:2d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Jan 31 16:00:53 2025 GMT
Not After : Feb 1 16:00:53 2025 GMT
Subject: CN=75c1629c6d2851c29d60234e2fc019aa71ad9780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2a:35:55:09:21:87:43:4c:a6:48:97:a6:7b:
05:f0:64:a3:e2:98:9c:dc:5c:90:d4:7c:e5:95:cd:
f3:4a:ab:75:11:9c:a3:4a:48:70:a2:f4:69:48:50:
e1:52:a4:7f:7f:2b:da:51:9e:0a:23:4b:1c:97:35:
b2:17:5d:ff:e5:41:c6:ac:8d:16:1c:b7:2b:ca:57:
de:c2:08:d5:e0:cc:25:22:5e:ae:e4:e8:10:e3:ab:
18:35:0a:4c:dc:7f:9c:eb:a9:77:28:e5:ba:8c:b6:
7b:b4:bc:7b:bd:56:5a:ec:42:c5:ea:81:80:ee:5e:
44:68:27:f8:79:22:98:a7:69:e5:b1:90:eb:57:53:
de:fb:bc:8b:c3:a8:56:4d:13:93:3c:05:67:65:3a:
39:3b:d5:a2:be:9a:f3:78:b0:83:08:41:e8:88:ba:
b2:94:eb:8c:e3:7c:2f:7b:f9:6c:5a:55:0a:72:2e:
2d:e7:80:1e:b7:2d:2b:35:b5:7a:85:61:ab:63:de:
c1:78:1f:47:91:04:cb:f1:b6:9f:75:74:0c:8c:e0:
59:1f:74:41:38:fc:d7:89:65:ae:2d:c3:da:57:52:
4b:fd:f9:e3:bc:0b:a4:01:bc:bf:aa:57:6e:5c:62:
77:06:15:8e:8e:5b:48:66:6d:db:20:ca:15:55:78:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C1:62:9C:6D:28:51:C2:9D:60:23:4E:2F:C0:19:AA:71:AD:97:80
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:67:9f:bf:be:6d:8d:26:a3:5b:bc:65:f3:e0:dc:0c:e7:fb:
0c:e2:a2:ba:9f:14:af:1d:c0:4e:86:84:2a:95:39:f8:63:20:
82:17:17:6b:55:7c:54:ae:71:90:b3:89:99:ce:05:b8:81:bd:
af:36:29:22:3c:71:ec:db:29:28:e1:13:fe:8e:c0:d1:a3:11:
b1:a5:cc:cb:8a:40:40:c4:54:66:f9:60:4b:67:02:82:de:7a:
86:8a:81:26:b6:f6:3f:23:04:b7:95:e5:57:83:06:cd:bd:58:
4e:1e:b5:5f:c5:04:6c:47:17:62:29:69:79:3c:0a:45:4d:71:
f1:05:7f:40:ed:bc:56:57:35:dd:3e:67:76:bd:21:e3:f4:f8:
a8:89:28:0d:bb:14:1d:45:31:38:e5:3d:e3:e9:88:3c:a8:7c:
9c:1c:22:6d:84:c5:a2:27:22:8e:b9:e5:0f:e3:c0:37:6a:76:
6c:e8:f0:bb:ff:0d:c6:2a:34:6f:75:96:0d:4b:51:24:2a:34:
04:08:49:e2:eb:a6:d4:a9:53:bc:f3:8b:96:ab:59:f7:15:77:
bb:20:f2:e5:ce:80:8b:97:be:21:18:a5:aa:44:14:0d:80:46:
0a:dc:6f:ab:ca:86:50:0a:4f:96:83:7c:88:2b:15:9b:21:4b:
07:43:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:19 2025 by rpki-client