Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7ac1aa-e504-4637-87ea-aa46e76ae9b2/1/1DP46fAFZakeTMKw6YoOcAZoOYI.mft
File: 1DP46fAFZakeTMKw6YoOcAZoOYI.mft (raw, json)
Hash identifier: Gu9s2j4VOrVTIlb3St0jkrljjAy3899K9eHyt1+0NAA=
Subject key identifier: 10:D9:F3:E7:F5:89:0A:CA:64:86:5F:D4:D2:11:E8:23:B4:05:CC:98
Authority key identifier: D4:33:F8:E9:F0:05:65:A9:1E:4C:C2:B0:E9:8A:0E:70:06:68:39:82
Certificate issuer: /CN=d433f8e9f00565a91e4cc2b0e98a0e7006683982
Certificate serial: 018DD04310D3065D8249BA247A418CD3AE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DP46fAFZakeTMKw6YoOcAZoOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ac1aa-e504-4637-87ea-aa46e76ae9b2/1/1DP46fAFZakeTMKw6YoOcAZoOYI.mft
Manifest number: 0CB1
Signing time: Thu 22 Feb 2024 10:01:12 +0000
Manifest this update: Thu 22 Feb 2024 10:01:12 +0000
Manifest next update: Fri 23 Feb 2024 10:01:12 +0000
Files and hashes: 1: 1DP46fAFZakeTMKw6YoOcAZoOYI.crl (hash: y/+vZF1c0+vATv560V5bVg7UlXzPhJObKr0f1GtgGK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:43:10:d3:06:5d:82:49:ba:24:7a:41:8c:d3:ae:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d433f8e9f00565a91e4cc2b0e98a0e7006683982
Validity
Not Before: Feb 22 10:01:12 2024 GMT
Not After : Feb 23 10:01:12 2024 GMT
Subject: CN=10d9f3e7f5890aca64865fd4d211e823b405cc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:a7:f2:e4:07:06:c6:f5:59:b9:53:30:e7:
d1:2c:c0:7a:1b:02:84:60:fb:68:f0:77:63:e0:47:
7b:36:77:94:e8:a9:cd:b8:dd:43:94:09:98:22:1c:
d0:9d:51:f2:98:1c:32:31:bf:11:24:0b:d2:86:5c:
82:d5:c5:b9:01:b3:5a:9c:00:34:d2:2e:fc:53:21:
ff:96:f0:7e:4d:2b:d2:ad:25:7d:74:42:03:80:a8:
5a:8b:3d:3b:79:60:db:49:95:4b:1d:ad:46:1d:2b:
ed:68:0e:ef:c0:50:95:b4:23:19:9f:fc:c9:1c:83:
1c:eb:1d:b3:87:24:74:29:18:14:a2:69:07:1e:18:
e9:da:be:10:c0:78:71:1c:7e:af:68:0d:20:45:da:
94:27:5c:81:b6:db:8b:97:68:61:90:27:6c:c3:8b:
d2:4c:24:c4:98:1d:bb:d1:0e:0f:7b:70:16:6c:81:
3c:26:b1:f9:5e:44:fb:04:6b:75:2b:39:ae:b2:30:
b6:55:b4:38:34:e3:a1:4a:3a:c9:ee:b9:11:47:35:
bf:10:d6:e3:ca:05:08:6e:3d:19:bd:7a:b5:f3:8a:
49:9d:70:1f:1e:83:46:73:93:e2:a4:68:ee:83:21:
2e:74:33:b0:ea:1e:c2:38:c0:80:15:69:72:02:01:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D9:F3:E7:F5:89:0A:CA:64:86:5F:D4:D2:11:E8:23:B4:05:CC:98
X509v3 Authority Key Identifier:
keyid:D4:33:F8:E9:F0:05:65:A9:1E:4C:C2:B0:E9:8A:0E:70:06:68:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DP46fAFZakeTMKw6YoOcAZoOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ac1aa-e504-4637-87ea-aa46e76ae9b2/1/1DP46fAFZakeTMKw6YoOcAZoOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ac1aa-e504-4637-87ea-aa46e76ae9b2/1/1DP46fAFZakeTMKw6YoOcAZoOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9e:30:6a:9b:58:dd:12:b8:3a:37:dc:81:8f:80:53:9c:46:
c0:41:14:3b:72:f7:17:ed:4f:2c:4b:cf:76:49:cb:34:2b:e8:
08:c3:a6:a5:a8:11:a8:62:4c:b0:0e:62:97:0d:71:96:d0:d0:
89:fb:dd:88:d5:aa:23:9f:0e:b0:55:ef:fa:08:fc:dc:d0:10:
a4:11:36:f4:0c:a9:65:d1:94:d3:6d:4b:43:87:31:1b:b0:0e:
4c:29:f8:74:cb:5b:ff:4f:34:49:6b:c9:a2:65:0a:bf:a6:58:
00:fd:33:b7:d4:bc:03:bc:15:80:73:b9:b9:54:91:c0:a7:c0:
00:ef:5c:dd:ba:53:38:58:55:f5:fd:a0:15:49:4a:a1:a0:99:
7b:ae:db:df:5b:a5:fa:67:72:82:6e:e3:c0:c8:01:da:e1:b7:
2c:d6:8b:4f:db:b4:90:1c:f3:2a:6e:c7:f9:61:a2:81:02:aa:
77:26:0a:80:11:77:5c:b6:f6:7d:d4:45:1f:cb:be:25:45:7d:
b6:97:9d:a1:2f:84:ff:bc:68:c5:18:fe:aa:3c:13:e4:fe:eb:
e4:1c:ae:eb:64:e9:18:54:c6:4b:cc:e8:2c:6e:4d:25:67:e4:
1c:ca:d3:29:a0:f1:33:fa:33:b0:76:58:55:f1:ee:13:b2:ea:
4b:8c:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:37:58 2025 by rpki-client