Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
File: rKbqw5z6mj664iKLy9RXaD5Swgo.mft (raw, json)
Hash identifier: nipoMHXK0qq8S/sGEN0U7qORvLUc1V1xxYrgoA7wHNI=
Subject key identifier: 56:8C:D0:18:BF:04:4E:B7:A7:C4:A1:6B:3F:64:8D:43:EA:61:13:CC
Authority key identifier: AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
Certificate issuer: /CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Certificate serial: 0194BBCEBC4A3EA2984BD640D8D30A34A237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: rKbqw5z6mj664iKLy9RXaD5Swgo.crl (hash: SjtmjkTorHteKRfEStgZ+KHnDEfodsx5tL8QfSYG5ms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bc:4a:3e:a2:98:4b:d6:40:d8:d3:0a:34:a2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=568cd018bf044eb7a7c4a16b3f648d43ea6113cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:b7:47:cb:47:dd:2d:a7:6a:5c:e3:62:17:
e8:00:dc:36:cd:f6:d7:4e:59:3b:13:44:a1:09:dd:
fc:a1:c2:c4:3e:93:01:ba:52:c3:e4:b4:1c:e6:87:
0c:cf:79:ed:58:b9:f3:6b:77:0b:a0:47:b9:88:50:
a5:22:30:6a:e8:f9:f3:de:4a:90:c9:49:70:44:97:
41:70:7b:95:a0:a2:f0:8f:8d:5e:3b:cf:64:4a:3a:
9a:90:38:89:bb:f8:72:d7:f3:c9:ea:92:fd:96:88:
29:89:08:a4:26:a0:40:1b:d6:a1:55:35:da:3c:7c:
58:4e:06:a5:6f:2e:06:7b:29:c9:9e:45:d5:40:dd:
89:d2:8a:2d:d9:cd:78:97:d3:63:83:6c:e1:5b:f1:
cb:92:ce:05:1d:07:86:49:68:02:de:08:69:b1:67:
d3:60:9c:43:41:fd:90:f2:32:ba:eb:12:b0:27:8e:
ed:36:44:5b:a3:7a:3c:28:14:a7:00:26:fb:7f:d5:
e6:e6:58:33:f4:18:70:bd:2e:9f:7d:d7:d7:c2:f3:
43:05:cd:25:64:a4:65:30:b7:26:5f:41:84:13:be:
07:2a:93:f9:8c:4c:21:cd:bd:d5:d0:74:b2:2d:3a:
aa:17:48:31:d0:84:77:1d:fb:34:c2:b4:00:ed:e3:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8C:D0:18:BF:04:4E:B7:A7:C4:A1:6B:3F:64:8D:43:EA:61:13:CC
X509v3 Authority Key Identifier:
keyid:AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:41:a5:88:d3:a4:6f:90:87:30:b0:c3:00:d6:17:97:8b:21:
c9:a9:19:a9:59:14:d3:90:8b:92:3f:f8:07:77:c7:89:51:11:
8d:d2:b1:8f:c1:2d:65:6c:80:79:c7:cb:30:75:d9:39:7b:4a:
41:00:e7:aa:fb:c1:b3:59:fc:3b:d1:92:95:6d:96:0a:72:3c:
8d:c6:8b:a8:d2:e4:c7:fe:e6:34:b4:0d:5d:f5:e5:ef:57:72:
e4:4f:1c:cd:0a:8e:c1:15:f1:dd:5a:f1:98:4c:85:b3:83:90:
d7:4a:13:5d:82:88:12:2a:35:84:f4:87:32:89:5f:87:d4:0f:
8d:43:26:6f:37:c5:46:a0:62:33:f0:b6:38:f5:91:87:f4:44:
22:b8:f0:5f:45:4d:f7:78:c3:bd:9b:ed:91:47:fd:44:f2:9e:
48:c4:7d:c3:9b:36:18:41:ae:45:6f:85:ed:de:dd:4d:63:56:
3a:10:10:f6:f9:56:13:27:a0:d3:e8:0b:ec:ec:83:ac:64:6c:
bd:b3:2f:fd:2a:01:a7:69:b8:25:e9:b7:0d:41:c1:a3:d8:74:
d5:c2:c1:02:36:ca:71:46:b5:9c:2e:1f:c2:02:22:02:3d:50:
64:a6:a6:c6:fc:f5:52:bb:fd:79:59:08:22:75:b2:4d:9f:91:
3b:39:72:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:25 2025 by rpki-client