Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json)
Hash identifier: WURI192YS/y65wsa2b+rIaqtmQVNQWSyS00hcavnxYQ=
Subject key identifier: 20:46:1A:ED:B5:A9:55:D1:5F:1A:02:97:AB:21:F2:31:DE:74:AA:30
Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Certificate serial: 0194BC72BC0B141AEAC587971425515776DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
Manifest number: 0637
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: 5BmQFROqu3TDas9T2Qyps4MxvOx6sT43LxNV0S8fhxQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bc:0b:14:1a:ea:c5:87:97:14:25:51:57:76:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=20461aedb5a955d15f1a0297ab21f231de74aa30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:5c:bd:4e:9e:5e:86:62:52:66:16:c7:b4:
cb:1d:dc:7c:13:4d:6b:56:33:cc:d2:0e:7f:6c:7e:
ac:49:55:30:6f:41:7f:ce:20:1f:4b:fd:f7:dd:3d:
11:ce:11:69:d8:e5:52:08:b6:6a:76:78:64:7b:2e:
b7:08:70:95:bc:07:79:5b:32:22:bd:ae:86:f3:3f:
51:dd:ff:c5:bb:92:e4:a0:57:51:0f:65:9c:a4:83:
13:b9:47:64:0b:dc:eb:8e:f8:56:ca:6e:4b:f3:84:
0b:66:95:d9:d0:77:01:7e:94:39:09:ef:7a:ba:dd:
2c:a7:bc:e4:90:77:3f:5f:3c:7c:01:b2:8d:a1:c8:
34:77:d0:23:37:6c:4e:f6:ed:02:d8:03:4f:97:fa:
8d:62:88:73:d3:48:b1:b4:4d:31:0d:33:24:3d:73:
57:cb:fc:1b:50:1e:9c:3a:89:ab:15:a0:71:27:dd:
57:8e:52:8f:7c:7b:7e:85:4e:1d:87:45:af:bb:74:
ab:89:f7:ba:d6:1a:1c:dd:16:44:5d:67:03:6d:e3:
04:2f:9a:45:e7:a3:02:76:0d:fb:9b:dc:2d:07:67:
86:f5:d3:f5:fc:cb:29:3d:2d:88:bd:c8:15:96:a2:
88:26:e8:72:03:04:d1:af:dd:f1:99:88:2d:98:f9:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:46:1A:ED:B5:A9:55:D1:5F:1A:02:97:AB:21:F2:31:DE:74:AA:30
X509v3 Authority Key Identifier:
keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:32:5e:3d:7d:2d:5a:ae:cb:17:0f:0d:79:af:d7:e6:d6:08:
a2:9f:aa:fd:1c:3c:8c:3b:75:25:59:65:0a:1f:05:1c:a1:9d:
2e:bf:9b:4b:5e:7f:e2:94:6b:84:db:5a:2e:ce:47:a2:bb:d6:
d0:5d:dc:c0:18:10:42:b6:9c:50:09:eb:48:b5:f8:da:a9:ef:
b4:5d:87:4e:0b:c9:fb:ea:b4:31:6b:42:9a:f8:33:f4:ed:c9:
ad:06:e6:c4:d4:6e:a4:f3:ea:ec:b7:b0:b3:d9:ff:ef:fd:00:
8d:5e:e2:1c:aa:73:61:60:dc:2f:5c:f9:50:95:ff:d9:71:bd:
ae:91:62:f9:90:46:f5:03:fa:a9:48:38:36:8e:c9:37:fb:2d:
59:b7:bb:fa:3f:5b:c5:c8:f5:7c:31:aa:bc:d8:14:81:b8:1d:
71:3e:87:df:89:e7:e8:7f:45:a8:61:cb:70:e6:57:ff:3b:dd:
9f:ea:ee:c9:bf:b0:25:03:78:0d:67:4d:31:ef:c7:91:5b:24:
d2:d4:3d:ce:df:73:5d:0d:4c:62:09:33:ad:4a:76:01:e0:41:
2e:4e:bf:b7:57:1d:8d:e3:fc:07:9e:e7:66:b5:c7:21:db:e5:
fe:06:9a:b0:14:31:24:42:b5:43:1d:21:3c:4d:18:a1:c5:ae:
d8:00:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:19 2025 by rpki-client