Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
File: M1lkDZyLY0Pghqr4vosw6MMdK40.mft (raw, json)
Hash identifier: JXsjTSQlwSEMCD5yE9C0l+iDIGomYsxt9Aa/ZkgyMEg=
Subject key identifier: 5B:69:67:72:2C:C2:14:7A:8B:5A:63:CA:95:04:40:69:50:D0:84:E3
Authority key identifier: 33:59:64:0D:9C:8B:63:43:E0:86:AA:F8:BE:8B:30:E8:C3:1D:2B:8D
Certificate issuer: /CN=3359640d9c8b6343e086aaf8be8b30e8c31d2b8d
Certificate serial: 0194BBCDBFC91AF708A16738E1C87615C3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
Manifest number: 01B1
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: M1lkDZyLY0Pghqr4vosw6MMdK40.crl (hash: Bmd9qz/40gcmFc4JXnxg+aAt6ZQrr7GRwbQrGD9EHcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bf:c9:1a:f7:08:a1:67:38:e1:c8:76:15:c3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3359640d9c8b6343e086aaf8be8b30e8c31d2b8d
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=5b6967722cc2147a8b5a63ca9504406950d084e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:4a:b6:7c:ae:37:15:e3:93:37:3a:37:3b:
64:06:d7:b5:2c:a6:4c:f8:de:d9:60:8b:7c:f6:a6:
8b:19:ce:37:b6:f4:5a:a7:86:77:73:51:51:78:f8:
c0:8c:2c:66:9b:f9:cd:1e:75:66:b8:8b:68:01:a0:
9d:3f:b9:ef:61:04:9b:d7:94:59:8c:e7:76:e2:f0:
c8:fa:67:a1:03:38:89:6d:81:37:e7:cc:b4:45:90:
e1:e7:aa:98:45:29:94:00:d1:97:54:3a:72:d6:f5:
49:ad:4f:e3:3d:df:ce:26:fa:8c:2c:49:1e:dc:ba:
e9:5c:e8:22:68:1c:b0:4b:5b:d3:43:5f:8f:1b:6b:
c1:5a:14:85:8e:a8:b2:d9:08:25:51:4e:67:50:98:
e4:0d:e8:e5:8d:7b:45:67:ba:e6:0f:dc:43:62:68:
fe:34:d5:23:a4:ac:46:8a:6c:07:9f:9d:87:06:aa:
85:cf:28:33:ce:03:6c:7e:9c:b3:16:4d:73:70:de:
c1:15:36:d1:0c:1a:f0:3c:c8:ce:26:c3:ac:4b:a7:
ff:ee:7f:f3:9d:1b:48:d8:a2:e5:73:1f:6f:e7:b7:
af:fd:bf:64:f1:8e:21:56:ec:19:a5:72:c6:fa:c2:
77:16:49:57:14:a2:c3:6a:05:2d:7e:4f:f0:cf:a6:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:69:67:72:2C:C2:14:7A:8B:5A:63:CA:95:04:40:69:50:D0:84:E3
X509v3 Authority Key Identifier:
keyid:33:59:64:0D:9C:8B:63:43:E0:86:AA:F8:BE:8B:30:E8:C3:1D:2B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c4:47:7b:6a:ce:4e:a9:8a:f7:1f:79:a9:55:38:37:38:e6:
e5:2e:28:07:ec:1d:8e:d0:b6:31:f6:d5:ce:96:b9:60:ac:99:
55:2d:01:d1:a6:e1:da:67:01:5e:05:08:01:8c:2d:ae:3c:61:
a7:eb:c9:16:a1:22:da:aa:bb:67:08:b4:3b:a7:52:41:fa:dd:
f2:28:c9:1c:55:b6:1f:ec:a4:ce:61:f9:f9:92:b4:b1:a8:dc:
d5:31:29:a4:82:d2:8d:86:88:8b:3e:29:20:7a:73:05:7b:90:
5e:b3:1b:55:b1:32:58:3a:53:dd:56:6b:2a:99:e7:2a:8a:f4:
a5:3c:69:fa:1c:9a:0f:a6:b0:86:12:86:6a:d7:d6:fd:20:ad:
ff:98:88:ca:71:e1:2e:e5:5c:77:bd:36:ce:a3:bf:43:24:ea:
61:2a:a0:17:34:b4:8c:17:75:42:de:cf:ee:54:ca:ad:cf:39:
5e:fe:79:e3:af:ff:1c:0c:d2:17:76:61:4f:cd:67:fa:26:e1:
14:00:65:f6:b3:93:d7:bf:78:ba:79:c3:b7:4e:19:b1:50:ca:
ac:7f:e4:9d:05:7e:40:02:e6:65:56:67:93:09:33:6c:68:72:
9a:da:f7:66:8b:2a:95:88:d9:01:4f:cc:48:43:72:72:39:7a:
f0:1e:c7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:49 2025 by rpki-client