Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File: AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier: ICL7ITxOx/QlaSUxbYgMlMBD4bcL4vBM/hNGilouK/M=
Subject key identifier: 9F:5F:09:2C:D4:07:EE:72:1D:96:57:AA:8B:EE:46:54:A1:2F:71:BE
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer: /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial: 0194BC3BF0C04853B7B64A5B7237BD436151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number: 08A0
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: K1ETDwRPO8guAtWy7TcrepKw4X2gaOn6+jTQqWGnjpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f0:c0:48:53:b7:b6:4a:5b:72:37:bd:43:61:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=9f5f092cd407ee721d9657aa8bee4654a12f71be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:3c:3a:e2:a8:88:c7:4d:4c:d3:b1:6d:b5:
e3:93:d8:27:cd:2c:a7:d5:37:d1:6e:a7:a0:c5:26:
3f:9d:1b:c0:47:25:3c:1d:3e:ff:66:fa:5c:d7:da:
ea:75:a5:95:d5:38:f5:b0:28:ae:81:35:ea:85:75:
e1:ff:fc:45:df:5a:56:aa:6d:33:97:f7:52:9e:46:
c1:61:69:29:e7:e5:8f:cb:75:b1:b5:a1:87:4e:76:
d8:65:3f:d7:03:56:0b:54:9e:b8:a8:4c:a1:56:49:
6b:47:c6:54:49:f3:b9:f1:97:ca:7d:db:b7:f4:35:
ce:ec:2a:0c:13:53:f2:2e:1a:0c:5f:5c:28:a1:c2:
af:fa:ba:5b:cd:0e:0d:36:01:02:86:1d:74:5d:41:
6b:d3:3c:a2:dd:bc:76:fe:b4:fa:b8:94:17:25:d8:
07:69:66:d9:7b:68:68:3a:11:16:8f:c4:4a:e0:84:
f9:04:2c:59:ed:30:aa:94:53:37:8c:a4:2f:e5:09:
4f:f2:ed:80:6d:0d:42:a7:1b:af:8e:6f:f0:5e:c4:
50:e0:dd:04:22:5d:0f:25:0c:dd:70:4f:3f:8c:05:
3f:80:93:35:9a:1d:d0:85:75:4b:3e:da:3d:2b:82:
08:8a:0e:11:7a:f2:2e:5a:d8:c4:6e:41:21:8d:e4:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5F:09:2C:D4:07:EE:72:1D:96:57:AA:8B:EE:46:54:A1:2F:71:BE
X509v3 Authority Key Identifier:
keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c3:d5:64:0d:04:7d:f6:fc:34:53:07:9a:6c:56:91:39:12:
57:8d:05:56:b9:64:7f:fb:54:f9:8f:fc:63:e7:84:ee:e9:ed:
a3:9f:e2:53:0c:53:c9:81:18:b6:39:9a:7e:1b:3d:72:f5:94:
57:aa:93:86:a9:82:5a:7d:3e:f0:ae:00:dd:60:e2:30:a9:49:
2b:de:49:28:2f:dc:6e:17:57:a5:70:0a:af:6d:ea:5e:03:51:
c1:9e:cd:29:87:cd:8a:1b:9d:b5:76:5a:1d:07:5e:b7:c8:0b:
8b:e5:11:65:23:3c:7d:b9:2c:15:04:95:d4:a9:cd:13:72:f6:
3f:93:03:b7:21:ed:c8:ae:92:24:09:58:7b:ec:4e:ad:6f:fb:
a2:36:c3:bb:f7:45:30:0f:b3:dc:f8:60:54:8e:b6:02:1d:86:
5b:db:40:8e:1a:6e:fa:99:7c:a3:f0:82:4f:ff:58:f0:27:b8:
df:03:ec:8d:b5:22:b6:7a:3d:15:8b:e5:6c:b7:1f:7f:0c:c9:
a0:fe:6c:70:92:08:75:93:b0:48:47:75:63:b4:eb:4f:74:6b:
80:da:eb:ab:98:31:55:36:4c:e4:de:46:4e:e6:54:0a:2b:1c:
98:55:fb:8e:7d:3c:a1:ba:b7:1c:46:1f:01:fc:bd:cc:73:07:
58:fc:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:39:12 2025 by rpki-client