Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
File: crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json)
Hash identifier: NRBKCAJOXusnDO6W08IVDBya8UJoWphcd37+zOy6PZk=
Subject key identifier: E9:A9:E4:E3:67:05:3C:1F:FF:67:FC:21:FC:1D:D0:8A:AD:12:30:20
Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
Certificate issuer: /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Certificate serial: 0194BD1780DDA92856EDB7DB2F8DA9D6FA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
Manifest number: 0719
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: BL0zNrdsYjbGFVDAhcSuGmfgVoEWoKo18o2nUdrssts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:80:dd:a9:28:56:ed:b7:db:2f:8d:a9:d6:fa:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=e9a9e4e367053c1fff67fc21fc1dd08aad123020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:60:a4:8d:2d:f3:ca:91:17:2a:0d:0f:ad:
95:01:f4:2a:4a:44:f0:4e:b7:bd:dc:d3:c4:89:f2:
17:8f:5d:16:dd:44:6d:8d:7e:75:1c:b6:9b:e3:d1:
d0:9b:97:2f:95:35:6e:40:f4:a1:8f:8c:ea:af:e6:
89:07:05:56:f5:ab:57:21:31:4a:6d:76:07:58:41:
a5:be:c0:33:f7:71:73:03:d0:ab:78:2e:4d:28:e6:
ec:60:7f:6b:e6:5b:73:fe:2e:d9:0e:94:9f:0c:a4:
25:ec:c9:d9:9c:5d:14:54:8f:53:2b:0a:28:1d:73:
bf:91:93:c0:57:c2:43:7d:5e:64:f5:9d:ba:36:5f:
9b:f4:74:47:7a:fc:6c:88:69:cd:78:7f:6e:66:e8:
98:7b:45:93:c7:af:fc:06:90:d7:a2:cf:14:b6:01:
cd:49:94:8a:1a:a1:8c:ef:12:a6:71:dc:01:e8:84:
9c:fa:0e:43:7f:18:f2:3c:36:7c:ed:a0:a8:bb:1c:
69:05:1c:69:9b:e5:7e:84:aa:e9:8d:0b:85:73:86:
08:e9:dc:c5:90:4e:3f:46:45:46:ab:52:23:f0:2e:
40:b7:e6:78:20:9e:63:5b:24:90:76:b0:09:ff:9a:
1a:96:ff:ed:0b:d6:4c:84:60:bc:27:f0:8b:ce:b1:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A9:E4:E3:67:05:3C:1F:FF:67:FC:21:FC:1D:D0:8A:AD:12:30:20
X509v3 Authority Key Identifier:
keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9a:86:44:23:4f:71:80:7c:8f:f2:e2:e0:da:75:95:44:f1:
b9:ed:af:08:09:54:b0:5a:2e:a8:2a:b8:5e:e4:14:b2:00:98:
71:fb:1a:87:e7:e3:0a:4c:a8:e4:51:6b:2a:92:11:ce:06:25:
f0:f4:39:f2:34:e8:9f:4e:26:a6:df:3b:6b:5b:9a:4d:58:81:
bb:4f:8a:89:10:04:ff:f5:b5:15:8e:10:1c:cc:cd:52:e1:92:
88:ed:0a:d3:ff:7d:74:c0:1e:e9:96:ca:37:15:ce:9e:11:a4:
66:59:83:df:86:76:70:0e:e2:b3:29:5a:2b:7a:ab:b5:ac:9d:
80:a8:36:28:b3:54:91:5f:2f:81:5a:b7:4d:7c:ad:1a:c2:4a:
4c:b9:3e:2c:d3:72:21:8e:ce:0b:b0:5c:ef:72:e2:9d:32:a1:
23:66:1d:a0:c8:96:1f:1f:15:d3:ff:4d:d7:00:31:38:cb:cc:
99:15:4f:b1:5b:d2:92:3d:cb:dc:bf:76:f3:10:b6:ad:39:7a:
88:a5:3c:4d:fe:21:a3:ca:ea:53:ee:79:58:97:ee:8d:a6:ab:
47:7d:12:55:df:be:82:88:79:c7:e5:c0:b7:44:88:55:4d:1c:
fd:fe:c4:b7:d9:bd:db:9f:65:32:21:2c:73:e5:fe:3a:f8:9e:
5e:c8:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:56 2025 by rpki-client