Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: WfcTDRRJMSaI+mB8HHIGDqXla1phCGKqB3IAOd7WqhM=
Subject key identifier: 9E:2D:F1:1E:0D:E5:64:52:BD:13:97:A3:BA:FC:44:48:F2:C6:F1:42
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 0194BBCDE09335C79566E6BE01E33BAACB86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 08F8
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: FB4J8Gqtn2fRxyqyR0fgsXxpeJ+DlZJ0XUo2ukwJXmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e0:93:35:c7:95:66:e6:be:01:e3:3b:aa:cb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=9e2df11e0de56452bd1397a3bafc4448f2c6f142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:71:38:f8:e3:61:57:c7:ed:46:d3:39:c4:21:
4f:c8:ed:cf:cd:a8:77:96:4f:ec:4a:a8:09:b7:c6:
e5:29:b9:b3:1a:30:36:16:0e:df:30:00:82:c9:8e:
c7:5d:df:1d:ce:45:66:ab:7b:c3:2c:66:f1:31:b7:
53:b0:b9:dc:fa:53:d0:ab:01:e9:96:41:92:6b:df:
57:28:30:f2:b3:d0:06:b6:02:26:08:b3:f0:43:2b:
b7:ad:f1:6b:cb:68:44:68:55:e1:d7:18:06:24:ac:
8b:e6:25:52:fa:ac:43:88:20:91:37:f5:50:43:f0:
f6:c7:49:8c:c1:64:00:18:9a:1f:32:a1:b1:9c:24:
81:2e:8a:00:38:f6:b9:0b:e9:82:66:e2:85:ea:ec:
de:17:64:03:c2:d2:3a:73:c2:48:82:93:35:70:9d:
9c:fa:d3:8a:59:7d:37:e9:e1:cc:02:c2:a2:20:1f:
d4:dd:f4:ad:21:bd:aa:43:39:de:43:f4:aa:17:47:
a4:38:e2:7f:d7:54:21:24:a2:fb:94:fb:1d:b8:ea:
39:c9:7e:d3:38:50:34:bf:28:2f:99:28:73:80:47:
09:ed:57:ab:6a:38:ee:5f:ab:dc:22:fd:7c:f8:0b:
10:db:1c:ea:1d:20:42:49:34:f4:f7:65:d9:72:f7:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2D:F1:1E:0D:E5:64:52:BD:13:97:A3:BA:FC:44:48:F2:C6:F1:42
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a7:75:e6:ca:19:bf:bd:fd:39:6e:cf:6a:3f:a6:93:dd:e4:
7c:1c:a9:be:95:3b:28:42:e9:b1:61:7c:7c:79:0f:9b:66:16:
cf:0b:66:b9:d5:25:44:f4:91:70:2f:f2:8b:81:9d:48:80:b4:
84:f6:07:14:bb:53:a0:7c:87:e5:84:70:90:a7:9a:19:86:90:
67:5a:80:67:a6:86:93:fb:eb:32:31:e6:95:7b:37:82:dd:51:
67:65:31:c5:a4:36:19:92:81:af:f6:56:97:8d:ce:1f:45:3d:
48:3b:5e:3d:94:61:23:2b:6e:16:25:4b:b2:67:f4:67:4d:69:
df:9a:a3:71:0d:12:7e:79:67:64:de:99:8d:e8:75:fd:34:bb:
71:d6:a4:e3:5a:5d:8d:ac:18:26:dd:e9:41:56:32:3e:9b:95:
97:ca:6e:12:70:78:9d:a5:d7:d7:a2:eb:82:c2:08:06:d0:60:
c7:9d:6b:77:fa:9e:01:75:2c:38:0e:a4:90:39:c4:aa:1a:de:
f2:88:f8:26:32:ee:f1:27:93:88:79:eb:0b:3b:30:ee:f3:8c:
10:54:84:1d:95:91:c3:18:a4:c2:e4:63:1c:5b:52:22:52:d4:
52:38:5f:f8:af:ed:42:7a:2f:d3:75:02:86:fb:4a:36:0a:bf:
28:0d:7b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:02 2025 by rpki-client