Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/943d75-130c-4f52-a760-8fdf7d9b4fb8/1/ANIfTQxk6v5tpTvmpXk6rNedabI.mft
File: ANIfTQxk6v5tpTvmpXk6rNedabI.mft (raw, json)
Hash identifier: UE3FS7vgJ1AAWmfCKzFSOm2Ain4t/KaX3g8MMXlz/7Y=
Subject key identifier: 4A:7A:E2:D8:34:D9:00:C6:E6:4A:F4:1D:60:E1:CA:29:FE:2C:C4:9C
Authority key identifier: 00:D2:1F:4D:0C:64:EA:FE:6D:A5:3B:E6:A5:79:3A:AC:D7:9D:69:B2
Certificate issuer: /CN=00d21f4d0c64eafe6da53be6a5793aacd79d69b2
Certificate serial: 0194BC72F54A89E5AD21DA25C45931F717D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANIfTQxk6v5tpTvmpXk6rNedabI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/943d75-130c-4f52-a760-8fdf7d9b4fb8/1/ANIfTQxk6v5tpTvmpXk6rNedabI.mft
Manifest number: 10C8
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: ANIfTQxk6v5tpTvmpXk6rNedabI.crl (hash: ENriZiS7xWTiNgdkQLeKRUYjrsPM+FWsvERfGpo4meU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f5:4a:89:e5:ad:21:da:25:c4:59:31:f7:17:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d21f4d0c64eafe6da53be6a5793aacd79d69b2
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=4a7ae2d834d900c6e64af41d60e1ca29fe2cc49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:8c:4b:d8:38:cb:d4:9e:c4:6c:c1:9a:45:
55:f8:77:a8:2d:4f:08:d4:89:d8:ec:a3:8d:95:6f:
11:37:65:be:3c:62:8a:42:89:c3:77:28:81:79:fb:
e1:3f:4f:2d:7c:a6:f3:73:36:7e:40:b2:49:e3:2d:
b3:93:81:4a:da:83:3c:6c:f3:60:43:24:dc:e6:38:
e5:0b:79:ea:8e:14:61:fa:ba:51:60:eb:85:e1:12:
c0:07:50:b6:7d:78:30:d4:b8:09:61:be:a1:86:b5:
fa:c9:65:6f:97:27:9c:60:be:d1:e3:a1:4f:26:56:
fb:83:26:f9:76:b0:13:fc:20:b8:9d:6b:68:39:ee:
03:7c:fa:7e:b4:57:5f:cc:3a:37:13:b4:3e:21:d6:
3d:f5:db:87:e6:43:cd:e5:5d:40:da:44:08:9f:b4:
69:81:2f:ef:3e:4e:0a:c1:35:8a:80:b5:47:04:bb:
08:77:1c:82:1c:71:7a:4a:75:04:61:bd:b0:0f:48:
68:43:fb:6a:ad:a6:20:04:68:e2:df:be:ef:ff:5a:
2d:a6:03:11:68:35:36:82:0d:6d:66:ce:82:f3:18:
2f:4f:ca:31:65:d8:c5:61:10:ed:b6:58:89:4e:0f:
ec:7c:77:90:ba:6d:de:83:f9:8b:f7:66:f0:02:08:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7A:E2:D8:34:D9:00:C6:E6:4A:F4:1D:60:E1:CA:29:FE:2C:C4:9C
X509v3 Authority Key Identifier:
keyid:00:D2:1F:4D:0C:64:EA:FE:6D:A5:3B:E6:A5:79:3A:AC:D7:9D:69:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANIfTQxk6v5tpTvmpXk6rNedabI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/943d75-130c-4f52-a760-8fdf7d9b4fb8/1/ANIfTQxk6v5tpTvmpXk6rNedabI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/943d75-130c-4f52-a760-8fdf7d9b4fb8/1/ANIfTQxk6v5tpTvmpXk6rNedabI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:86:9a:34:55:af:03:33:ad:6c:31:c1:01:67:8d:05:01:90:
70:78:e5:3c:ae:e3:12:37:06:40:3d:09:ad:fe:4e:ad:a8:e8:
a1:c9:ef:19:b6:7a:a6:eb:02:5b:1b:ea:53:6b:f0:2d:d3:43:
94:0a:b2:08:63:f9:96:e9:da:b2:83:b3:dc:76:3c:e1:ba:2e:
36:db:4f:ca:b1:5e:47:f1:98:3c:17:20:3f:6b:97:4d:2f:96:
3d:31:b3:ea:b1:cc:b9:15:eb:6e:b7:19:2b:a0:e2:f9:8d:46:
e4:fd:a5:12:6e:1e:a3:61:a6:8d:56:13:02:78:e1:47:98:b9:
2f:ac:e4:6d:27:7d:77:d8:86:26:78:a6:62:b5:f8:b9:0c:d3:
7f:d8:0e:43:a1:c6:c8:af:8e:ee:2d:30:f0:5c:28:04:90:17:
65:91:89:30:85:3f:d5:c3:0e:d4:cb:59:ca:ad:2b:00:fb:93:
be:ff:0b:a3:ad:bd:f4:f5:bd:75:23:ed:e8:84:22:2a:02:d8:
e9:6c:c8:28:05:12:2a:74:67:af:26:a4:24:a6:54:b9:a1:80:
f3:01:a2:4b:42:a7:18:0e:83:e3:66:2e:4f:9a:37:21:22:54:
cb:49:1d:36:27:27:66:38:4c:9b:52:24:a1:40:0b:2c:22:d0:
83:2b:c5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:28 2025 by rpki-client