Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier: qHDodptw/qpow6POzlkbi5DG5XwvxrZMQNRz/8rECv4=
Subject key identifier: 99:8B:E9:EF:CB:A2:8E:A5:35:47:D7:AC:C3:2C:DF:DD:54:E3:9A:B8
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial: 0194BD17AFF3823BD87FFAD2AA6BEC3AB53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number: 08E1
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: 6hDYkSH71wyT9PG/wM5tO0Ces+IMV+uVhcG/rJhrzRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:af:f3:82:3b:d8:7f:fa:d2:aa:6b:ec:3a:b5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=998be9efcba28ea53547d7acc32cdfdd54e39ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:76:b9:69:9f:9f:1e:e3:31:85:64:c9:c9:
0f:59:f7:36:f6:51:7d:3e:0f:53:c8:6e:bd:2d:7f:
2f:82:41:5e:e8:64:39:7a:01:e3:14:bd:19:5d:a6:
bb:8b:90:84:28:cf:54:a6:22:8f:33:72:55:14:e4:
2b:83:22:06:74:a4:0a:d6:6f:67:db:93:ce:12:73:
a0:ca:28:98:1c:3c:3b:85:a6:40:54:5f:76:93:03:
6c:65:a9:bc:b8:a0:ee:c5:29:f9:70:72:47:a5:d4:
df:db:b9:67:6d:db:1d:0e:9d:59:94:51:a9:a4:16:
8e:27:d6:91:32:17:3b:79:3c:fc:03:e9:be:19:52:
ef:83:a4:a0:50:55:7d:b4:6b:c8:ae:f5:fb:f5:cd:
3e:8a:ef:85:ac:76:b1:84:07:99:55:cc:25:53:b5:
ee:c0:07:11:f4:88:ae:ce:1b:86:95:5a:ea:8c:31:
e0:0e:9f:bc:04:65:16:b0:ee:cf:e5:cf:56:a4:90:
78:49:9b:42:04:74:45:67:f7:d7:eb:9c:b9:4b:b5:
db:73:be:75:17:d7:b9:97:ab:20:fe:2e:76:e5:67:
6e:dc:0b:34:c7:55:a7:24:51:00:7d:07:47:82:61:
c8:1b:0c:3f:cf:2a:c1:50:c3:d0:50:61:e0:bc:93:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8B:E9:EF:CB:A2:8E:A5:35:47:D7:AC:C3:2C:DF:DD:54:E3:9A:B8
X509v3 Authority Key Identifier:
keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:05:cd:53:36:9f:8a:ab:c9:1f:86:79:a9:4e:2d:ad:33:da:
6b:6a:ee:d9:62:e9:c2:ed:47:e0:a0:78:37:08:fa:cd:b1:d1:
75:e5:ef:a7:28:67:40:9c:43:18:d4:b1:82:8d:a5:1d:0d:cf:
11:ab:4d:44:26:7f:41:86:6b:d3:7b:57:37:44:d7:df:c9:f6:
2f:61:4b:95:c2:ec:b4:c8:19:1b:42:47:af:40:75:8a:bc:2d:
4f:25:a2:b7:03:37:a5:d7:50:48:c6:aa:fe:6d:97:cd:78:20:
bd:11:21:d1:2f:a2:83:79:0a:2b:11:aa:6d:50:76:09:0f:b2:
06:d8:f8:ea:a2:95:64:5d:b1:ed:14:ed:44:67:76:46:fa:9f:
0f:e9:8a:aa:64:b6:4a:62:db:6c:c6:29:a1:e1:d2:ed:c3:d4:
74:6c:5d:64:2f:9a:01:6b:66:ec:a4:d0:5b:fa:d7:e2:9f:b0:
78:de:d0:66:34:eb:49:6d:5b:0e:3c:74:59:b3:ec:a1:7a:42:
ba:83:f0:9c:76:db:3b:a2:3a:fd:e6:83:60:10:24:49:f6:e4:
61:60:84:49:54:b4:c4:08:c3:7d:9a:ac:76:7f:4c:fe:58:c7:
df:91:01:3f:a9:27:34:a7:be:60:fa:10:8e:9c:3c:96:b5:17:
3e:5e:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:45 2025 by rpki-client