Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8e57fa-f14e-432d-9671-54c9b5ab175d/1/_71lnANMWtn5YoJO69RZq3GGzS8.mft
File: _71lnANMWtn5YoJO69RZq3GGzS8.mft (raw, json)
Hash identifier: Z4pNn10zK/s3XdppCoqwYaCrs35DiLJBCTaNOcjjmPA=
Subject key identifier: A7:8B:9E:B3:F4:60:B3:70:85:37:41:1A:04:89:4E:A6:45:0F:4A:38
Authority key identifier: FF:BD:65:9C:03:4C:5A:D9:F9:62:82:4E:EB:D4:59:AB:71:86:CD:2F
Certificate issuer: /CN=ffbd659c034c5ad9f962824eebd459ab7186cd2f
Certificate serial: 018CA9DD1C32AF23DF4C82D2C62E877DE504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_71lnANMWtn5YoJO69RZq3GGzS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8e57fa-f14e-432d-9671-54c9b5ab175d/1/_71lnANMWtn5YoJO69RZq3GGzS8.mft
Manifest number: 0202
Signing time: Wed 27 Dec 2023 06:01:29 +0000
Manifest this update: Wed 27 Dec 2023 06:01:29 +0000
Manifest next update: Thu 28 Dec 2023 06:01:29 +0000
Files and hashes: 1: _71lnANMWtn5YoJO69RZq3GGzS8.crl (hash: ZEY718MBlnoNJevAaXWZSpVVVFn11GvgxBuG+RxyK4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a9:dd:1c:32:af:23:df:4c:82:d2:c6:2e:87:7d:e5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbd659c034c5ad9f962824eebd459ab7186cd2f
Validity
Not Before: Dec 27 06:01:29 2023 GMT
Not After : Dec 28 06:01:29 2023 GMT
Subject: CN=a78b9eb3f460b3708537411a04894ea6450f4a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:e5:36:25:c5:83:0a:43:9f:59:66:2b:25:
32:73:bd:16:a7:a1:f7:fe:06:65:0b:ac:2d:99:cd:
9a:25:31:4c:ad:3f:fd:b7:06:55:c8:b4:a1:3e:38:
56:08:b8:67:42:67:de:87:3f:8e:62:f5:d8:a0:cc:
44:8f:9a:17:42:65:ea:1f:d0:49:01:68:4a:22:e6:
77:1b:81:8c:55:14:19:2b:4c:16:ff:1f:e9:1f:6b:
99:b4:b0:06:f3:eb:a1:c8:ae:3b:e4:5c:6c:2b:af:
70:12:c7:f3:0e:2b:45:f6:30:1f:b4:63:9a:28:1d:
2f:80:92:15:0d:f9:ad:b3:c9:b3:f2:c0:34:96:15:
1c:01:92:f2:1e:83:8c:1b:7f:67:9a:c7:a8:ba:07:
24:34:7c:43:40:78:c8:23:05:d0:eb:45:54:5a:d7:
0c:76:bd:78:e0:e5:e7:c3:9a:1d:bb:df:4a:23:82:
a5:73:d1:fa:04:35:57:49:0d:a9:f5:4f:9e:f5:f4:
3e:60:11:63:9e:d6:73:21:b8:ba:7c:8e:b5:3d:10:
ad:0b:d0:2a:76:20:20:a9:00:84:9d:4e:1b:81:08:
fb:ae:00:79:6e:9a:2c:37:82:b6:cf:12:2b:fe:e4:
9a:b6:32:f2:85:c3:d9:8c:4f:3f:08:3e:74:13:fd:
71:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8B:9E:B3:F4:60:B3:70:85:37:41:1A:04:89:4E:A6:45:0F:4A:38
X509v3 Authority Key Identifier:
keyid:FF:BD:65:9C:03:4C:5A:D9:F9:62:82:4E:EB:D4:59:AB:71:86:CD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_71lnANMWtn5YoJO69RZq3GGzS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8e57fa-f14e-432d-9671-54c9b5ab175d/1/_71lnANMWtn5YoJO69RZq3GGzS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8e57fa-f14e-432d-9671-54c9b5ab175d/1/_71lnANMWtn5YoJO69RZq3GGzS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ec:60:88:b7:2c:da:2d:64:d2:41:0d:97:6c:6b:37:fa:d7:
30:10:03:e0:82:78:68:d1:83:b1:4c:65:40:dc:31:10:f6:20:
af:ba:27:d3:28:07:30:b0:ea:f6:f5:f6:a2:cf:1c:01:19:42:
a1:bb:73:a7:bf:68:75:2f:43:9f:24:e7:af:64:a5:9e:53:5c:
b1:9d:ef:5f:ae:81:37:d8:87:73:2c:21:12:c9:b2:82:a6:ee:
55:07:2a:30:47:59:3a:20:fd:32:b1:29:d2:64:bd:65:6f:b8:
43:c1:60:cd:d5:80:88:96:fa:47:78:7b:32:05:31:a9:da:77:
3b:b0:38:3f:cb:f7:55:bc:9c:ff:46:d2:18:ea:24:14:c9:85:
96:cc:9d:4d:23:02:8e:60:94:6f:bb:b5:fb:65:e4:9b:1b:b5:
22:dd:61:e9:26:9a:a6:b0:c5:41:7f:52:33:d5:e7:0e:51:2a:
dd:54:06:fa:fb:bf:fc:55:3d:31:d7:59:5e:4a:3f:bf:db:c4:
a4:f8:49:8a:c7:b7:4d:cf:61:2a:fa:b7:9c:7a:a9:dd:95:4f:
31:30:79:22:18:ac:4f:40:d3:95:d8:b9:f4:fb:cb:a4:27:13:
e7:b7:a1:79:a6:f1:40:b3:d7:cb:cb:07:d0:c4:f2:35:a5:3b:
58:40:a6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:57 2025 by rpki-client