Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
File: AkhBfH_pzOxbnarMCPznmdZzCIw.mft (raw, json)
Hash identifier: OvHTQPJi0lR3Kf9NinzzMBqRh/N1NRqJs1NxY8JOFy8=
Subject key identifier: C1:62:85:F3:43:F0:06:EA:C6:87:3B:2F:2B:E4:27:3B:37:39:DD:47
Authority key identifier: 02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
Certificate issuer: /CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Certificate serial: 0195E158FFD1C4B77033F782A80F532D8660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
Manifest number: 0CF8
Signing time: Sat 29 Mar 2025 10:01:01 +0000
Manifest this update: Sat 29 Mar 2025 10:01:01 +0000
Manifest next update: Sun 30 Mar 2025 10:01:01 +0000
Files and hashes: 1: AkhBfH_pzOxbnarMCPznmdZzCIw.crl (hash: CpojVO5FqnN8yKA1jbNXLDG4+8fxQXTner1wzyuKHjc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:ff:d1:c4:b7:70:33:f7:82:a8:0f:53:2d:86:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Validity
Not Before: Mar 29 10:01:01 2025 GMT
Not After : Mar 30 10:01:01 2025 GMT
Subject: CN=c16285f343f006eac6873b2f2be4273b3739dd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:2b:31:fa:11:51:d1:38:cf:04:6d:a5:16:
fd:cc:bd:d8:50:6a:85:a9:9f:1c:96:c0:84:d2:12:
b6:bf:bd:38:55:bd:ec:a2:68:29:48:f9:7f:79:39:
5e:1e:9e:96:d3:05:3a:1c:47:fc:c6:d9:7d:6a:e4:
b4:6b:9d:de:7e:90:1e:c8:68:a5:d6:28:99:a9:65:
ef:df:d9:2f:1a:02:a6:26:76:39:de:7d:47:fc:8e:
f7:bd:6f:fd:ab:13:e0:1b:8d:d3:49:ca:c8:da:64:
03:26:f3:23:ed:92:a2:0a:c2:d5:ef:9c:cc:ee:2a:
e3:9b:01:a9:a5:2a:ad:7e:85:98:bb:40:7b:0f:c7:
4b:df:4a:88:c5:b9:fb:ef:48:0e:e1:d9:72:7e:d7:
ae:55:13:90:ed:96:23:00:03:8c:5f:90:5e:a9:e4:
1f:dd:28:10:2f:f6:b7:bd:72:72:dc:9c:c4:a7:e7:
30:43:12:83:3c:f2:5a:92:7c:e1:cb:fe:a4:d1:b7:
e4:10:ec:0a:ce:9d:f1:b9:24:a9:66:7b:8f:6d:6c:
85:65:b1:d5:96:20:db:ff:f0:e1:9b:5b:fb:d3:76:
1d:75:65:c8:4d:07:53:6d:78:66:e0:0f:b2:b0:99:
53:2f:44:40:fa:52:a0:d0:24:91:91:32:f9:ae:2b:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:62:85:F3:43:F0:06:EA:C6:87:3B:2F:2B:E4:27:3B:37:39:DD:47
X509v3 Authority Key Identifier:
keyid:02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2b:94:ac:14:49:1d:a6:e2:57:8c:32:46:70:a8:0d:79:3b:
b3:33:9e:68:c4:4a:e5:81:3f:c8:99:c2:c0:5c:fd:27:b1:53:
64:c3:0c:ae:bd:fc:e2:bb:22:30:82:41:bf:4d:58:14:3e:58:
44:05:50:7a:01:da:9e:ed:1f:b9:96:0b:83:98:53:af:41:18:
41:54:43:52:a2:d9:86:21:66:7a:92:68:5a:b0:76:ef:af:26:
81:28:a0:05:2e:a2:3b:86:ba:84:37:12:cb:69:86:e6:27:42:
59:a4:7b:55:4c:d6:00:dd:12:20:f3:0c:ca:e1:14:13:04:9f:
52:da:7d:58:7e:5a:d2:2d:f2:ea:e3:83:a5:ed:08:a4:2c:03:
61:5c:e2:d9:09:7b:1d:8b:c1:4a:2d:e8:8c:bd:32:02:de:4b:
f3:ee:49:01:e3:b0:64:00:e0:2f:87:39:13:47:84:d0:0a:ce:
56:1f:9b:0d:05:7f:62:e8:a1:01:eb:47:3d:3d:e5:94:6e:52:
be:d0:6f:27:a6:33:d4:38:1a:ec:eb:6d:66:a7:61:46:21:a1:
0f:7c:e1:b9:34:04:c5:66:ff:ee:1e:3c:d6:03:c3:b8:da:fc:
b1:2d:bb:5f:c4:83:a0:26:1d:f3:48:85:1a:ba:f6:11:5b:77:
e8:47:a7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:19:52 2025 by rpki-client