Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b12399-d560-4d08-afe4-1b1c73476fea/1/d-wkPNn4o06pfFDXIR1TJEfnu0g.mft
File: d-wkPNn4o06pfFDXIR1TJEfnu0g.mft (raw, json)
Hash identifier: GM5QkuaRc4teNoe/eR8jYKzUbQoPkveDMxZ7zy40+DE=
Subject key identifier: 13:CC:BE:D0:E1:CA:5E:F8:0D:D4:04:50:F9:2A:91:BD:9D:40:D4:6B
Authority key identifier: 77:EC:24:3C:D9:F8:A3:4E:A9:7C:50:D7:21:1D:53:24:47:E7:BB:48
Certificate issuer: /CN=77ec243cd9f8a34ea97c50d7211d532447e7bb48
Certificate serial: 0194BD1770FBBBA44A1B5769A3B4572C534E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-wkPNn4o06pfFDXIR1TJEfnu0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b12399-d560-4d08-afe4-1b1c73476fea/1/d-wkPNn4o06pfFDXIR1TJEfnu0g.mft
Manifest number: 0BAB
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: d-wkPNn4o06pfFDXIR1TJEfnu0g.crl (hash: qGUBZcksbj/jG+Ykn/LCtu2rujX14PnX9C3k7Y4ZRsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:70:fb:bb:a4:4a:1b:57:69:a3:b4:57:2c:53:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77ec243cd9f8a34ea97c50d7211d532447e7bb48
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=13ccbed0e1ca5ef80dd40450f92a91bd9d40d46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:77:4a:55:38:84:9d:14:0a:f2:40:4b:cb:
e8:38:9b:ec:f3:67:f2:b3:1a:b7:24:5c:73:30:a2:
e7:dc:bd:1b:92:61:a5:bc:d4:99:ae:c2:36:21:ca:
03:33:24:db:e9:0c:0f:7b:b3:b4:9e:4c:31:6f:05:
27:15:f5:2f:03:97:c1:68:8e:13:25:45:fc:63:dd:
27:20:3b:62:be:b1:bd:56:f6:fb:35:c7:b3:ed:52:
7f:84:ac:97:cf:1e:35:3b:cd:80:fa:6a:62:31:d5:
a5:1c:d0:6d:75:d9:af:99:f2:57:2f:cf:25:8b:ed:
73:8d:71:31:01:5e:50:27:7b:15:d1:5d:8d:1b:8e:
a6:68:04:17:a9:fb:81:56:ff:d1:db:c5:f5:da:bb:
e0:98:bf:55:76:fd:16:01:48:f8:88:87:8f:a9:64:
b5:5d:2e:62:29:62:30:47:1a:5e:71:22:f1:d0:95:
15:20:94:65:81:25:4a:91:2b:25:c1:d2:3e:ce:1d:
64:84:19:c2:ed:03:c7:cb:a3:23:77:f7:ac:80:10:
a1:7e:1f:e2:1e:1e:7c:f5:37:72:ae:e1:51:24:60:
46:89:0c:b6:59:fa:3d:fe:f2:22:3a:4e:b0:77:03:
91:d8:5c:93:94:90:f4:17:6c:13:d4:ab:9f:0e:65:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CC:BE:D0:E1:CA:5E:F8:0D:D4:04:50:F9:2A:91:BD:9D:40:D4:6B
X509v3 Authority Key Identifier:
keyid:77:EC:24:3C:D9:F8:A3:4E:A9:7C:50:D7:21:1D:53:24:47:E7:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-wkPNn4o06pfFDXIR1TJEfnu0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b12399-d560-4d08-afe4-1b1c73476fea/1/d-wkPNn4o06pfFDXIR1TJEfnu0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b12399-d560-4d08-afe4-1b1c73476fea/1/d-wkPNn4o06pfFDXIR1TJEfnu0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c3:bf:83:c6:a3:d9:1b:14:39:b0:99:2a:30:85:a0:a3:5f:
9d:08:e6:54:c0:1e:7c:01:9b:64:7f:3a:fe:0c:74:f7:60:b7:
9c:72:2b:5b:c1:6b:17:d3:5d:51:d6:a9:63:55:a7:f4:f7:3e:
7b:0a:2b:55:a7:9f:52:29:fe:df:11:25:4f:6b:94:c8:34:17:
01:14:8c:82:d2:f5:7b:9e:76:8c:d3:67:65:ff:6a:24:be:ea:
22:b1:5f:9a:9f:96:92:de:25:4a:7e:b1:5d:82:4b:2f:f8:db:
b4:05:11:7f:df:76:f9:6b:68:0f:88:a1:81:7b:3a:0c:03:bf:
ac:73:68:2b:b5:f0:36:f3:db:5d:d0:f8:e4:8d:fc:64:e8:76:
03:16:f7:c9:f5:26:1d:a6:4a:c1:92:eb:80:ba:9b:03:8a:6a:
7b:a2:15:aa:9c:fc:58:f4:8d:5a:9b:2c:16:0f:46:84:8c:87:
0c:8b:13:98:6c:1c:db:69:db:0f:6f:14:5e:90:1c:29:01:13:
5b:72:c1:b1:61:c4:69:dc:4e:93:90:a6:cd:1b:3e:48:bf:69:
c0:de:05:70:5b:5a:29:f5:03:dc:4b:20:f8:92:67:a5:9e:e3:
d6:e9:d3:49:59:50:21:80:74:08:12:79:a7:ea:d8:fa:07:17:
a3:69:db:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:19:56 2025 by rpki-client