Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
File: rKcX8QfgYizkyz71KwFU-n-baS0.mft (raw, json)
Hash identifier: fr540oRRJSM9zUpKNLcJhtKaeKCnAOO0ahQl7WmZPVk=
Subject key identifier: 59:30:01:81:99:7D:0B:0B:E5:FB:92:4D:14:A8:FB:CD:03:5B:2C:76
Authority key identifier: AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D
Certificate issuer: /CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
Certificate serial: 0194BBCDF9CA45A42C8CC89224908D39963D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
Manifest number: 0FA8
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: rKcX8QfgYizkyz71KwFU-n-baS0.crl (hash: u98dKb13PMWSsRb2Y/wEcOKMVAejV7o17mI3/gBAqUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f9:ca:45:a4:2c:8c:c8:92:24:90:8d:39:96:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=59300181997d0b0be5fb924d14a8fbcd035b2c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:54:48:6a:c4:d9:1c:0e:3e:92:a2:0e:ac:
21:b0:be:9d:91:1b:ce:65:8b:c9:8c:de:40:d8:03:
8b:db:fc:69:05:51:a3:bc:cb:f2:da:98:28:06:ce:
a7:fd:c1:69:73:9c:39:0b:6a:56:05:4d:73:02:9c:
e2:5c:66:ab:b0:35:7b:99:7c:21:f7:67:6c:6b:3b:
47:ec:0b:25:80:3b:55:d4:5c:95:dc:18:11:5b:29:
b3:9e:ff:77:b0:4a:b0:e6:47:59:cb:c4:29:9f:08:
a8:0e:0b:b1:b7:81:4c:e6:bf:73:d8:30:b3:b2:89:
c7:43:d2:7c:be:f9:f0:32:01:f2:15:06:f0:ba:e7:
7b:ad:4f:8c:1e:ff:48:21:91:da:62:f4:36:62:4c:
84:a5:7d:68:cd:80:01:cc:4a:6e:2f:44:cd:8d:3a:
1e:e6:e7:77:ac:9a:58:94:4c:43:49:45:31:53:71:
b6:4c:22:54:82:c3:37:57:10:32:0e:c3:e5:33:2f:
80:71:c3:ac:33:f7:10:21:50:97:61:d3:eb:83:53:
7b:3d:d9:99:95:1a:a8:b5:4a:60:b9:57:e5:01:32:
c5:54:6e:f1:4a:1e:e7:af:e7:33:fa:33:c0:c8:27:
94:26:32:3c:95:76:1f:32:57:36:13:2a:a2:fe:b1:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:30:01:81:99:7D:0B:0B:E5:FB:92:4D:14:A8:FB:CD:03:5B:2C:76
X509v3 Authority Key Identifier:
keyid:AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:94:a5:dd:8b:85:a5:a4:b5:45:fc:fc:9b:1f:ee:6a:6a:b3:
17:41:d5:ba:6a:d2:e1:31:45:a5:fc:82:93:b6:e1:62:b8:4b:
67:8a:aa:aa:53:b7:30:fa:f8:78:6a:f1:15:30:eb:a7:71:ec:
4b:1d:5b:fa:e8:be:f2:5b:95:be:ea:ad:fb:ec:aa:ce:61:11:
1a:bd:af:01:f9:38:ed:62:56:ba:25:65:a4:15:03:96:f6:6e:
b9:f7:7c:24:10:57:90:94:fa:93:ba:ba:b6:9a:ce:fa:e1:aa:
eb:93:46:b7:f0:5c:ea:0f:32:17:1d:4d:29:b4:a0:69:da:b3:
ab:6d:32:d7:aa:80:3e:f2:b6:20:cf:df:22:58:70:bb:c1:5d:
ea:6f:d7:ef:8b:3d:1b:5f:1c:ba:a2:45:71:7b:72:db:fc:43:
9a:73:48:15:14:d5:6b:a9:83:a4:5d:7c:72:6a:55:fa:df:3d:
96:02:f3:db:0f:b7:93:4b:b2:2b:67:7f:2d:1f:57:dc:c7:0f:
c3:0c:7a:f1:ef:75:90:be:9a:c7:96:85:1d:8a:d8:4c:c5:fd:
74:27:90:7c:a4:ae:8c:91:5f:d1:8d:fc:6f:85:6a:99:34:10:
f7:3e:18:59:62:71:9e:06:ef:0d:77:89:b4:70:c9:d0:76:34:
c0:32:d2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:49 2025 by rpki-client