Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: wsR9l9NkaTS3oV5IXvuKBmWqEndI1fIDV38nA5DljUc=
Subject key identifier: FA:B4:29:3E:6F:D3:2F:A8:4E:D6:9F:EE:07:33:8D:83:6C:88:4A:EA
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 0194BBCED0B133EAEF9264BFB08F4A560EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 0CFD
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: 5i/N+UwQElcf2t+WvZsw/ZtbqraF2scCodOy6emsoQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d0:b1:33:ea:ef:92:64:bf:b0:8f:4a:56:0e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=fab4293e6fd32fa84ed69fee07338d836c884aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:1f:18:c5:0b:17:be:69:b6:2d:b4:a8:d7:
97:29:1d:ca:c0:d3:be:fe:de:ae:dd:01:58:8d:65:
41:c3:e7:e4:56:bb:02:be:00:8b:da:0f:ab:5a:71:
aa:5b:99:83:ab:52:db:ee:b8:41:3a:4e:96:fc:73:
69:d2:9f:7c:48:d9:31:a7:f2:11:57:5a:70:b8:8c:
70:fe:f2:c8:5c:da:53:05:d9:76:ee:c6:52:ad:e1:
3e:a3:f6:8f:fe:48:92:d8:d4:61:28:37:a0:0b:8e:
e4:a5:6b:29:06:89:06:06:05:3f:53:d9:39:6b:cf:
88:1a:5e:8d:92:db:92:2b:60:66:fc:5b:c6:c5:3b:
e0:73:ff:e8:e0:dc:a4:11:ec:11:ba:73:8d:ca:cd:
79:30:8a:62:27:c3:e7:e2:b9:f7:38:42:62:1d:ef:
5f:fa:41:b6:71:67:1f:64:15:fd:d8:c3:34:57:7b:
3e:f2:86:37:e0:01:a2:01:ee:86:d5:3b:5a:bc:a0:
c1:0b:96:87:3b:96:e0:0e:d5:7a:a4:9d:e5:f0:50:
58:e2:ef:58:01:05:85:13:a3:a1:c8:a7:57:34:56:
3a:8e:f8:cd:3d:43:ef:0c:ea:8d:f8:be:87:7b:29:
b1:24:0b:0a:93:32:2c:ef:34:26:06:1d:f4:39:b4:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B4:29:3E:6F:D3:2F:A8:4E:D6:9F:EE:07:33:8D:83:6C:88:4A:EA
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e9:b9:96:9c:97:18:3d:4a:f5:79:98:0e:5b:3e:5e:69:c0:
b7:9a:57:e6:1a:4a:04:d6:a6:77:1f:4c:77:40:52:e1:56:22:
34:87:84:27:65:96:e2:57:80:22:4e:0a:74:b3:7a:42:ea:bd:
1c:64:e0:01:a1:76:89:e0:db:4a:de:c0:42:e2:df:dc:2d:92:
02:9f:14:2b:4e:92:15:9f:79:ac:e5:19:70:12:ae:dc:07:8c:
51:a7:29:26:3c:b6:a2:50:6a:3a:12:05:18:5d:d9:8e:16:fa:
22:0c:cc:b1:e2:96:70:2b:1a:2e:e6:76:5b:b4:cb:18:50:b1:
99:46:e6:58:72:3b:84:98:24:dc:40:04:90:26:e7:68:8f:7d:
69:e1:11:94:b3:34:fc:4f:61:aa:be:82:ab:28:b0:c0:ff:b4:
4a:c8:4f:6e:33:3a:72:0d:fe:24:60:22:50:25:64:84:e8:e3:
d1:72:89:b4:72:5e:1c:3b:76:33:d3:8c:04:4f:d0:7e:9c:2b:
54:f2:13:37:85:2f:29:97:6f:11:5b:0f:c0:c0:04:a5:6f:81:
5d:db:29:ce:65:90:f5:df:f8:34:0e:ea:a2:b9:ed:2e:cc:0c:
e2:a5:5b:b9:af:48:43:aa:34:d5:45:60:66:64:7c:d4:a5:7b:
a8:cd:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:21 2025 by rpki-client