Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
File: RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json)
Hash identifier: QzhltI6mAXAc6Qd9TkF7MREijGEzGcm957BIwPAeg7Q=
Subject key identifier: 71:45:B0:4E:B1:F5:BB:2A:9C:D4:1A:51:03:06:33:5C:60:21:A7:9B
Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
Certificate issuer: /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Certificate serial: 0194BCA9A23AA05B45609B2803BE427C6C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
Manifest number: 050F
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: AR6+exRBAf94EdJKZmpJRpSU0pOtTqsPLlRITXTDEdw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a2:3a:a0:5b:45:60:9b:28:03:be:42:7c:6c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=7145b04eb1f5bb2a9cd41a510306335c6021a79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:dd:7d:6d:57:b3:56:d5:e2:bf:58:29:51:
f3:b9:4c:82:e9:a1:47:54:2b:29:f3:1e:29:09:b7:
1a:c0:d3:72:4f:d0:f9:3a:68:fc:53:a2:63:da:61:
99:6e:1f:b6:55:86:96:c4:76:ce:fd:89:c6:bc:0b:
05:a5:46:ca:85:9d:4c:d2:c5:7e:98:f1:7a:81:5a:
b2:16:58:76:9e:1c:ef:2b:52:0e:92:6a:1c:c4:06:
c5:78:c6:0a:bb:4c:1c:55:50:7d:60:77:d1:26:7c:
df:c0:90:ea:7b:bd:7c:a1:e7:d6:fd:1f:80:42:f2:
a1:40:cd:b4:19:ce:92:e4:bf:b0:d8:fb:ca:60:12:
bc:4f:23:e6:4b:93:3f:57:83:38:c3:7c:05:87:45:
f5:09:31:2b:2f:5b:86:49:45:2b:6f:41:0e:24:e4:
63:cf:35:f1:d9:3b:c7:89:48:24:44:f8:0c:ab:91:
56:78:5b:0c:38:bf:97:19:59:10:8a:6f:b5:89:66:
97:26:76:d2:75:7c:4d:e7:b6:8e:e1:92:f7:35:ff:
4c:12:23:5f:64:75:78:08:f1:8c:e7:9d:c7:b5:96:
e8:75:9c:f1:c5:b9:ee:21:64:06:76:d5:d3:ec:e6:
9f:2c:dd:1e:ff:86:d9:b5:5c:ac:5f:c9:96:04:01:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:B0:4E:B1:F5:BB:2A:9C:D4:1A:51:03:06:33:5C:60:21:A7:9B
X509v3 Authority Key Identifier:
keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a8:fa:dc:79:aa:f8:85:33:c7:76:c7:77:b6:0d:f2:60:3f:
f8:7b:3b:ce:7e:71:62:23:5a:2e:ab:bc:6a:53:14:b3:c9:92:
9b:34:53:a1:42:43:93:cb:c9:a1:ff:76:ff:6a:7a:cd:72:94:
5e:a7:88:bf:3f:33:48:e6:cc:76:27:59:a6:f1:8e:70:65:1b:
1a:ca:65:a3:2c:e3:08:89:5c:89:07:03:e2:db:7d:dd:5a:5a:
1f:3b:34:e1:90:84:97:a6:1e:c5:16:e5:56:7a:a7:52:d2:df:
33:53:8e:21:47:68:e9:43:c6:a4:58:27:02:e8:86:76:7a:d6:
a7:25:00:e3:b3:d9:f5:3f:1e:4d:31:22:f6:4c:5e:53:c2:0d:
11:e0:23:7b:ec:c1:4b:41:5f:f6:cf:5c:5d:d1:6b:eb:1d:29:
a4:d5:16:90:d6:d1:d8:b2:3d:13:7b:86:d4:90:e8:0f:70:e7:
94:8a:27:54:cd:dc:80:da:68:e2:96:75:b6:d1:fb:4d:d6:73:
6c:a0:a7:c5:89:9f:78:6f:4d:98:c5:9a:68:38:46:8e:ef:b6:
f0:dc:87:87:62:3f:c5:3d:d9:01:86:e6:53:da:74:90:bf:23:
00:c7:07:60:31:3d:12:f9:15:b3:77:61:67:23:01:df:6f:0f:
00:ba:d0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:03 2025 by rpki-client