Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
File: c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json)
Hash identifier: fNsspxpsksUFiA+eLHonxa/4twzMiFl5pJ3kzoQi+RM=
Subject key identifier: A2:3D:F7:D5:D3:E0:D9:9C:EC:5A:68:AA:4C:46:DF:60:F2:CA:AC:F2
Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
Certificate issuer: /CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Certificate serial: 0194BBCE2118981EF81C49C115AA81259F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: Xo9mWmezR+DD7OJC85dX7DATPqIaugAOn6KOZscz/bw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:21:18:98:1e:f8:1c:49:c1:15:aa:81:25:9f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=a23df7d5d3e0d99cec5a68aa4c46df60f2caacf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:17:31:f9:b0:90:4b:9c:7d:86:6c:f6:4c:
54:41:d1:3e:5f:2e:ca:15:51:53:f1:fb:f6:c2:5f:
8b:ea:46:fc:e9:bd:2a:7b:34:26:5f:4d:5a:d9:2f:
3c:b3:3f:9d:5c:53:14:21:a2:a6:96:32:2e:45:13:
50:ac:8a:c9:03:67:df:b0:86:7c:a9:b7:c1:f5:a0:
38:45:77:4f:07:5f:2f:4d:e6:ee:2b:0b:89:aa:d6:
15:3d:b8:e0:22:c6:a3:0c:0a:71:f6:f0:f0:63:8d:
9a:63:bb:79:ad:f5:d9:66:b7:36:18:c9:68:89:32:
fe:ee:1c:0e:49:27:7f:a2:68:67:68:62:d8:a0:fd:
4c:86:c0:44:0f:6d:68:3a:1b:41:27:88:7e:cb:7c:
ff:13:ee:99:0c:37:d3:5e:ff:21:fe:75:1d:07:de:
6a:fc:1d:03:a5:57:83:b1:5a:2d:fe:ef:18:d5:d9:
7a:34:05:52:6f:59:bf:e8:9a:ae:49:28:f3:07:b2:
89:7d:09:67:d1:e5:1f:fb:ff:9a:c4:bb:d2:eb:bd:
e9:da:84:72:50:91:bb:47:c4:cc:99:0c:db:82:46:
09:5a:61:14:b9:56:6d:2e:fd:53:a7:f7:8a:1b:72:
ee:8b:51:47:fb:f4:a4:b4:90:d8:5c:98:85:7c:17:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3D:F7:D5:D3:E0:D9:9C:EC:5A:68:AA:4C:46:DF:60:F2:CA:AC:F2
X509v3 Authority Key Identifier:
keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e1:cb:b3:c6:6a:7c:24:c3:66:5f:06:f7:72:3d:45:fe:f1:
8f:fd:a0:3a:9b:c6:d0:b0:e7:8a:8b:f7:89:3c:43:44:cf:72:
ca:88:c2:52:a9:cc:60:0f:af:15:01:e1:3c:b8:69:a8:26:c5:
09:91:51:2b:51:f8:89:6b:74:9b:03:c6:af:8d:f6:59:83:ea:
4f:62:9b:57:32:a9:dd:d3:77:1e:96:0f:99:dd:e8:3e:29:b2:
d0:f0:e7:3e:49:e5:9b:3e:8a:bc:c1:31:a9:c6:8d:a4:5f:55:
0a:97:2c:66:3e:61:d6:67:65:61:ad:86:79:37:5e:04:b2:3a:
e1:dc:05:ab:4f:7c:52:6f:50:ff:a1:62:ca:cf:7f:97:14:e5:
ad:d3:b6:11:a7:44:a8:93:b2:42:15:50:05:7c:0b:4c:cf:51:
5c:d2:d4:7a:ee:1d:1a:eb:e2:11:a5:35:f3:bf:38:6e:33:cb:
f9:31:43:d8:21:10:b4:6b:ab:75:8a:e8:c4:d9:b0:d8:1f:3d:
9b:5f:59:d4:76:3a:44:5a:c3:db:e7:df:d6:d0:8b:fe:18:1e:
f2:16:e2:c8:15:c7:c4:0c:e8:86:00:69:03:44:f4:e8:3e:83:
60:0c:1e:57:cd:35:43:0a:79:34:9e:bc:6c:f3:8d:44:7a:8c:
33:37:1e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:15 2025 by rpki-client