Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json)
Hash identifier: sweD8R4yVIOY5cy+IL+IlKVFmibzNxYfaOr5+j6kNVM=
Subject key identifier: 42:5B:EA:81:AE:53:18:4B:E0:A7:ED:6C:6C:31:BE:0A:68:F9:71:15
Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1
Certificate serial: 0194BD17F9FB010170D241320E88513CBAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: /BfdNA7anV/QLabi7cST3dXRiTJTITh0kY4Jbwodqks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f9:fb:01:01:70:d2:41:32:0e:88:51:3c:ba:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=425bea81ae53184be0a7ed6c6c31be0a68f97115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:86:fa:b6:b4:1d:3c:f3:be:31:64:5b:4d:
62:25:19:e0:4c:6e:1d:98:ea:c5:bd:3c:ae:fb:33:
0d:d5:ae:dc:e8:b2:c8:c1:27:4b:a7:95:31:49:f1:
6a:31:da:93:96:17:06:f4:fa:b7:52:ee:a2:28:6e:
a1:27:a5:ec:a4:73:07:88:3f:66:37:97:d8:55:1f:
e4:5c:d2:5c:83:01:2b:eb:ef:20:62:32:f4:bf:8e:
7b:5d:89:3a:a0:11:91:30:5b:fb:1f:fe:4a:b3:e4:
c2:a9:fa:ff:eb:7f:5f:35:59:aa:23:b5:b2:8e:64:
92:ae:39:03:14:d1:87:69:86:15:74:f4:57:ac:5b:
2c:dc:f9:e1:fa:a0:e6:25:bf:85:6b:c0:1d:5f:8a:
53:91:38:c1:65:b8:5c:95:eb:7f:59:b0:14:df:54:
a8:88:f9:5b:64:a3:4f:18:d5:a7:d9:09:6d:67:92:
2f:4d:4f:2b:d1:d2:f2:4d:44:ea:20:40:84:a1:49:
50:ce:f4:d2:70:df:e6:0d:c5:04:44:13:5b:37:42:
d2:0b:d7:d4:d6:90:bd:fb:5b:1a:1a:47:87:14:17:
ec:78:04:83:5f:ee:1b:91:3b:2c:ba:bb:ac:b5:c0:
f8:37:8c:7d:a0:70:78:8f:13:91:8b:7e:3d:9d:89:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5B:EA:81:AE:53:18:4B:E0:A7:ED:6C:6C:31:BE:0A:68:F9:71:15
X509v3 Authority Key Identifier:
keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:76:f0:9d:d5:25:7e:c5:9f:68:f9:36:0d:71:a3:cf:36:7c:
ad:25:4e:fa:80:c6:0e:c5:4d:68:3e:48:a2:e5:c6:66:14:5e:
0a:89:a2:c3:80:2c:c6:30:c9:b7:1d:c1:34:a7:07:b8:f5:80:
de:84:da:6e:89:f8:cc:19:82:93:af:39:ef:b2:52:1c:fa:28:
1b:0c:a8:ab:1b:32:d3:9b:e4:0b:df:81:3e:48:75:1e:60:d4:
d6:16:02:57:98:ff:63:da:b6:6b:f5:13:86:7b:0b:89:a7:d7:
a3:07:01:14:10:a6:7f:99:c0:16:1c:fa:7c:76:d6:75:f1:5c:
41:c4:a5:62:b0:50:72:2e:99:99:79:ec:b8:d8:10:8e:7b:7d:
bc:e0:e6:09:46:23:38:a3:c2:5a:8c:8c:53:09:7b:d5:9d:b0:
88:4b:f0:9e:a5:4b:9e:97:e5:e2:1d:d7:aa:1d:68:9e:fd:d4:
5a:d0:71:60:2a:d1:ed:6e:ce:e5:6e:6d:c4:88:97:c1:27:00:
e4:5c:02:4b:21:7a:27:96:dd:38:ad:9b:d4:f3:3a:bd:55:02:
48:ec:47:47:48:80:cf:2d:17:8f:62:cc:bd:65:69:97:c5:2f:
21:1f:ce:3b:be:0c:a8:a3:e3:58:a3:71:7d:52:86:9c:bd:b4:
1b:7c:16:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:50:21 2025 by rpki-client