Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
File: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft (raw, json)
Hash identifier: 8V/q5iF2JAXtit/6wbcocKt7oeuP0t9KvMN6BvnGjoc=
Subject key identifier: 89:8B:BF:CB:2D:55:7E:B0:9F:28:A5:F8:A3:72:49:DE:C9:95:2C:D8
Authority key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
Certificate issuer: /CN=02ba9db2674f734565f0953393f0a56961ca57c8
Certificate serial: 0194BCA9842FE353BA6EEC3FA10B48DB868B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
Manifest number: 0D03
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl (hash: IhEOY7QWTIw1k7PXAIGr6eXPpmCRGLfLyUguZY0E3Z0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:84:2f:e3:53:ba:6e:ec:3f:a1:0b:48:db:86:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ba9db2674f734565f0953393f0a56961ca57c8
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=898bbfcb2d557eb09f28a5f8a37249dec9952cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:94:95:17:e8:71:74:10:dd:3c:a1:5c:b0:
60:f0:22:63:12:cb:be:97:b1:51:a3:bf:07:7e:e0:
2e:b0:09:c3:ab:1b:3b:59:ce:4e:b2:5d:fb:0d:81:
86:44:fa:0d:58:e9:da:5c:a5:a7:e8:83:18:7d:23:
ea:ce:07:fd:06:db:c9:bc:00:7a:88:fa:e1:37:77:
e2:d2:85:df:2a:5d:62:e5:34:84:ea:1b:16:bb:c4:
29:8c:cb:50:04:f8:60:47:05:1e:88:84:32:d8:b1:
89:ce:66:33:d2:b4:46:0c:ba:c2:69:c0:2f:8f:7b:
9b:a9:c8:d3:cd:05:76:bd:28:0c:da:11:47:95:0a:
df:ee:13:f8:54:e4:ee:a6:32:17:c6:e5:6b:d3:13:
a2:15:9c:6f:da:d0:dc:31:f0:4c:73:c3:3d:68:df:
f8:cd:77:76:81:95:d1:58:31:4b:a2:c1:f0:e9:aa:
fd:7f:b6:43:f2:9b:bc:fe:84:02:60:a5:3c:8c:b4:
28:fc:4c:47:9e:3a:a5:6e:15:b1:20:a3:21:f2:fb:
0c:f3:f6:3b:32:91:f7:c1:27:a2:39:77:56:04:df:
7f:b3:f2:0e:f4:c4:21:3a:bb:a9:af:70:76:51:9a:
e7:d9:62:28:88:ae:7a:7a:d5:33:a7:2f:74:69:31:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8B:BF:CB:2D:55:7E:B0:9F:28:A5:F8:A3:72:49:DE:C9:95:2C:D8
X509v3 Authority Key Identifier:
keyid:02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ca:8f:d0:8b:56:05:df:c0:c9:df:74:57:03:f7:dd:f1:4b:
3b:28:7a:de:6f:87:f8:9d:ca:c0:43:42:0a:76:57:79:70:84:
4f:81:8f:b0:e1:56:86:89:89:74:55:0c:61:ab:d6:35:1b:83:
eb:a7:97:23:46:46:1f:85:9c:ed:fa:7a:a1:9e:18:a3:fc:41:
79:b3:6e:2c:be:b6:b3:e3:6f:8d:9a:12:64:3e:63:fb:76:94:
ff:3f:b0:18:a2:ad:c0:d6:88:74:aa:6e:a1:37:20:62:c4:db:
55:5d:42:45:90:94:11:93:14:4a:ea:af:57:b5:9b:4a:dd:3d:
25:63:78:03:00:5c:42:08:c9:54:c2:b2:05:46:04:9c:43:68:
8b:2e:b8:c3:21:1a:85:58:a8:4a:2a:b6:6d:63:68:d5:15:b0:
3d:cb:ca:38:a5:4b:81:05:4a:5b:fe:96:f8:ec:8a:f2:76:7e:
ad:de:21:79:a5:53:eb:45:e1:cb:c7:c9:84:61:70:51:cd:1f:
a7:66:93:5a:43:9d:87:10:d7:2a:df:db:11:38:a0:65:30:34:
3c:da:db:0e:ed:b1:3f:cb:b6:57:f2:45:1a:b9:84:64:f9:8e:
41:ba:e4:5d:47:3d:38:c0:b9:13:45:b1:9c:ea:d6:48:c1:86:
45:de:d1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:20 2025 by rpki-client