Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.mft
File: R4SxW2vT-4f1J58Ym584GvyRmXE.mft (raw, json)
Hash identifier: 2EHHO5gzU/xlBsYKYn4ZKBEC8Fdj9kTyUaco7Hdwhtc=
Subject key identifier: 0B:6B:E0:55:21:25:90:6D:F1:C2:8B:09:20:8E:D4:85:C7:07:75:8C
Authority key identifier: 47:84:B1:5B:6B:D3:FB:87:F5:27:9F:18:9B:9F:38:1A:FC:91:99:71
Certificate issuer: /CN=4784b15b6bd3fb87f5279f189b9f381afc919971
Certificate serial: 0194BBCDE9A662D40F9F515A1A36A2CC07AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4SxW2vT-4f1J58Ym584GvyRmXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.mft
Manifest number: 09E2
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: R4SxW2vT-4f1J58Ym584GvyRmXE.crl (hash: WGotmbHikREx1FFOgVJD1bdb8kah2SifT+tcY8N4rGY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e9:a6:62:d4:0f:9f:51:5a:1a:36:a2:cc:07:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4784b15b6bd3fb87f5279f189b9f381afc919971
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=0b6be0552125906df1c28b09208ed485c707758c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:d9:ce:b5:04:b5:85:0b:19:78:f8:07:c6:
ca:51:3f:03:64:4c:d2:8f:62:bc:dd:7a:63:80:50:
96:0b:3e:dd:6f:3d:bd:a2:bf:c4:c4:04:93:18:99:
30:d0:ad:f9:98:5a:ba:82:36:61:da:e6:2c:3c:d5:
06:7d:2a:1c:de:ab:65:81:95:0b:90:0d:b8:88:c9:
95:3d:7a:ec:eb:d8:f1:67:ef:a8:ab:3a:1e:d7:2d:
35:5e:a9:52:19:2a:f7:85:3b:9d:0c:42:21:97:26:
ca:6b:d7:d5:95:c4:bc:fc:2f:bb:8f:a0:d5:d7:5b:
e3:c4:ac:5a:e2:de:b2:70:53:51:a3:df:85:b9:34:
59:bc:0d:cf:ac:90:7a:73:87:6e:c7:7a:18:d7:84:
4d:07:82:2a:81:9a:38:1a:b7:99:2e:9c:c6:68:fa:
a6:b7:37:5e:33:5f:7f:7b:21:51:1c:98:4b:53:e2:
df:3b:c1:5f:ad:81:e9:bf:37:7f:d7:04:93:ef:64:
0a:f9:3e:ad:ee:b3:6d:c8:30:64:d4:69:e4:1a:68:
90:37:73:3e:ea:f9:d6:02:9d:df:d0:c9:fb:54:5c:
c3:fa:8f:81:6b:d4:34:04:e5:28:53:95:07:9b:11:
40:d8:6d:ed:ad:e8:c9:c2:33:48:a7:2a:54:7a:7f:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6B:E0:55:21:25:90:6D:F1:C2:8B:09:20:8E:D4:85:C7:07:75:8C
X509v3 Authority Key Identifier:
keyid:47:84:B1:5B:6B:D3:FB:87:F5:27:9F:18:9B:9F:38:1A:FC:91:99:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4SxW2vT-4f1J58Ym584GvyRmXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ffe8a0-9145-4217-b6d9-cae9a13d70ca/1/R4SxW2vT-4f1J58Ym584GvyRmXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:91:a6:e7:5c:8b:72:6d:4b:6b:57:ab:a3:db:52:bc:45:06:
2d:f6:55:ae:98:34:46:3e:c4:7b:7e:c8:2d:00:ee:89:62:17:
4f:3f:1f:6f:11:fd:ae:f7:dc:ae:7e:32:61:bf:ff:dc:ce:46:
56:09:de:4f:bb:fd:1b:7b:f9:2a:6d:c8:f0:b1:e0:98:e0:3e:
f7:00:fe:13:76:34:38:23:fc:e5:25:3a:ff:b7:60:e1:05:67:
54:5d:64:b3:c9:a1:45:f0:06:7d:49:96:6a:40:e5:86:c7:e6:
23:70:28:cd:0e:94:cf:67:ca:3d:76:95:bf:54:86:fa:8f:53:
0e:a7:ac:a5:f0:ce:44:93:70:ed:b4:b5:cc:2f:ed:8b:66:9d:
d8:c2:9c:d8:5d:73:69:95:c6:8b:f7:b4:cc:f4:39:73:d1:a7:
a1:63:e1:7b:e5:e2:1a:46:e9:b6:5b:2f:4f:2b:4f:44:e2:fe:
ba:b8:b6:a5:e0:8d:ed:be:df:9f:32:29:7a:f1:d4:c4:08:31:
a5:06:b5:87:1d:9d:42:69:4c:65:0d:69:69:86:15:b3:7c:02:
95:a2:d7:2c:c4:f0:c8:50:cb:60:97:81:76:6b:5e:16:5f:0e:
be:22:a1:90:e9:3c:6a:77:46:20:14:11:43:5f:f1:3f:68:7d:
0e:17:f4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:39 2025 by rpki-client