Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66f39f-ec5a-4a3f-83ac-0ebce7968938/1/0F56BzzDiydeClItN158mgcFCl0.mft
File: 0F56BzzDiydeClItN158mgcFCl0.mft (raw, json)
Hash identifier: kUqg0sZ5uK68cH9O3dESbyu/H7ZGhirBq1Y222YCx5Q=
Subject key identifier: 5D:59:18:2B:56:B4:9E:52:12:1B:85:D1:B8:54:97:0B:49:49:8F:42
Authority key identifier: D0:5E:7A:07:3C:C3:8B:27:5E:0A:52:2D:37:5E:7C:9A:07:05:0A:5D
Certificate issuer: /CN=d05e7a073cc38b275e0a522d375e7c9a07050a5d
Certificate serial: 0193056D8F1498013BFCAC96745201460017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F56BzzDiydeClItN158mgcFCl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/66f39f-ec5a-4a3f-83ac-0ebce7968938/1/0F56BzzDiydeClItN158mgcFCl0.mft
Manifest number: 0A2B
Signing time: Thu 07 Nov 2024 07:01:26 +0000
Manifest this update: Thu 07 Nov 2024 07:01:26 +0000
Manifest next update: Fri 08 Nov 2024 07:01:26 +0000
Files and hashes: 1: 0F56BzzDiydeClItN158mgcFCl0.crl (hash: jH+RQNQElVVdsPEPDDxbcXZOhMXxj4fqHeTH2oKdAwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:6d:8f:14:98:01:3b:fc:ac:96:74:52:01:46:00:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05e7a073cc38b275e0a522d375e7c9a07050a5d
Validity
Not Before: Nov 7 07:01:26 2024 GMT
Not After : Nov 8 07:01:26 2024 GMT
Subject: CN=5d59182b56b49e52121b85d1b854970b49498f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:0c:1a:a5:c0:97:fd:b0:4e:94:1e:14:1e:
f3:b5:f0:69:14:cb:f1:25:bf:58:3f:5c:28:3e:a0:
e8:eb:6a:5c:7a:5c:57:a4:7e:05:1b:10:c2:78:47:
b4:ab:b7:fb:33:79:14:95:f6:26:78:13:46:22:3f:
5b:44:58:18:50:86:d6:70:4d:1a:8a:b3:5a:e9:27:
17:e1:1c:84:62:48:ad:56:4c:09:27:a2:d0:be:cf:
7a:38:71:ea:f2:a1:d8:ce:48:92:05:a9:b7:05:1d:
65:ee:17:cc:3c:96:33:65:1d:0a:c0:51:72:d8:e6:
3f:11:c3:61:81:07:63:92:af:ee:66:77:b9:a9:46:
ec:fa:ba:2b:50:ac:3a:a9:5e:42:cf:40:f5:f0:a7:
b9:a8:06:24:52:5f:1a:69:1d:aa:cf:bb:b7:16:39:
81:1d:dd:1d:43:2e:e1:b4:7b:1e:30:17:ac:6f:92:
6c:34:67:18:87:8e:ac:c7:b3:78:8b:7d:75:49:1b:
47:fc:a2:0e:0e:a4:ed:e5:e9:96:d4:43:a2:4a:87:
b5:84:8c:29:88:46:a1:6b:c3:00:34:89:6e:93:10:
50:25:f0:50:cd:d7:7e:5e:cb:ef:25:92:e1:0b:b0:
6d:75:2b:31:64:99:77:cf:fa:c4:a8:ba:fc:f4:46:
bd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:59:18:2B:56:B4:9E:52:12:1B:85:D1:B8:54:97:0B:49:49:8F:42
X509v3 Authority Key Identifier:
keyid:D0:5E:7A:07:3C:C3:8B:27:5E:0A:52:2D:37:5E:7C:9A:07:05:0A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F56BzzDiydeClItN158mgcFCl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66f39f-ec5a-4a3f-83ac-0ebce7968938/1/0F56BzzDiydeClItN158mgcFCl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66f39f-ec5a-4a3f-83ac-0ebce7968938/1/0F56BzzDiydeClItN158mgcFCl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b7:a0:39:bf:ad:aa:54:f9:8a:25:de:ad:c7:51:e1:a1:d0:
ca:21:ca:88:a9:c1:53:59:98:95:58:28:c6:11:37:5a:a2:44:
cf:ef:6a:b9:39:3a:ac:0c:60:91:ab:3e:a7:8d:39:9f:f3:4a:
68:18:f0:38:35:48:ad:eb:8f:d5:d6:82:a2:67:e4:32:ec:cc:
ed:aa:0b:f4:b6:38:41:96:e8:0d:46:56:7f:f2:d7:70:44:e4:
c6:fe:dc:ac:79:27:d4:39:41:28:86:88:08:2d:d2:a6:3f:b3:
77:2b:4c:db:ef:10:5c:29:92:ba:54:c2:ef:8b:81:98:b6:fb:
48:bd:70:46:dd:aa:00:0a:66:49:00:07:30:cd:51:2b:32:8d:
af:9f:29:3e:57:fb:12:b5:19:b3:4c:a7:dc:dd:c8:f9:25:e6:
da:68:c2:16:9b:12:b2:64:d3:cd:09:5e:8d:98:8a:22:93:6d:
ee:8f:38:44:62:7f:98:09:b0:d0:8c:f3:cc:3a:2f:ed:f3:bc:
4d:1c:46:a7:52:da:86:ef:a3:60:42:30:3d:c4:e4:79:a7:9e:
de:36:f7:88:4b:80:1d:33:b4:96:cd:3d:43:ee:59:5e:e1:37:
ff:74:6c:2f:ec:1d:9a:75:c4:bc:06:b6:be:1c:59:39:12:bc:
23:39:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:38:11 2025 by rpki-client