Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: qD7oqO0hdfoYZbFgsTn9Ti6HwGUTFc8vwXwzLXnyaCU=
Subject key identifier: A6:71:DF:E3:B5:8D:28:B8:07:01:55:E6:DA:BD:AA:2B:42:FA:2E:C1
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 0194BBCDC4240AA3C165A5A24096EFCF1AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 0836
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: vJtB7PlIkbW0cD1No/Bt6H8rlwr9xovs9m5dCUgpQ0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c4:24:0a:a3:c1:65:a5:a2:40:96:ef:cf:1a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=a671dfe3b58d28b8070155e6dabdaa2b42fa2ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:fd:a7:4c:84:5c:8a:4c:1e:2b:09:98:9d:
c6:25:7f:87:76:f8:b0:40:43:2e:95:4a:12:38:90:
6f:fd:12:a4:c5:f0:4c:01:23:43:37:84:16:01:18:
19:4a:2c:88:02:9f:de:e0:5a:61:ac:12:9d:b7:74:
e2:f2:7a:29:d5:e9:e3:ef:ac:ed:bc:5e:38:86:b6:
24:12:55:c8:f0:ec:3a:eb:c7:40:f6:00:d8:c5:07:
90:87:22:12:db:a9:08:2e:ec:ca:57:fd:f4:ad:35:
ab:ad:50:5a:c1:dc:a2:b2:04:f4:65:e5:a6:e6:e1:
e0:da:6e:4e:46:4c:39:06:70:88:d1:14:3f:bd:77:
db:e1:ab:1b:9f:08:c6:db:77:5b:04:ef:18:4a:28:
fe:bd:74:bf:05:44:99:1f:35:06:ec:a2:ef:e8:1f:
14:92:2c:ce:56:8d:68:96:06:59:dd:16:7a:37:58:
1c:3b:f7:59:73:02:99:2b:cd:e9:da:e9:28:16:eb:
ef:a5:06:b2:b1:1e:b6:94:bd:65:86:cb:d4:05:e9:
72:99:94:b6:cc:bf:dc:ea:b1:d2:13:da:1f:64:9b:
7c:b7:64:a6:73:8c:64:70:fb:54:ae:b1:5e:df:1f:
41:6d:ee:4f:fc:94:f5:46:4f:80:6e:07:07:53:b5:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:71:DF:E3:B5:8D:28:B8:07:01:55:E6:DA:BD:AA:2B:42:FA:2E:C1
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:16:c5:40:3a:12:85:e5:57:bf:90:e5:14:1f:20:9d:a8:bf:
26:53:3b:33:20:50:ad:b9:e0:55:cb:65:ac:43:72:34:55:f5:
cf:06:2c:39:50:c9:ff:bd:9f:d1:22:55:36:d4:84:f4:7b:85:
8e:f1:67:52:57:b5:8d:54:c1:d3:81:8d:d1:bd:e7:b5:78:b0:
51:49:71:48:f1:e6:83:aa:5a:39:98:92:8d:ee:98:a5:cb:b1:
39:2e:7d:3c:32:fe:bc:54:9f:d1:05:dd:35:45:5a:40:38:1d:
38:a3:5b:cc:8a:19:0c:4f:87:ff:95:b7:62:c3:22:a8:73:cb:
6b:6c:16:85:d4:39:0d:d4:83:eb:ca:f9:b0:10:ee:48:ef:da:
d3:b5:db:f8:6f:67:6a:7a:c8:68:c0:9f:d8:02:0b:76:54:1c:
fc:10:7c:7e:8c:4f:c4:a2:b0:50:63:d8:f3:38:7f:ed:2c:ac:
bc:b5:b8:ed:f0:10:a1:9d:5a:1e:10:b9:44:67:93:bb:33:19:
3a:5b:fe:4c:2d:21:0c:49:8b:23:1f:52:ea:99:f6:e1:db:97:
2a:36:b6:ca:2e:68:99:29:bd:17:91:14:ea:31:16:8e:b3:14:
f0:1a:4d:9b:9c:18:bd:3e:18:10:f2:77:29:fc:80:78:95:a5:
4c:f1:21:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:25 2025 by rpki-client