Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
File: pr640lzi1AsMuuWcEeKSvTcXDfo.mft (raw, json)
Hash identifier: s2N1Pvcd3zFjbX+Db1PpVz/cw+gitccfLUOG5r5Ogds=
Subject key identifier: C1:E4:19:A4:FC:AD:FE:19:FD:89:F7:79:10:DD:48:29:FD:12:EC:D3
Authority key identifier: A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
Certificate issuer: /CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Certificate serial: 0194BCA9CD5667BB193FE5088D7BCAAF69AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
Manifest number: 0E22
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: pr640lzi1AsMuuWcEeKSvTcXDfo.crl (hash: GQ0wFDoMmrlwc4RyFbi//BTn4F/5tgrNlmcQQG/Hbi4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cd:56:67:bb:19:3f:e5:08:8d:7b:ca:af:69:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=c1e419a4fcadfe19fd89f77910dd4829fd12ecd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:e5:0f:45:3a:8e:33:39:e1:1c:a2:a3:bb:
ae:60:bc:e3:22:cd:fc:27:09:4d:73:84:51:a2:05:
0f:38:80:ac:8a:75:61:46:3a:e2:a5:2e:7f:b7:48:
21:82:c7:b9:24:d9:cb:57:99:5b:57:47:30:cf:75:
01:59:44:6c:88:34:6b:11:a3:73:7e:73:24:bc:2f:
bc:cc:da:59:e2:64:3c:e5:d8:6c:d8:07:0f:aa:f7:
c7:d9:96:aa:3f:74:69:a6:07:ab:22:60:48:53:ba:
ab:46:43:d2:8c:07:af:d8:d6:63:40:db:cc:69:51:
ed:d5:df:07:6d:f0:01:9f:a8:f9:54:53:45:54:63:
21:16:75:5e:35:91:a0:c0:95:29:07:7a:5a:43:c6:
d7:41:ae:35:90:56:2c:40:f5:60:bf:63:5e:e1:e0:
1a:0d:c1:53:4b:48:ed:b1:5a:1c:bd:a0:68:d0:07:
aa:0e:e3:3e:28:68:d1:e7:36:8b:a0:28:9b:98:7a:
d6:f8:b7:45:b3:04:25:e2:46:44:2c:37:7f:d9:bc:
f4:58:91:2a:b7:d5:a7:91:2e:55:87:90:3f:79:e6:
5a:cd:22:58:c1:bf:f0:4b:da:9e:fe:6d:0a:0e:e1:
4f:08:94:f6:9d:37:6d:07:25:b7:79:5e:05:49:b0:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E4:19:A4:FC:AD:FE:19:FD:89:F7:79:10:DD:48:29:FD:12:EC:D3
X509v3 Authority Key Identifier:
keyid:A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9f:fd:ff:90:31:fd:64:a2:73:99:3e:5c:ad:8e:0e:23:10:
61:d8:76:f8:c6:50:5b:d2:da:91:f6:13:92:51:dc:f6:71:d3:
da:c0:7f:69:a4:26:66:b4:66:30:06:62:fb:86:67:f8:6c:5f:
9a:54:92:82:5f:3d:48:e3:97:d0:9b:15:00:86:bc:9c:7e:b6:
52:24:f5:d7:1a:a3:c7:ec:f7:22:95:16:fe:69:83:f5:a2:41:
73:21:6a:28:77:b6:c5:a5:6f:c5:f0:50:16:e3:c3:7b:d8:07:
b6:1e:81:8e:b7:b8:4a:1d:81:33:19:ca:31:e8:64:4b:ac:a3:
31:03:d5:3d:58:76:e0:44:20:44:10:b7:df:88:0b:b1:6e:e7:
0f:3c:df:9f:40:39:c6:b0:98:66:40:ea:ef:ff:7c:38:e4:55:
5f:cf:20:3b:8b:aa:87:f2:e7:f4:92:20:d8:a0:79:c2:ee:43:
0a:c9:fe:ba:bd:78:a7:ab:1c:4d:dd:fd:ac:e2:5b:ba:54:08:
b0:38:60:08:77:2b:95:0c:d1:ad:2b:3e:f6:f2:d6:cb:92:bd:
28:db:8c:6c:41:f8:c5:65:4a:8c:4f:c9:83:48:89:37:53:7e:
8f:5b:d8:7f:a9:a3:f9:e4:76:dc:06:5f:c3:a3:d3:e8:c1:9a:
01:29:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:17 2025 by rpki-client