Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
File: savnP_2tb4YrC92JTUQyfCyUp9U.mft (raw, json)
Hash identifier: HkmaFk2ftfHaQdP7HXR/olgJebDXnkfP5yAvrsvtpoY=
Subject key identifier: 5C:A2:02:11:F4:63:B8:31:E4:AA:28:3B:5E:E8:1F:B4:98:FE:F3:77
Authority key identifier: B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
Certificate issuer: /CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Certificate serial: 0194BD4EB6CAD0026CE572F1B1B931030082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
Manifest number: 0201
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: savnP_2tb4YrC92JTUQyfCyUp9U.crl (hash: +7fhqLeQOG3/QUaCw2VrBRH6TMg5DECYDx7GVPFjYYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b6:ca:d0:02:6c:e5:72:f1:b1:b9:31:03:00:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=5ca20211f463b831e4aa283b5ee81fb498fef377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:e2:83:f9:e0:3c:66:58:67:12:0f:c0:95:
7f:d9:8e:0b:4d:74:11:e7:57:f1:9c:94:5c:0f:f6:
96:08:ac:ed:2c:4d:52:8f:df:60:9f:e2:42:d0:08:
43:95:61:8c:08:dd:52:2c:22:f9:51:6e:dd:d4:f0:
1e:46:76:71:e1:c7:7f:5b:74:e4:5c:87:7b:87:c3:
15:7d:4e:5b:4e:cc:86:89:c3:e7:3b:18:ee:a7:9a:
07:f1:24:30:e7:e4:89:2f:35:c7:2c:f5:88:ab:d0:
dc:60:49:40:9d:dc:4d:6c:f3:cf:56:b3:a4:48:b5:
23:f4:ed:aa:60:68:ed:16:be:79:ee:fb:25:a5:b1:
80:a4:41:fa:56:b3:cf:15:3f:37:1b:81:72:95:3f:
5b:e2:42:a1:85:e3:37:f3:bc:70:e2:f5:61:35:cd:
8e:bf:78:df:f0:ba:12:7c:c8:49:7a:2e:f7:d2:7c:
22:c3:9c:3d:df:86:41:b2:3d:aa:6a:4f:70:ac:49:
d2:a7:4e:f6:93:9d:41:c8:9e:33:fb:46:77:c5:92:
4a:f7:80:c3:f6:10:2f:26:b1:20:a9:a6:0f:15:cd:
72:c4:38:e1:5f:a0:d3:55:a8:18:6f:8c:07:71:6b:
47:14:9f:f4:93:d5:51:7e:37:61:7b:6f:e5:00:81:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A2:02:11:F4:63:B8:31:E4:AA:28:3B:5E:E8:1F:B4:98:FE:F3:77
X509v3 Authority Key Identifier:
keyid:B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:10:80:eb:13:54:9f:c5:a3:d0:da:d5:d7:d7:06:2d:a4:52:
15:b9:d9:db:c9:e9:2b:7d:72:14:25:3c:44:24:64:19:92:e4:
c5:c1:4c:6b:17:cb:11:cb:8c:91:3d:a0:89:2e:69:47:ae:f2:
b0:3d:26:f3:e1:d5:88:fe:54:c6:62:a4:8c:9a:6c:13:da:95:
64:ba:1d:9b:a7:74:31:55:b5:c7:ef:f6:2d:53:cf:f8:a2:1e:
54:fa:07:b5:e4:f9:8a:d2:1c:69:6e:8b:d2:29:7a:e9:cc:2b:
1e:22:8c:d8:a6:19:32:f2:d3:1c:53:26:07:2d:6f:65:2b:1d:
2d:3d:d4:05:50:8a:41:ee:4d:a3:76:18:80:79:c4:c4:6b:f2:
f3:5f:96:7e:23:2d:86:08:1b:2f:59:84:65:44:de:20:4a:91:
21:88:6d:9f:ce:18:d1:e0:2a:90:e3:53:ce:58:ce:71:c5:f3:
42:f8:9f:00:6d:3c:ef:84:ac:f1:90:10:90:f7:2c:0a:d1:1a:
88:a1:c0:d3:cd:af:b3:73:99:33:9c:ac:50:fc:e5:d2:f1:e7:
e6:f3:c3:72:ad:fe:6d:f2:2f:b2:85:66:c5:bc:6c:ed:6b:bc:
05:a9:87:19:65:cb:2f:96:dc:70:d0:ef:01:a8:84:fd:c8:68:
0c:ee:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:47 2025 by rpki-client