Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
File: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft (raw, json)
Hash identifier: 3CLs3xhjvZnZI6SIKFBi2hPLeR9hhbeuBFiRggn9U28=
Subject key identifier: 4A:8B:2C:CC:B9:7D:40:66:F6:CD:0A:46:10:1B:A9:CF:BD:19:70:5C
Authority key identifier: AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
Certificate issuer: /CN=af1bc3295ac305f85960e0401b00f487a94ab394
Certificate serial: 0194BCAA0D5F5A68FC3625D6E9F3E6133AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
Manifest number: 1045
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl (hash: SkCLtBPV61G4JGa4ICqmsd3SkAzoUjp/XzEVhm9ghfc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0d:5f:5a:68:fc:36:25:d6:e9:f3:e6:13:3a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1bc3295ac305f85960e0401b00f487a94ab394
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=4a8b2cccb97d4066f6cd0a46101ba9cfbd19705c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ff:ee:95:3c:59:94:6f:c1:ed:3b:bb:f5:02:
2b:16:52:54:fa:64:3f:56:ab:65:ad:62:f2:e4:e2:
39:25:ed:eb:45:3f:e0:e2:13:87:a3:c5:19:a4:0b:
ca:65:52:77:6a:ab:c4:a8:7c:c1:79:b7:b1:3d:97:
80:d6:a2:71:dc:22:6a:49:86:ab:bd:6d:c0:fa:3c:
ca:d5:c7:96:65:a3:a4:98:8a:30:0e:25:b1:ed:42:
22:48:ed:d7:b2:ba:12:2f:ec:83:a3:3d:02:5e:c7:
91:f5:b6:17:7c:52:59:aa:ba:37:7d:2e:c9:7e:01:
e9:75:16:e4:e5:b9:cf:26:79:77:c7:75:d6:81:d5:
d0:9c:63:34:dd:4f:c1:a8:46:28:f7:b1:9a:20:29:
17:fd:5d:3c:b6:0b:e7:f3:df:f8:af:fc:d7:53:ca:
a9:d9:57:6b:60:91:8b:af:41:d1:65:0b:2e:46:0a:
a5:9c:e6:fa:67:0a:e1:47:8a:ca:79:54:25:a3:f7:
21:73:9d:d5:a2:cf:88:eb:6d:b3:4a:bb:0b:5d:1e:
fd:4a:ae:63:0d:68:f2:c1:47:16:a7:bd:73:20:3f:
76:67:9b:28:a9:65:20:7f:57:ed:29:3e:07:9f:d2:
81:60:3e:54:f2:13:3f:99:0d:21:19:e7:c2:23:88:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8B:2C:CC:B9:7D:40:66:F6:CD:0A:46:10:1B:A9:CF:BD:19:70:5C
X509v3 Authority Key Identifier:
keyid:AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3d:47:76:84:15:60:f3:02:20:ef:f3:57:a8:d0:5d:b7:34:
e5:92:f1:61:8f:e1:b1:9c:1f:14:27:70:0f:0a:0a:f1:b7:0e:
f4:28:06:4c:53:89:29:64:2e:87:5b:98:72:b6:ce:fe:ed:1f:
c3:27:4f:f2:37:5a:49:2f:3a:22:d3:5e:cd:a1:b9:ab:0e:6d:
7a:13:54:c2:05:63:87:cc:6c:a5:17:44:76:9e:81:44:1a:e1:
41:27:2d:3e:34:ae:5c:99:76:a9:0b:70:93:c2:3e:a8:74:de:
58:5d:4d:0a:f5:b9:a0:fa:1c:4a:18:8d:78:b1:ba:5c:a0:99:
11:c0:32:31:9b:59:77:d8:0e:61:d1:da:48:61:8f:e0:65:8c:
4a:bd:3e:c3:c2:4b:2b:e7:72:aa:e9:30:35:4b:65:c8:fb:da:
9f:88:c0:31:c2:d5:37:f6:f5:6e:b9:28:5f:a2:d8:a0:92:8c:
ca:5f:19:de:1a:37:6f:51:8c:cb:b7:d5:82:9d:97:8c:6d:a9:
a6:3b:80:0b:0d:ae:22:51:d9:0c:7c:6a:2a:70:14:e2:6a:3d:
e3:4c:d5:00:4d:5d:e5:b9:34:6c:53:ea:d3:ba:d8:80:63:ea:
31:3c:86:13:36:95:0e:af:10:d1:2a:10:c2:30:8f:f0:76:3f:
af:f1:b9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:03 2025 by rpki-client