Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.mft
File: 0ksd1ylu1YQ4M4lVyratWNvFP1M.mft (raw, json)
Hash identifier: f5zA6bjlh0DrXddjmYc8kNuFJn7i6oDhxUJYLGL+nQM=
Subject key identifier: E8:68:E7:BB:34:C6:7A:BF:64:3C:AB:3B:1E:59:28:BC:A5:A8:A4:51
Authority key identifier: D2:4B:1D:D7:29:6E:D5:84:38:33:89:55:CA:B6:AD:58:DB:C5:3F:53
Certificate issuer: /CN=d24b1dd7296ed58438338955cab6ad58dbc53f53
Certificate serial: 0195A38D96A90876D7570C80BD4505BDEAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ksd1ylu1YQ4M4lVyratWNvFP1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.mft
Manifest number: 149D
Signing time: Mon 17 Mar 2025 10:01:59 +0000
Manifest this update: Mon 17 Mar 2025 10:01:59 +0000
Manifest next update: Tue 18 Mar 2025 10:01:59 +0000
Files and hashes: 1: 0ksd1ylu1YQ4M4lVyratWNvFP1M.crl (hash: NVJ4kC0fByydRuLdN7vnRJS8k6P6pdB+EXydAQz6sGQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:8d:96:a9:08:76:d7:57:0c:80:bd:45:05:bd:ea:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24b1dd7296ed58438338955cab6ad58dbc53f53
Validity
Not Before: Mar 17 10:01:59 2025 GMT
Not After : Mar 18 10:01:59 2025 GMT
Subject: CN=e868e7bb34c67abf643cab3b1e5928bca5a8a451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:f0:eb:fc:f1:bf:72:db:e9:af:98:b7:ab:
04:79:d4:8d:10:b8:5a:9e:0b:7e:46:30:61:54:92:
07:85:9b:77:5a:a7:a5:43:38:f5:c4:56:88:ec:38:
07:01:a9:75:c6:f4:f8:56:ff:a8:ec:64:91:87:60:
ec:2e:f5:3c:6c:e5:f6:2b:9e:f7:b4:a2:f7:f8:80:
d6:e9:e0:74:17:11:4f:24:e6:97:2f:e1:d1:3b:c9:
82:ef:ff:12:78:35:07:76:c1:2d:fa:49:a0:68:cb:
ff:cc:94:a8:38:e5:84:81:77:0d:96:61:37:44:34:
e5:37:3f:6d:70:6a:10:9c:7d:08:c2:2c:86:8a:82:
18:6d:a9:7f:37:ea:ce:a2:44:6d:b5:14:9f:8a:2f:
4a:5d:c1:26:e6:c9:6f:5a:a3:0f:91:95:63:bc:0c:
e5:50:b0:c9:74:a9:6f:74:3e:4e:ac:a9:b2:df:d8:
f5:60:01:3a:de:08:89:86:25:f5:3c:bc:de:30:98:
81:81:c5:36:6a:c7:96:f3:9b:e1:88:1d:cd:1b:d7:
08:fc:3a:4d:f7:0e:9d:41:02:76:f7:94:d1:23:a6:
bb:2a:7e:5b:b3:90:be:19:15:98:07:10:ae:f4:d4:
19:af:18:89:e0:5b:2f:ad:26:df:4f:6f:58:a5:65:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:68:E7:BB:34:C6:7A:BF:64:3C:AB:3B:1E:59:28:BC:A5:A8:A4:51
X509v3 Authority Key Identifier:
keyid:D2:4B:1D:D7:29:6E:D5:84:38:33:89:55:CA:B6:AD:58:DB:C5:3F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ksd1ylu1YQ4M4lVyratWNvFP1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:83:c9:ea:a2:b2:dc:c9:2a:09:ef:7c:5f:39:a5:c4:63:dc:
bf:fa:5e:99:3b:af:35:0c:31:7a:3f:60:59:fd:01:65:ad:fb:
73:6c:ab:90:fc:f2:d2:47:81:7b:60:54:86:ad:74:ab:b1:16:
4b:99:ba:91:4c:cd:72:74:09:94:f2:ce:12:b4:12:de:b1:21:
41:c5:95:e5:bf:2f:90:9c:fe:3c:e3:6c:93:29:94:d6:01:e3:
a4:ac:2a:aa:79:0b:45:2a:aa:46:a9:42:c1:df:93:17:c5:7e:
4c:8c:a6:f7:49:fc:6b:06:0c:ba:b6:48:1d:9a:ba:0e:46:54:
7e:b9:d0:99:aa:cb:b8:e2:db:8e:11:8c:13:73:c3:e7:d7:b6:
ad:e1:9a:4c:67:f0:05:c3:b6:d1:58:60:2e:da:a0:a0:9a:93:
d8:d8:25:b7:6f:e1:ae:58:bc:aa:0a:66:08:f1:85:15:8f:6b:
a2:94:cb:d0:98:2c:d2:d2:1f:5b:fb:5e:89:c4:18:e1:28:26:
b7:ef:d3:80:a9:06:5c:1f:ed:6f:dc:80:76:ce:c6:c5:9b:8e:
9a:36:29:55:6c:14:45:2f:d9:1a:51:13:da:0a:39:80:f4:6b:
d1:be:c6:73:82:73:9a:5a:e5:c7:94:fc:25:65:23:00:e6:a8:
b0:c7:c2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 13:08:20 2025 by rpki-client