Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json)
Hash identifier: hVd+wQe+VzLlq9sh+EcTvoiLyLi7xjd4hW9O+qSf8qM=
Subject key identifier: 45:0F:0E:12:09:76:19:6D:FF:FF:78:A2:95:19:43:A0:38:0A:1B:70
Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Certificate serial: 0194BC3C5F967C4EF54A8E5CA8F5B630DED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: 4jvHzd8YkeQOXLLA0BftE7aZA/iSOw6JYCru/Uh45co=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5f:96:7c:4e:f5:4a:8e:5c:a8:f5:b6:30:de:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=450f0e120976196dffff78a2951943a0380a1b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:29:4d:ea:a4:f7:ab:a5:f9:51:44:22:0c:
4b:fa:cd:d9:52:08:6a:b3:b6:89:ad:b4:ba:00:76:
cc:d2:6c:eb:4f:50:f8:e2:21:05:f5:a4:c2:17:44:
18:8f:3e:e4:a6:b7:54:43:ab:8f:fc:64:29:49:ba:
da:d6:26:dc:fb:11:03:11:aa:dc:6a:34:fe:3e:f4:
a2:87:72:cc:bb:1c:ad:72:26:4f:2d:37:52:9f:6e:
ca:2c:c7:ee:d0:b6:86:82:45:94:1b:13:28:46:6e:
d0:4d:e0:b2:77:0e:8a:35:5f:66:38:47:73:f5:6d:
08:ff:f0:c3:14:7b:bb:ec:f8:5e:b6:39:35:0c:0e:
5b:a7:79:73:cd:0b:43:ef:1c:08:29:02:26:95:58:
fd:58:da:02:5e:7f:b6:73:50:ce:b3:c9:88:be:23:
aa:e2:81:01:7e:bd:25:1a:fa:5f:7e:df:ea:42:8f:
0e:e8:63:12:61:5c:58:d7:fb:5e:c0:7b:21:01:a2:
78:d7:a3:67:61:39:b0:0e:39:88:4b:05:f8:66:90:
82:5b:6e:53:04:22:3f:a6:40:da:c4:88:b4:e1:5e:
2e:1d:43:4f:05:89:3a:2e:9b:8a:3d:47:15:9d:98:
3c:29:86:3e:21:00:91:3a:5d:3b:c9:b1:54:ff:55:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0F:0E:12:09:76:19:6D:FF:FF:78:A2:95:19:43:A0:38:0A:1B:70
X509v3 Authority Key Identifier:
keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:57:d0:6f:85:17:4a:ad:62:81:47:10:2c:e7:ed:2d:3b:d2:
a9:60:4e:13:54:a4:51:7a:8a:4e:5f:f3:00:49:ec:d8:1e:6d:
07:a7:98:dc:a0:8b:65:b0:56:c2:ac:8a:08:54:03:b9:88:ff:
1e:51:18:ec:cf:28:ce:e6:e7:0c:2a:ba:ea:b4:6b:0d:9e:1b:
bb:9b:4c:ee:d8:01:8e:fd:1e:a9:b2:9c:4b:5d:4a:18:1b:99:
68:1a:6d:93:bb:ea:a3:72:08:a8:67:60:6a:f2:73:12:0d:2c:
d0:1d:00:cf:8b:a7:51:0d:86:25:90:ba:b9:91:01:62:c2:80:
0a:ce:3f:1e:d4:7d:28:3d:c8:18:12:50:40:f3:ec:60:79:da:
01:f8:5e:a3:b8:d1:57:8e:9c:d1:00:92:37:e5:c0:44:3f:67:
02:66:42:84:56:19:62:22:24:66:13:c3:96:25:34:51:ed:78:
b5:1a:22:ee:ff:be:12:4f:6c:32:5a:b3:c2:70:80:14:8b:2c:
df:01:9c:3e:24:47:aa:79:03:28:17:a2:9d:d7:08:1a:8e:db:
6b:10:2e:18:e9:cc:d4:b3:af:94:24:7e:a9:dc:be:c9:9e:e4:
f8:12:74:1b:88:26:9d:9b:51:23:1e:c5:bb:96:7d:4c:d9:6c:
51:03:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:34 2025 by rpki-client