Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21a53c-63ef-4fc5-9549-3bf61779ddc7/1/rjRcTQnm4iTh2vRmV9PHEYewIjY.mft
File: rjRcTQnm4iTh2vRmV9PHEYewIjY.mft (raw, json)
Hash identifier: d0eTcQJ4XVzTwqjH/9euatqMYaC1DWvPfFG1rPrcs90=
Subject key identifier: 9E:DD:5A:BF:FF:29:EC:9A:66:F1:C6:18:75:88:93:11:4C:E4:AD:C8
Authority key identifier: AE:34:5C:4D:09:E6:E2:24:E1:DA:F4:66:57:D3:C7:11:87:B0:22:36
Certificate issuer: /CN=ae345c4d09e6e224e1daf46657d3c71187b02236
Certificate serial: 0194BCE0C860C73E859154EEC2C338E67569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjRcTQnm4iTh2vRmV9PHEYewIjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21a53c-63ef-4fc5-9549-3bf61779ddc7/1/rjRcTQnm4iTh2vRmV9PHEYewIjY.mft
Manifest number: 0374
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: rjRcTQnm4iTh2vRmV9PHEYewIjY.crl (hash: BNFHiyce4Vk+B/kfIv1b6yjmY+8W/dsXaHLcxJVXfWQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c8:60:c7:3e:85:91:54:ee:c2:c3:38:e6:75:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae345c4d09e6e224e1daf46657d3c71187b02236
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=9edd5abfff29ec9a66f1c618758893114ce4adc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3b:c3:a9:8e:e9:3f:7f:63:c0:30:41:77:c8:
d1:cb:01:68:d4:e3:63:93:08:52:56:b1:14:cf:28:
e2:4e:2f:fb:20:de:13:1b:dd:d3:e0:f0:2f:6d:c1:
a7:43:18:29:54:51:7c:31:82:bf:45:18:69:bc:e7:
b0:59:04:4a:61:6b:33:d6:57:71:28:c4:64:68:9b:
29:36:17:55:06:b1:d6:7b:4b:5c:f5:11:f5:87:6b:
15:b7:64:bd:ad:a6:f9:6b:5c:1e:7d:6d:c3:e4:3f:
77:ef:b7:f4:12:d9:a5:14:f3:7a:13:84:72:8e:11:
41:40:da:84:a6:47:f5:7a:43:4d:88:a2:de:b6:70:
46:2b:e1:ac:9a:60:78:df:4c:ae:b1:53:c6:13:3a:
d8:31:e7:bd:d6:16:c4:7b:be:96:ef:87:fe:ac:48:
e3:da:82:d9:4f:48:cf:06:ba:bb:f9:6a:15:f8:dd:
f6:28:aa:4f:1c:ae:7c:73:ba:d9:63:60:ad:17:e6:
88:d0:fc:77:2a:54:88:4a:7a:7e:64:53:d2:39:60:
fe:3f:2c:57:70:12:8b:39:5d:1d:9d:d1:50:8f:d5:
71:41:d0:18:54:88:7e:9e:b7:0e:74:fd:36:83:d5:
21:d5:36:ac:82:d0:ba:c2:0a:50:e3:49:fb:c9:5e:
83:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DD:5A:BF:FF:29:EC:9A:66:F1:C6:18:75:88:93:11:4C:E4:AD:C8
X509v3 Authority Key Identifier:
keyid:AE:34:5C:4D:09:E6:E2:24:E1:DA:F4:66:57:D3:C7:11:87:B0:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjRcTQnm4iTh2vRmV9PHEYewIjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21a53c-63ef-4fc5-9549-3bf61779ddc7/1/rjRcTQnm4iTh2vRmV9PHEYewIjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21a53c-63ef-4fc5-9549-3bf61779ddc7/1/rjRcTQnm4iTh2vRmV9PHEYewIjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cd:13:ff:a1:29:4f:9d:92:67:c9:2a:6f:65:14:fc:b4:8f:
62:a6:6f:58:a8:a5:24:cf:ec:91:81:43:13:d8:b4:95:4f:05:
e0:27:6d:fa:97:5c:32:24:b4:56:53:bc:da:1f:bb:51:20:f5:
c9:a1:8f:8f:f2:fe:6b:67:f0:d0:c6:0c:a7:bc:8d:03:f6:11:
d0:ce:16:da:83:13:07:b3:e5:95:5c:a0:ae:d7:f8:6c:6d:bf:
63:0c:80:a5:38:8d:35:47:c1:06:25:da:7b:2c:48:45:e3:46:
24:26:cb:1e:a7:02:0c:25:35:87:2a:2a:d6:02:75:8e:06:42:
2a:39:a7:22:a3:a0:88:0f:22:60:38:7b:16:4d:e0:21:21:47:
bf:86:81:13:73:fb:bc:22:6d:40:cc:2b:dd:62:6d:2b:9b:c9:
96:75:9b:24:2e:71:03:37:00:d7:06:d2:4e:c4:8f:89:61:41:
11:3a:6c:ab:e4:58:ae:48:98:29:6e:94:21:49:d4:f3:a6:7f:
1e:c8:f9:4e:d8:f8:af:74:a5:24:bf:23:98:7d:80:32:04:96:
0f:16:43:eb:56:07:39:ab:96:27:03:2e:4f:3e:6b:43:a6:cc:
52:d4:f1:e9:89:f0:12:bd:31:ac:2d:d7:cd:e8:aa:42:f5:38:
97:ad:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:14:14 2025 by rpki-client