Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
File: 582m42RtyToNLUKV0esJR2xmvKY.mft (raw, json)
Hash identifier: g6/bAak+0CiAR0U3ZEsTluv+gO2StbMGHZ9tRJIKHBc=
Subject key identifier: B0:2C:AD:86:66:1B:82:A7:D0:78:ED:19:09:44:29:CC:C0:46:BD:F7
Authority key identifier: E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
Certificate issuer: /CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Certificate serial: 0194BCA98C434B6D3CA0BB928F1D01DAC94A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
Manifest number: 0151
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: 582m42RtyToNLUKV0esJR2xmvKY.crl (hash: UI1X986ViJLJC4P8SW2tYaKOT6xxHiO0cR3L3zvnFqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8c:43:4b:6d:3c:a0:bb:92:8f:1d:01:da:c9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=b02cad86661b82a7d078ed19094429ccc046bdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:27:df:f8:44:fd:e7:a7:53:b7:10:5a:ed:
31:a1:4a:32:a2:91:25:e4:f2:08:83:26:2a:b5:d1:
1e:23:4d:27:48:12:11:66:e2:68:21:d7:eb:5f:60:
f4:92:3a:53:cf:d9:29:61:56:b0:4b:65:fb:f6:11:
ae:22:9e:f5:d3:ec:c6:19:13:46:b5:d9:a4:b7:ba:
ff:07:a3:7e:8e:d4:2b:00:27:bf:3b:2a:be:43:53:
0a:8f:65:a1:3c:62:5b:bc:64:19:6e:6c:79:74:6d:
7d:d5:ec:f2:8c:61:c7:c5:34:91:bf:a6:a8:b8:bd:
38:91:5e:e3:3d:49:79:cc:07:16:7b:c2:63:9f:9d:
24:c0:34:de:4a:be:33:26:7e:76:84:a6:6e:7a:8e:
16:88:9d:34:96:76:30:21:9a:75:24:bb:31:5b:a7:
b8:e1:7b:62:7b:e6:93:04:0b:b4:77:c3:56:5d:0f:
d9:a9:ca:73:30:87:1b:42:82:a1:96:9e:a2:95:87:
84:d4:30:ff:00:36:79:aa:21:33:26:3e:7a:d6:fe:
70:60:e5:0b:8e:de:d4:2c:de:cd:05:33:1a:8d:e7:
b3:c2:ce:f0:43:54:20:ad:4c:fb:89:f0:4b:ea:ad:
6c:d1:3b:72:25:31:0b:f9:b4:ef:be:7d:9d:ab:31:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:AD:86:66:1B:82:A7:D0:78:ED:19:09:44:29:CC:C0:46:BD:F7
X509v3 Authority Key Identifier:
keyid:E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:28:65:24:cf:93:c1:d1:e5:2e:1a:43:2f:bb:d5:ed:a2:28:
6f:1f:3b:6a:07:68:53:fe:d6:2d:8d:10:59:a8:19:19:a5:55:
6e:bd:64:36:f2:13:fd:64:45:ed:4b:b4:ed:b8:57:13:bf:e4:
f4:05:c5:29:93:ca:0a:56:9d:4f:ee:d9:d7:19:d7:06:1d:1e:
8a:62:07:22:4d:44:ff:81:51:47:4a:19:f7:07:a0:97:31:c5:
69:24:c6:58:c2:e2:34:dd:2c:c8:36:ac:49:a7:88:71:4d:1d:
a3:6a:3a:a2:df:ee:6d:2a:26:12:20:83:27:b7:73:05:c5:d2:
49:3b:fb:00:c9:94:74:71:d3:08:0c:e9:90:3f:33:2c:57:55:
64:bb:11:97:83:05:27:b2:b8:db:3b:86:17:8a:bf:bd:ca:f5:
d5:b8:8d:66:b1:51:8b:91:78:d1:26:d1:4a:b9:f1:9d:f5:cf:
dc:5a:48:c7:15:b0:06:cf:b6:b7:27:fb:68:61:75:e3:f9:9f:
66:dd:c1:04:53:93:e9:ec:b2:2c:8a:a5:8a:9a:7e:17:9f:93:
28:95:aa:b7:f5:52:57:3d:82:08:52:d3:32:1f:2f:62:31:38:
27:48:26:77:61:c5:91:bc:5e:e2:9a:c5:5a:91:98:65:dc:ab:
2f:49:57:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:39 2025 by rpki-client