Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
File: SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft (raw, json)
Hash identifier: HM2ZyW1v+NFuYs/Mpp5tHd9pCeSqHG+1Jpr+Vp+R36E=
Subject key identifier: F3:4B:AF:29:5B:E8:5C:89:DC:EA:73:C3:38:8E:FC:01:FE:7B:C3:35
Authority key identifier: 48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
Certificate issuer: /CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Certificate serial: 0194BBCE9B932FA1C40EE10427729730A544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
Manifest number: 0DBA
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl (hash: EUwJ63t6rIBeb965hP+zy5Rd1f3ontr8Zwj/rqtZ1bU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9b:93:2f:a1:c4:0e:e1:04:27:72:97:30:a5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=f34baf295be85c89dcea73c3388efc01fe7bc335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:0e:49:3d:f2:71:50:8d:29:01:97:9a:d3:
60:73:8f:ec:ed:6d:2f:0e:00:bf:5e:44:d3:ea:1f:
71:56:a6:23:84:90:35:af:7a:7c:48:9f:8b:c7:5e:
a2:ac:61:7a:4a:df:04:c4:1a:02:dd:55:ed:be:92:
6b:22:14:24:88:b5:18:90:f1:bc:c2:e0:bb:bb:30:
5b:83:fb:2f:80:0c:5e:33:24:11:0d:42:d2:d5:30:
36:b6:fb:d0:61:70:d5:12:ef:ad:0f:dc:13:34:80:
98:29:8d:a9:9f:0d:78:63:d9:5f:14:4b:b8:80:1a:
85:61:cc:fc:6e:f4:c6:e8:3c:5c:ff:f1:b1:88:a7:
d4:18:12:fd:66:22:4f:85:81:11:55:bd:29:9f:39:
ff:c5:47:66:ab:9c:07:ee:ef:c4:f3:3a:a4:3a:15:
7f:96:7b:bf:d7:83:07:1a:2d:7e:e2:03:2f:fd:d0:
c3:c6:de:3e:d4:3e:da:dc:a4:5e:f9:ef:ae:38:22:
15:32:88:09:fa:0d:0e:60:ba:4e:cf:df:a2:8c:98:
95:30:41:8e:08:6b:51:83:d5:df:25:95:17:79:1a:
de:e3:b2:5f:b4:3c:7c:fe:28:e2:a5:fd:17:3b:f7:
d7:7b:c3:e3:ca:97:d2:c1:d0:ee:c2:6b:43:8e:2a:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4B:AF:29:5B:E8:5C:89:DC:EA:73:C3:38:8E:FC:01:FE:7B:C3:35
X509v3 Authority Key Identifier:
keyid:48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b0:c6:ba:5c:82:cd:be:23:c0:e8:f3:4e:7c:32:ef:2c:a6:
7d:09:ad:0a:e7:84:37:05:e5:fe:98:86:d1:26:79:ae:b4:e5:
ee:48:72:3a:d9:60:e5:a7:36:c4:15:b6:03:92:dc:12:b5:68:
ed:a5:6b:b1:28:d1:7b:86:f3:42:67:48:e1:46:d6:82:36:fa:
03:a0:93:c8:b7:98:5a:d2:0c:43:ea:de:24:90:d0:6b:03:b7:
02:b1:17:78:76:7b:fc:28:d6:44:94:02:2c:5c:8e:a8:fe:fd:
dc:db:02:af:79:00:c1:24:3e:6c:36:ec:5f:fd:30:a3:e0:51:
41:74:32:b9:1e:e4:1b:fe:0f:49:6d:bb:e0:82:69:39:c0:f4:
e7:49:58:f3:46:77:8e:05:80:2c:8d:29:61:4a:76:dd:9d:7c:
2c:e2:81:ab:c1:49:ad:9d:32:fe:d9:20:87:5b:7f:4e:01:9c:
62:b4:54:bc:e1:db:be:cd:fd:4f:79:92:18:3d:30:ab:ec:ec:
4b:a0:e3:32:37:73:10:c5:36:e3:53:31:d5:f2:12:0d:e9:76:
9a:e1:92:b1:74:eb:d1:d4:16:f3:7f:be:ff:06:72:b6:90:57:
10:81:97:d7:99:f2:ba:27:d9:9b:82:4a:a4:dc:7e:34:13:c4:
2c:c3:bc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:11 2025 by rpki-client