Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
File: sNcTFlrGKE-0HV38gmV3_B2gtzA.mft (raw, json)
Hash identifier: B3pAbLPbm898IG/ksr1qC5QygniyubgR56sTBcPsNBc=
Subject key identifier: 28:D4:DC:90:8C:41:DB:DC:6D:E3:BA:55:B0:7C:79:68:35:32:56:C2
Authority key identifier: B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
Certificate issuer: /CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Certificate serial: 0194BBCDB68A7508641AE9325DC250693B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
Manifest number: 1140
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: sNcTFlrGKE-0HV38gmV3_B2gtzA.crl (hash: 3d6vqbZHkt9YXFuR1bAfEqC55OV6/wqrHSyo2DHIOMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b6:8a:75:08:64:1a:e9:32:5d:c2:50:69:3b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=28d4dc908c41dbdc6de3ba55b07c7968353256c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:66:38:1f:73:da:ff:89:13:e4:fe:92:06:
2a:ee:61:b6:b8:12:01:8f:eb:bc:bf:31:00:8b:69:
a0:33:58:8b:81:f7:2c:8d:9e:c9:4c:6e:96:9e:4e:
92:78:0a:3d:9a:a5:c1:f9:31:52:f0:8e:58:dc:ad:
32:96:9e:2e:c8:d0:ab:a6:0f:67:00:2e:7a:72:df:
4d:22:09:8a:ac:de:33:17:b8:f9:11:50:ad:a8:48:
74:69:92:8d:d3:77:a8:3b:e2:e2:78:c0:4d:81:a0:
ec:e8:a2:02:ef:43:af:cb:80:0e:7b:d8:ef:fa:88:
3f:86:bf:47:49:93:47:85:86:86:0a:fc:76:7e:07:
7c:3c:2a:9e:0a:56:c2:19:7e:ee:c2:c9:5e:05:b7:
cf:4e:8f:00:88:a0:b7:1a:2b:ec:b3:0b:db:27:3a:
40:79:47:f6:3d:96:c0:aa:be:0c:e3:6f:49:bc:45:
b5:2e:49:04:d4:68:fb:64:02:3c:e5:f8:73:87:54:
da:6c:e6:f3:ee:6c:0f:0d:98:f9:6b:99:62:91:df:
46:62:a7:e7:72:35:c7:5c:a5:9a:5c:08:4f:e9:1d:
19:93:5d:ac:21:2b:45:49:f9:ca:d2:f9:2a:eb:39:
d1:a1:58:5a:bb:b2:3d:58:f1:aa:b9:42:fc:35:4c:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D4:DC:90:8C:41:DB:DC:6D:E3:BA:55:B0:7C:79:68:35:32:56:C2
X509v3 Authority Key Identifier:
keyid:B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4d:db:6c:94:3a:09:04:dc:2e:bf:3d:7b:33:06:24:50:d6:
ff:c8:7f:0c:4b:2e:6e:32:b3:be:5c:b6:e9:07:c9:5c:6d:8b:
2c:1f:b1:d9:7f:cc:d1:a3:d9:5a:5d:00:d7:3f:ba:e1:20:e6:
38:6b:c7:05:c9:a7:42:c9:ff:0f:5b:1c:9b:35:54:37:33:85:
48:ff:b9:a9:1e:77:71:76:9f:3f:7d:e9:83:e8:6d:26:d7:8f:
02:7e:20:e1:ee:fb:c2:c1:b6:52:e7:70:bd:79:bf:46:a5:c3:
fe:01:33:16:f6:34:dc:cb:cd:30:0d:50:15:cb:fb:b4:a7:a1:
09:f9:02:e6:b2:df:07:d3:33:94:a8:9f:56:2a:dd:27:e0:96:
3d:cf:6f:66:30:b1:5b:68:54:36:3a:c9:7a:dc:4c:65:77:d6:
ef:3f:e1:78:a2:72:10:12:f9:62:e9:45:c6:e6:64:f0:ce:5a:
bb:cf:e0:14:8d:9e:6e:2e:29:23:90:d3:f2:0b:1a:1e:46:47:
06:21:54:36:f2:81:0b:e5:e3:00:ce:b4:43:f9:03:df:f6:a6:
d1:75:eb:03:a0:f6:26:7c:c5:59:8f:b1:0d:7d:b5:e1:d3:c8:
ae:fb:5b:ad:75:d1:13:6d:13:6f:5f:a6:1c:06:3b:86:3c:57:
0c:ae:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:12 2025 by rpki-client