Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
File: W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json)
Hash identifier: J3+GxjVMTKayn9dHzX3mrg5idAshbt5trWYV39kU83s=
Subject key identifier: 3B:88:D9:F1:CB:E5:F2:27:27:D0:13:72:59:C8:68:08:3C:DD:79:C5
Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
Certificate issuer: /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Certificate serial: 0194BD174C01FEE7EAF68E5D291E68FD9202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
Manifest number: 0274
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: Mci/rBa7VFf4F9PUeddv6AHbxGhBbmgSQTZqD0DnIsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4c:01:fe:e7:ea:f6:8e:5d:29:1e:68:fd:92:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=3b88d9f1cbe5f22727d0137259c868083cdd79c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:fc:a8:07:66:d8:21:1a:ed:b1:78:9f:53:
35:36:05:c5:63:47:fe:7e:4e:01:ea:13:53:a4:49:
41:ac:a7:e2:f7:9b:f0:51:80:66:76:14:41:3a:a0:
8d:1c:a7:e1:37:1c:ef:b0:12:4e:d0:8c:87:36:15:
fc:6d:82:36:06:77:b3:11:f6:b4:d0:d9:a1:9f:d9:
f1:b9:b5:9c:65:9d:72:cf:60:49:2f:94:ac:54:fe:
71:c3:32:04:99:f3:90:db:b4:eb:16:f1:16:74:bc:
50:b8:07:2d:99:77:92:3d:49:fc:f3:98:9a:b3:6c:
25:ce:b5:ea:02:ef:ff:ef:2a:07:db:71:ec:7a:c2:
2b:c2:73:29:21:2f:1f:a3:58:bc:4e:eb:bd:78:94:
fa:37:f4:66:5b:40:f8:03:bf:48:7f:f7:a9:ba:df:
f7:81:cd:1b:66:a8:d4:75:74:50:84:af:62:a3:83:
28:12:1d:27:d7:16:24:04:60:7a:79:cd:d4:30:79:
26:e4:a3:f8:ac:a7:92:98:ec:4d:56:f4:48:97:49:
ef:ce:f8:b9:ca:82:36:6c:39:30:7f:df:4c:e4:09:
da:57:f0:38:c9:62:08:aa:4d:1f:41:1c:3d:5a:ec:
99:3d:d8:26:e9:b3:9b:9b:a6:4a:9b:60:31:b5:f2:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:88:D9:F1:CB:E5:F2:27:27:D0:13:72:59:C8:68:08:3C:DD:79:C5
X509v3 Authority Key Identifier:
keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:63:80:c6:e8:8a:6c:3e:53:b0:ca:e1:c1:e7:e9:b8:a7:2f:
6f:32:32:22:44:2c:74:a8:4e:63:b5:60:5b:7c:95:16:75:36:
eb:22:3f:81:08:26:18:4f:81:56:f9:ad:4b:72:ff:72:09:f4:
6f:bc:b8:1b:a1:b7:77:90:75:db:18:5f:48:b1:1e:18:ff:7c:
1c:32:c7:02:f0:02:65:f9:8f:07:00:e0:50:dc:10:63:fd:69:
dd:c3:b0:da:19:09:85:f7:86:cb:b3:43:96:65:4d:90:c0:4c:
de:62:dd:8f:cb:1a:c0:47:64:2f:89:39:0d:ee:14:a9:c9:a9:
37:9f:9a:a8:1a:f8:f2:ca:58:9c:a7:71:cd:6a:df:e4:c9:72:
a1:fe:e1:e1:d4:79:21:70:59:e3:ca:9e:f3:a7:ba:08:93:0e:
d2:53:ff:e1:bd:0e:8e:63:9b:73:f7:87:49:31:09:55:22:20:
98:c1:96:f8:33:35:93:6a:1e:0e:36:a1:b2:80:4e:ef:0e:04:
97:d6:86:54:3f:c9:b5:f5:b1:a4:27:33:4c:ba:65:49:85:ad:
a6:9a:1b:16:0b:de:2d:9c:ed:f6:eb:a7:0a:61:e7:94:8b:44:
d3:36:e3:d9:a5:a4:81:32:f3:e8:af:5b:30:5f:4b:93:f6:9a:
89:d0:95:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:31 2025 by rpki-client