Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json)
Hash identifier: qi7sk53Fx4zPGRb2PEUDy5ESbGOQeX5C9wBCmPS5rs0=
Subject key identifier: 04:40:B1:67:DF:4E:1B:1E:90:B5:7B:40:42:81:58:E4:88:88:A2:8A
Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Certificate serial: 0194BD179961F9F3221E7362352131CEFB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: HAiNukvRA5oBJrmPCBDPiYiCKezdQezJyQBIfSGIhwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:99:61:f9:f3:22:1e:73:62:35:21:31:ce:fb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=0440b167df4e1b1e90b57b40428158e48888a28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:c3:55:5e:c9:29:ce:f1:d3:a2:c6:0f:be:
5b:11:ae:56:39:62:da:b7:b0:ee:f2:cb:71:98:e4:
34:96:3b:89:a3:9f:97:66:bd:60:f4:77:5e:a4:01:
30:81:5b:89:cf:e7:98:d8:01:e3:77:28:eb:0d:01:
22:3c:22:02:9f:ff:da:cc:7f:01:d5:d5:b2:b5:d6:
20:53:fa:a2:4e:66:f0:88:ef:47:6e:a1:b3:34:9a:
2b:5e:ba:7c:0f:2a:df:7f:33:27:83:0b:fb:20:d1:
9d:15:20:ad:62:0b:f3:ec:7e:99:ec:2c:34:15:67:
b0:42:af:74:fb:28:91:d0:8c:83:d6:a2:3f:1a:8d:
e2:e4:20:43:7a:20:a3:72:b7:f6:d3:42:f1:cc:68:
89:90:ae:e4:ab:f7:90:9f:64:a1:1d:eb:7e:a9:a1:
61:86:d3:71:e6:2f:69:a9:d3:07:d5:53:ce:4f:fa:
be:4a:9f:40:d1:ad:8c:69:b4:4b:f9:56:9b:50:8b:
ab:db:40:4b:c8:f6:3f:c0:e7:53:72:bc:1c:a0:46:
cc:a5:92:6d:c1:a4:a1:31:29:9e:c3:22:90:0c:01:
ac:45:37:6b:4d:0d:38:06:28:66:b0:2f:6f:a0:51:
27:4f:15:22:9b:d3:17:7d:45:75:e0:d9:b5:7d:19:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:B1:67:DF:4E:1B:1E:90:B5:7B:40:42:81:58:E4:88:88:A2:8A
X509v3 Authority Key Identifier:
keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:23:59:89:d8:f3:d7:f4:b1:c9:2e:ee:e2:95:8e:9e:5c:19:
14:13:d0:6d:7c:22:08:f1:3d:5c:8d:be:1e:7d:76:2f:69:9d:
81:86:33:0c:2b:14:aa:77:9f:e8:67:27:df:31:ed:14:3b:b0:
3b:7a:b4:9a:e4:a9:fc:fa:ce:85:44:bc:d8:6b:e1:e0:ab:f8:
a1:1d:1a:53:bf:a4:fc:17:f5:ce:ee:65:84:4a:3e:38:0b:1b:
80:a7:44:58:7c:12:de:47:e1:52:1c:12:ce:fa:a5:1d:e1:31:
66:80:f8:86:91:d6:c4:67:66:d3:fb:da:41:57:b3:47:e3:76:
c1:69:0e:10:22:5e:94:84:86:25:a4:06:36:9a:61:0e:cc:23:
df:58:fd:95:5c:f7:3b:9e:a2:d0:e6:ba:85:7e:d7:a3:8e:25:
8b:00:f5:00:71:01:d0:3c:8c:e8:1b:6b:7e:d8:15:78:be:64:
bc:5a:a9:eb:95:18:2f:7a:fd:da:f4:a6:42:90:03:82:51:19:
48:2c:92:52:9b:d7:d7:4c:3b:26:05:ec:e8:a7:ad:a1:3e:95:
00:20:5f:1e:0a:64:05:95:94:68:48:57:6d:3a:0e:f4:07:9e:
06:e7:f7:f4:8b:59:90:4f:ba:2c:bf:e6:b8:56:70:32:7f:29:
48:32:74:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:58 2025 by rpki-client