Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
File: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft (raw, json)
Hash identifier: m4bbGsIJSZgikw2ZgHactv1XAUgOXkM9E0Y2lfKd8+w=
Subject key identifier: 95:D9:F0:65:BB:EF:9F:9B:4C:CE:9E:E8:CE:1D:6A:66:A1:B4:40:14
Authority key identifier: D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
Certificate issuer: /CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Certificate serial: 0194BC3C0ED88B1752391ACD59AEB447C7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
Manifest number: 0AD4
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl (hash: xgqzpy0TqyLu/OoK5LYMOOeR0xSMPzfLnwWRlBtmuBA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0e:d8:8b:17:52:39:1a:cd:59:ae:b4:47:c7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=95d9f065bbef9f9b4cce9ee8ce1d6a66a1b44014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:b3:3c:6f:f4:ec:76:c0:52:1a:09:fc:b9:
93:a2:5b:d8:76:80:48:07:29:25:cf:36:49:8b:72:
15:8b:85:9c:92:00:1f:7b:ce:d6:6e:76:2d:d5:3e:
56:c7:9d:97:57:da:d8:6c:92:a1:96:22:86:7a:c7:
bb:ec:23:db:6f:bc:73:15:ac:2c:c8:b4:e0:4b:02:
b1:53:be:e6:ca:00:74:3b:ba:bc:77:04:38:9e:68:
4d:e6:6d:2d:a7:39:da:48:d3:06:7f:67:f3:5a:fc:
81:e3:04:1f:8a:d4:f1:d9:a7:21:ad:20:00:fd:74:
31:ce:20:56:d2:10:0c:d0:26:4b:2e:ee:d9:0a:2c:
4d:97:b0:67:cb:03:47:26:0f:ad:0b:ca:70:c7:a5:
a2:ef:d9:cb:da:1a:1a:e2:05:71:16:3e:f6:38:e8:
24:09:ae:b6:93:b8:38:81:2e:62:b0:21:d5:17:2c:
f9:69:98:98:94:01:7f:12:b9:ea:40:df:b2:54:88:
9f:2f:98:dd:3f:38:5d:7b:ed:d4:69:65:9f:f5:a6:
b4:79:55:42:53:bb:fe:8e:7f:c6:76:ec:8c:38:d1:
72:57:b8:cf:32:3a:01:ea:eb:56:87:80:98:a2:77:
f6:ae:87:7c:77:3b:e9:20:7c:ec:b9:d5:ab:ee:48:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D9:F0:65:BB:EF:9F:9B:4C:CE:9E:E8:CE:1D:6A:66:A1:B4:40:14
X509v3 Authority Key Identifier:
keyid:D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:dc:36:15:6f:35:14:ed:ca:61:2e:b4:41:81:3c:e2:e4:25:
97:f3:73:c8:4a:d2:99:18:78:ae:4a:ab:be:f7:a6:64:81:d5:
b9:cd:bb:86:be:b3:67:c6:b4:9a:4c:7f:01:45:88:d8:d2:83:
01:4a:10:5b:ea:a2:f2:bb:91:a2:95:4d:49:61:ed:b7:ef:59:
d3:fe:bf:b5:dc:da:d3:b5:1f:f2:5b:d1:99:17:86:75:4d:52:
eb:d6:a2:6a:88:1a:55:c1:03:7d:b3:06:b5:a3:7e:64:8d:7e:
cd:f2:b5:4e:25:f7:a2:cb:a4:2f:18:60:97:c5:eb:03:26:6e:
2a:ca:3b:e3:08:20:56:5f:87:6f:11:f8:8b:76:fa:10:c7:51:
39:85:c3:9c:73:06:69:98:92:7f:ce:ef:f9:e5:4f:94:1a:16:
69:fc:a5:66:b4:aa:ae:ed:10:5e:b0:55:eb:c8:63:4b:db:85:
b6:ed:3d:3e:ef:31:74:2b:4b:4b:6e:15:03:f2:42:99:7e:36:
07:50:d6:79:1c:27:e8:78:45:d0:c3:ff:c0:1d:c9:27:15:1a:
61:7d:53:11:a0:ec:40:b1:87:40:f0:51:50:1e:cb:b8:1e:59:
25:de:c1:94:b2:51:70:f9:4f:85:60:a7:0d:65:62:6f:72:13:
7e:25:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:13 2025 by rpki-client