Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: PDlM5nC+E5n7KX59MIQP2D2GayqujJN5YMzdC479+c4=
Subject key identifier: 60:A4:91:6A:1D:16:16:4C:1D:58:D8:10:9D:42:4C:FC:E9:1E:F4:09
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 0194BD852985AB2FCC9040DEA1165D8068CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 0301
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: ixsgoM3Ru4tSZwaGezYSd0g3aA6hjKISW5/x2xZhNqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:29:85:ab:2f:cc:90:40:de:a1:16:5d:80:68:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=60a4916a1d16164c1d58d8109d424cfce91ef409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:9b:f7:1b:a2:ac:4c:46:1a:8d:21:f6:0f:
35:2f:f6:21:ab:df:8f:db:9d:41:84:e3:b7:5e:1b:
73:09:e9:20:e8:87:ae:a9:c4:bd:0f:cc:fe:72:5e:
8f:a0:4e:fb:60:ac:06:76:91:e4:fb:1f:b3:c3:18:
20:0b:7f:ac:fd:ae:fc:8e:90:28:10:cf:1a:91:54:
44:13:04:f2:90:04:bf:7c:b8:ce:31:16:cd:f7:20:
21:52:95:44:5e:e7:db:da:83:00:06:43:f7:97:5b:
d3:9e:04:87:ba:25:de:4d:4c:76:ca:80:64:1b:28:
e1:8c:11:83:d2:1e:93:75:a3:24:2c:3c:30:8c:e8:
58:34:dd:2a:98:69:80:17:17:9b:5c:2c:c5:c8:f3:
4c:76:35:40:05:dd:03:a3:8a:55:dc:ee:54:ff:4b:
c6:b4:c2:e2:a8:59:77:a8:fa:62:a9:e2:61:37:f2:
88:26:a5:fd:bf:64:6e:ea:42:8e:56:f5:c9:a8:c3:
c5:d5:81:ff:f8:01:7f:f4:2b:3e:31:e2:83:53:11:
03:ec:06:0d:61:90:44:4a:0e:4a:7e:f3:c3:fa:ad:
2a:a5:00:ae:d1:33:02:9d:1e:54:42:9b:a1:d7:80:
1e:12:29:a2:bc:14:30:ed:89:c6:ee:e2:9e:58:34:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A4:91:6A:1D:16:16:4C:1D:58:D8:10:9D:42:4C:FC:E9:1E:F4:09
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:33:26:2d:88:d3:8d:83:19:42:d6:ad:bf:46:1d:23:74:d3:
af:c4:71:88:f6:b3:dd:cf:2a:07:e4:58:46:d7:c3:fa:bf:59:
e2:f8:21:64:07:a1:98:b3:ae:d7:0d:c9:60:67:e5:8a:35:e6:
ac:7d:4f:77:62:0a:8d:c4:ae:23:70:6c:fd:1b:43:62:d9:e6:
da:7a:68:ba:1e:d6:26:a4:20:cb:9d:01:4d:61:cd:ba:42:d3:
e2:0f:f5:14:a3:f3:30:bd:76:93:fe:01:d0:b0:6b:d0:46:61:
d9:ac:5b:7a:87:95:00:16:48:4b:51:1f:02:53:f4:e6:81:a2:
0c:7f:b1:db:95:67:01:ad:5e:40:b1:5c:19:ba:3d:0b:f8:73:
4f:44:11:83:c9:bd:ec:5d:7e:dd:b3:12:ab:ac:93:ea:83:07:
d3:4c:ef:b7:a8:54:fc:b7:01:75:a9:9e:ad:b4:5b:de:32:36:
ec:ca:89:d7:b0:ee:e9:1c:d9:5d:43:70:fe:a0:ca:9c:da:9c:
f8:e1:8d:ff:5b:fa:7c:d1:29:54:b4:af:ee:71:ac:5f:41:8c:
9b:77:1b:7f:45:ea:44:d2:32:e9:22:87:05:09:c4:21:3e:52:
b1:69:89:8f:01:b6:66:08:16:b5:ee:fe:1c:4a:d8:ee:04:c8:
49:f9:f6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:44 2025 by rpki-client