Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier: GpbvLrCPs6RdXfXNWMTCykV/HmZatrQLq3b3H60pU2Y=
Subject key identifier: 84:B9:2C:91:BA:F4:90:CB:92:69:E1:8F:A0:AF:E5:91:45:DC:2D:DE
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 0194BCAA0B38AAD60949BDA8087001D2DC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number: 0C72
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: N2kQGBC4PGf/T06I0i3ZH/TE5eQEk8/L80GKCEzRW9Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0b:38:aa:d6:09:49:bd:a8:08:70:01:d2:dc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=84b92c91baf490cb9269e18fa0afe59145dc2dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:5a:f9:af:6e:4e:6d:f2:e3:8f:21:f6:31:
96:12:75:0e:ca:a4:2c:fd:0f:9d:d4:04:24:38:f3:
fc:7a:92:85:49:84:63:70:f3:1c:99:a8:67:a5:49:
c7:0a:08:95:88:53:3a:b6:26:8f:69:c8:96:f6:4b:
fd:02:f2:2a:c8:5e:aa:89:02:a8:24:7e:56:91:49:
d9:61:bf:aa:06:4e:c4:64:b4:a8:40:e0:24:96:98:
f1:33:2d:21:4a:f8:b8:b7:06:e0:07:0c:9b:fa:87:
4c:6c:4e:97:3a:c1:99:45:f9:90:5e:34:86:9d:53:
74:75:2b:55:74:9d:97:99:11:42:8a:b3:73:fc:31:
9b:4f:08:af:23:a4:a4:93:d4:52:92:8d:a6:1b:08:
e8:1a:e9:d5:27:8e:b1:f6:2d:9f:2e:58:22:8b:de:
03:e7:bd:15:34:c5:cd:12:0a:29:09:b4:1e:cd:71:
ab:8f:5b:4c:ce:b6:db:30:1b:32:fa:23:77:ad:ae:
ae:34:c2:77:e7:55:ec:2f:8a:c4:8d:7c:99:d5:b3:
c4:f1:5a:38:ce:05:66:a2:4e:0c:70:2a:23:35:eb:
4d:d8:5f:e3:99:b0:40:ca:c3:cc:0d:e9:36:50:a5:
74:58:84:0a:a0:2b:88:df:03:0b:26:54:eb:a8:d0:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B9:2C:91:BA:F4:90:CB:92:69:E1:8F:A0:AF:E5:91:45:DC:2D:DE
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:ba:72:ae:df:75:12:56:2c:e0:29:88:b4:fe:fa:8b:52:
40:ed:70:41:2c:f4:48:6f:38:33:f5:8d:6d:dd:69:b1:69:ce:
2d:d8:45:a0:2a:23:e9:3d:84:ca:45:75:26:03:66:39:e3:ae:
ff:12:7f:43:5e:5b:b1:9d:18:62:30:3b:c0:c6:57:24:3f:ba:
6e:ee:96:96:cd:d6:0e:fb:50:6d:29:89:7f:68:c2:37:cd:4e:
aa:2c:cb:d9:07:17:b9:7a:3c:7e:7d:64:1a:52:27:59:3b:fa:
1d:cd:03:6a:fe:ac:7a:6e:32:a5:f1:b7:c4:18:dc:be:5f:99:
23:28:cc:71:84:cd:5c:3c:5e:cf:6a:d3:ed:28:ec:30:9f:c6:
bc:3e:4b:b7:3b:62:e6:c1:05:7c:46:58:bb:72:15:a6:22:28:
ae:36:e8:4a:5b:90:fd:fd:2b:a8:b0:3f:dd:0b:05:6b:23:45:
e2:a9:14:78:58:96:9e:3a:9e:59:c4:54:85:cc:25:70:21:5a:
0d:d0:e6:6b:34:6e:ae:f9:8c:cf:ea:60:ed:24:7a:2a:77:fb:
2e:5a:74:41:f7:ff:6a:4c:a8:d3:62:cf:42:90:36:59:d6:37:
0b:53:ec:95:fc:f5:52:46:4f:cf:ea:66:8d:c6:4d:5a:af:50:
82:1d:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:20 2025 by rpki-client