Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
File: R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json)
Hash identifier: k25tkFPqnAPGYmGOLwCsSM6+vnknAOqX1U9fJeYvMuw=
Subject key identifier: 0C:41:A8:EF:9B:AC:11:F8:7D:36:2B:BB:EF:87:57:CE:03:9D:45:23
Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
Certificate issuer: /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Certificate serial: 0194BBCE04C0FE030DEB32B284CFEA9AE9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: rwMzzbVkjG6gWL2Aulmim308aL+LLVgYgDL+uE0kNkI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:04:c0:fe:03:0d:eb:32:b2:84:cf:ea:9a:e9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=0c41a8ef9bac11f87d362bbbef8757ce039d4523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f5:72:c8:f4:44:b6:39:42:8b:3c:39:0b:e9:
6f:c7:61:ff:b3:b3:32:76:a3:d3:ce:a6:e0:56:0a:
b6:f7:15:2d:60:31:35:df:bc:8d:f0:a0:db:5a:85:
74:0c:de:13:a3:50:a8:9b:b4:6b:e0:d6:c3:66:a5:
ab:25:cc:75:6d:00:a3:49:c1:23:d7:cc:9c:84:dc:
ac:fd:45:fa:7d:f5:75:77:21:13:92:99:cc:15:45:
dd:dd:00:36:40:5d:5e:37:6d:51:53:9f:6f:ed:bb:
23:95:44:cc:ed:ff:4c:ec:97:b7:e7:87:eb:b0:0d:
63:b9:47:6c:29:76:5f:ff:46:3e:e7:ea:4a:7d:33:
a7:27:43:c0:6a:bc:82:1b:16:01:a6:d0:e8:97:d4:
bf:5d:b9:49:29:78:f5:aa:cf:09:6d:f8:f1:40:ee:
b5:7b:26:52:98:9f:85:76:75:75:65:6a:4c:e9:dd:
1a:20:a4:c6:10:ea:a5:55:37:a6:c2:10:a3:b2:87:
1d:22:d3:1e:84:c3:6c:57:27:54:77:5f:09:69:08:
1a:c6:1e:1b:a6:d1:a9:ca:83:5b:46:e5:54:58:73:
c3:97:fc:36:47:77:31:a4:d3:73:31:ef:3b:79:7b:
ce:68:40:42:3a:62:da:dd:0f:b0:af:60:5d:52:b7:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:41:A8:EF:9B:AC:11:F8:7D:36:2B:BB:EF:87:57:CE:03:9D:45:23
X509v3 Authority Key Identifier:
keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:97:44:b4:c5:cb:db:c6:fb:74:78:59:28:f6:01:45:83:ae:
3f:92:c4:11:6b:3b:86:26:95:ad:62:0a:8f:f4:3f:a8:9d:b1:
b9:a9:13:02:38:1e:90:df:11:30:30:ef:ce:f2:b7:f8:cf:a1:
ad:24:87:94:ba:8c:8a:17:92:97:b8:5f:f8:28:d7:e6:a0:cc:
9d:1b:ec:7d:94:a6:20:4c:fd:89:86:f8:b8:69:7c:85:a8:a4:
cb:68:be:64:e3:d6:f9:e8:13:b8:6d:c3:2f:08:01:7c:1f:05:
85:a7:11:5d:02:57:2c:07:1e:12:50:8c:f6:61:bb:09:36:ad:
4d:91:98:45:d8:fd:e7:9d:b4:3d:cb:cb:14:ea:66:2f:0d:f7:
5a:82:ea:fd:fc:1e:6f:4b:fd:93:6a:a9:74:33:a1:da:64:09:
b5:ad:b0:f1:43:7b:2a:1d:e9:e3:25:52:75:b6:d1:f1:6e:a2:
b0:6e:85:36:53:0e:47:ec:c9:8f:c8:f1:31:03:97:cc:06:b4:
ea:2f:33:d6:2d:5e:c3:ab:2e:7d:b0:dc:a7:1f:87:a2:8a:a5:
99:d7:a4:21:48:e9:ed:ad:33:93:99:08:63:d3:61:b1:2c:84:
12:c8:75:b3:5a:0e:83:34:4f:9b:18:5a:f6:16:f4:21:c4:40:
42:8b:d2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:25 2025 by rpki-client