Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
File: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft (raw, json)
Hash identifier: PmqR1H6KbIqlDjyPjl/zPbxOM/Kh34zNC55EPj0fI2A=
Subject key identifier: DB:03:D3:AA:3A:F3:80:BE:B4:8A:34:64:B2:1A:1B:3F:EA:40:0A:F8
Authority key identifier: 46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4
Certificate issuer: /CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
Certificate serial: 0195E158DD3EF245288EA00818B9C1CBC03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
Manifest number: 041C
Signing time: Sat 29 Mar 2025 10:00:52 +0000
Manifest this update: Sat 29 Mar 2025 10:00:52 +0000
Manifest next update: Sun 30 Mar 2025 10:00:52 +0000
Files and hashes: 1: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl (hash: MrGlaNgAOe3gF24CJ4axOat1tizuCAKNIGhN9NYE8mI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:dd:3e:f2:45:28:8e:a0:08:18:b9:c1:cb:c0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
Validity
Not Before: Mar 29 10:00:52 2025 GMT
Not After : Mar 30 10:00:52 2025 GMT
Subject: CN=db03d3aa3af380beb48a3464b21a1b3fea400af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:f5:91:de:d5:f0:41:63:d8:de:b6:bb:0c:
0e:07:9b:9c:0d:54:85:66:9f:76:85:ac:86:65:57:
41:67:e6:23:48:76:b5:b8:a2:b5:ac:fd:33:7e:db:
12:4f:50:1a:82:97:f0:18:91:a2:08:ae:2e:d1:25:
d0:4d:cd:de:f6:a6:56:02:49:aa:36:f2:06:cb:21:
cf:00:de:fb:db:9c:73:70:d9:0d:67:50:28:58:a2:
0b:03:3f:b6:8c:53:26:c9:c4:52:f9:67:ae:ce:e8:
01:af:fa:ea:38:79:27:20:10:57:f5:8f:b1:9f:90:
07:1d:d8:cd:a1:52:bd:ef:f8:1b:10:b7:6f:91:61:
7d:10:70:bf:e4:c6:7f:96:14:99:e2:c8:d1:98:34:
de:4c:05:69:20:66:6c:7e:b4:0d:fd:16:93:5b:7b:
6b:ef:d9:37:66:3d:40:4b:be:a3:ce:a7:52:90:75:
05:f4:c3:ed:c8:f6:07:6d:a3:f0:99:1c:fd:c9:a4:
36:aa:62:5a:0c:79:5c:2b:ec:d3:74:d7:49:90:b5:
4b:aa:b5:21:00:c4:58:71:8d:6a:0b:16:9f:40:57:
cb:d7:90:95:c2:e6:75:92:15:20:bf:8c:e5:d5:ec:
43:32:56:40:b7:d6:5b:cd:01:24:f9:e4:e6:45:d8:
8e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:03:D3:AA:3A:F3:80:BE:B4:8A:34:64:B2:1A:1B:3F:EA:40:0A:F8
X509v3 Authority Key Identifier:
keyid:46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:15:d7:5e:4b:4d:82:7a:f8:ac:f8:17:5a:f1:ee:63:b2:34:
92:e9:82:36:e8:68:ab:ac:fd:75:73:13:d6:9c:0a:c4:fd:a9:
95:33:aa:7d:dc:87:2a:7d:eb:3c:5a:dc:c4:53:2c:8f:66:16:
91:dd:e1:cc:b5:7c:07:db:fc:08:b8:ae:93:bd:a2:fc:a6:e7:
40:08:bb:c2:3e:cf:c3:64:9c:4c:fe:c3:bb:c7:70:49:dc:39:
6f:81:d8:2c:1b:ec:0c:95:bd:a0:32:7f:b8:f1:53:96:a3:b5:
50:c6:8b:be:44:93:26:f9:c8:79:5f:9a:fa:ab:7d:27:60:41:
e2:5b:8e:3e:bf:c3:75:ac:2c:c1:79:47:12:32:68:1d:90:e1:
ef:81:de:e9:46:3c:bc:4f:82:62:b0:8d:f4:a7:86:1c:35:e7:
9a:8a:6c:b0:ea:d7:7a:31:9b:a6:85:25:76:77:7f:16:b9:d0:
4c:71:5e:a4:4e:93:27:7a:00:87:4c:a1:97:37:f2:8f:17:12:
b2:96:0c:c4:bd:76:8c:bb:68:63:1c:1d:b9:a4:fb:57:00:41:
f0:5d:ea:3e:15:50:59:42:2d:a2:77:06:86:c1:30:f7:99:af:
3c:11:9e:94:05:27:4d:68:44:7d:9a:cf:37:70:7e:00:84:3d:
69:fc:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:42 2025 by rpki-client