Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
File: rl81puj7U5sZVMtDps516X-q4XU.mft (raw, json)
Hash identifier: E21lsLdBGkA7Ld8DOnPWjM26hm0FA/y24O/nptj5lbQ=
Subject key identifier: 06:94:4B:B3:29:0A:AE:65:AF:46:7F:47:44:45:F6:B4:D0:94:7A:D0
Authority key identifier: AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
Certificate issuer: /CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Certificate serial: 0194BBCEE1AE050ABC19B3B97B73F266DA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
Manifest number: 0821
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: rl81puj7U5sZVMtDps516X-q4XU.crl (hash: w/pvc9klOdaC9R3AlLQUSc3B+SvDi7B2pDW9C++aLiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e1:ae:05:0a:bc:19:b3:b9:7b:73:f2:66:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=06944bb3290aae65af467f474445f6b4d0947ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:5c:85:95:43:36:3c:5b:e9:8d:d9:ec:bb:
f4:b3:2d:59:d2:4a:a8:7b:c6:2d:e0:b3:70:93:12:
ea:57:3e:6b:b8:5b:66:39:2f:77:a6:aa:00:ed:aa:
77:bf:36:72:82:23:04:b6:c8:86:27:3a:6e:36:75:
8c:18:70:e0:90:43:f6:3b:04:68:7d:72:6d:42:89:
04:30:ed:46:b4:b3:30:1b:30:8d:17:80:06:39:f8:
b0:3f:d4:be:f1:58:a6:12:9d:45:8a:2d:86:f5:51:
95:75:d9:57:01:59:82:62:1f:46:59:1f:9d:a3:d7:
ca:98:d3:68:77:ef:f3:08:9b:2e:6a:42:2d:71:60:
b2:91:f8:03:45:ae:08:f1:4d:69:64:52:e7:49:08:
65:5a:b5:1a:8f:7f:27:4e:3c:cd:d6:18:11:4f:5f:
bf:84:14:b8:8e:8a:65:7e:f8:55:3a:17:66:b5:6b:
76:43:79:88:70:eb:f6:a1:4f:92:51:92:ea:7b:d6:
74:91:04:aa:c5:38:3d:12:ec:fc:1e:5f:d3:b5:6c:
60:4a:30:1b:de:a0:4d:0f:a9:c0:1a:cd:63:5e:75:
69:d0:e3:b4:e6:45:83:1f:99:36:c2:2a:59:6b:4a:
45:7d:ce:8a:2a:d6:96:41:76:22:8d:e9:fe:d0:fc:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:94:4B:B3:29:0A:AE:65:AF:46:7F:47:44:45:F6:B4:D0:94:7A:D0
X509v3 Authority Key Identifier:
keyid:AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:85:5b:2b:ec:c3:cc:b5:6d:5e:9b:b6:3f:c7:ba:11:51:e1:
f7:a7:f6:1b:f2:2f:b9:4d:d8:86:c4:95:21:09:26:9b:03:b4:
e0:1b:a1:df:ca:e9:f5:2c:db:9a:12:8e:e0:c4:11:77:3d:de:
ea:2e:4f:c1:b7:b8:0e:94:fc:a6:89:b1:aa:01:fd:47:45:c1:
68:af:5e:6d:19:6d:66:e2:3b:08:95:a2:85:d8:2d:ee:ea:10:
d8:2a:1d:41:72:51:9a:08:5e:e3:a1:a4:17:dc:5d:54:f4:8f:
aa:0d:04:35:86:7a:c3:8a:9e:45:51:b0:6f:ee:b6:d3:51:b1:
d0:89:00:91:c6:5a:70:33:02:d2:05:ef:78:da:ba:98:b0:3d:
c5:0f:68:ae:5c:aa:37:be:3d:d8:30:1b:56:15:30:17:ed:8e:
22:e8:1c:60:ea:77:06:b3:32:92:da:a0:e0:57:41:5b:71:77:
2a:94:a2:d7:e1:ef:b6:a2:14:24:ba:42:32:d0:6a:9b:60:fb:
3f:84:32:42:63:14:1a:0c:60:fc:12:d5:a1:69:68:1f:4a:03:
9c:5f:6d:fb:0f:db:64:18:2f:0c:ed:9f:a0:dd:ce:98:72:ae:
67:91:61:5e:da:64:30:42:73:d7:2d:d5:f6:0b:1f:43:04:47:
30:0d:fb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:27 2025 by rpki-client