Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
File: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft (raw, json)
Hash identifier: Sn1WJ+zvc/6FDmM9cf/L14yoEfLTavm/FUAbZuGhr7c=
Subject key identifier: 7E:96:30:CB:68:62:A5:0E:EF:57:D2:6C:D1:67:38:D1:39:C0:4C:F6
Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Certificate serial: 0194BBCE79F537C64AF302F71069C996135C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl (hash: GSmPnideiqG/Ymhvg5wKSj3GIAb3XGTKVFExk7kkv3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:79:f5:37:c6:4a:f3:02:f7:10:69:c9:96:13:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=7e9630cb6862a50eef57d26cd16738d139c04cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:f2:8c:2d:2a:6c:11:47:18:f2:df:31:f5:
a4:fd:f4:66:4b:b2:ca:a1:91:58:ed:a8:41:b7:b5:
09:32:97:c8:ba:90:33:6b:ae:7d:66:57:ed:84:d1:
96:a5:12:ac:97:5d:44:0a:72:ed:27:02:35:d6:8a:
d3:c7:d9:99:5a:f0:93:64:99:f5:b8:6b:e5:c0:24:
f5:2b:17:bf:02:a8:e2:92:07:f8:74:cc:07:ee:9b:
26:6f:3b:d9:70:8b:70:93:da:8b:0f:af:07:ac:2c:
20:0f:c8:89:a0:e3:ae:27:1f:7a:bd:c3:ea:33:e5:
ec:f4:31:cf:24:e4:35:53:85:2a:d7:31:bd:23:33:
82:2a:6c:5c:89:28:97:96:d4:ce:14:63:19:5e:ce:
33:3d:16:f7:71:6c:17:70:a0:41:83:0f:6a:12:6b:
44:bc:6f:e4:13:a7:4f:08:69:21:1f:a2:15:8e:0c:
c7:b5:3c:c4:e0:70:c9:e2:9a:8f:4c:42:c5:1f:02:
a7:d1:67:7f:77:c8:94:83:f9:35:45:2c:88:b8:4f:
6b:5a:59:ee:5a:a7:2f:a2:bd:d3:a9:30:90:87:ac:
94:7e:27:c8:5d:6b:0b:c0:1e:b4:91:5b:55:3e:e0:
7a:e0:01:65:62:ef:71:fc:9f:1f:f3:44:e9:df:42:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:30:CB:68:62:A5:0E:EF:57:D2:6C:D1:67:38:D1:39:C0:4C:F6
X509v3 Authority Key Identifier:
keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:68:a9:20:1b:0e:dd:89:3e:bb:aa:fa:82:18:db:57:a2:df:
59:92:9f:08:fb:27:66:8d:42:a1:ad:7e:c9:15:f8:69:5b:c6:
f0:5c:72:fe:b3:b8:67:d1:aa:35:ce:fe:45:3f:3b:9d:9c:63:
d1:f4:58:4e:2e:26:1f:19:fc:96:d9:f6:be:10:61:ee:ab:f5:
fe:5b:9f:ae:c5:87:a4:13:30:62:35:4f:81:5f:f3:c4:5a:fc:
b9:be:f7:1a:3a:f2:7a:db:2e:dd:ea:5c:71:35:ec:cc:d2:7b:
3d:2e:21:06:5f:53:89:80:77:ed:ee:0a:a0:30:46:dd:86:bd:
99:ca:dc:14:e6:f4:df:67:0f:18:27:af:60:ea:7a:c1:4e:1a:
9c:11:ea:37:e0:6e:4f:d9:35:af:d7:a3:c7:b8:d6:c5:ef:a2:
fa:63:2d:c4:a1:b3:8f:2e:51:3d:19:23:c6:a9:f0:0e:ac:69:
69:e4:78:ab:a9:07:dc:dd:58:9c:d3:11:be:92:f3:56:98:c0:
87:73:9c:b0:e2:b5:60:39:cc:f5:ac:13:d6:56:86:b4:8a:82:
68:91:08:f5:2a:ba:6a:7c:32:36:1f:4d:a4:85:20:05:cb:22:
f5:fb:f2:61:83:71:49:58:26:75:f6:77:34:76:2d:9d:39:53:
43:ad:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:39 2025 by rpki-client