Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: CZQfAN47T/gOU4j+PflvHxVRJoRyZKeOvaeckIBtCeI=
Subject key identifier: B7:7E:6B:ED:9C:05:DF:C6:3C:75:C1:C8:0C:6F:53:06:EF:A1:39:75
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 0195E046D14BB0B0941ABE0DC0A154552B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 05D0
Signing time: Sat 29 Mar 2025 05:01:32 +0000
Manifest this update: Sat 29 Mar 2025 05:01:32 +0000
Manifest next update: Sun 30 Mar 2025 05:01:32 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: GZlsy/t8u0W5X+4Djz5O5TigtwNilkIQWWsmBDZY4XQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:d1:4b:b0:b0:94:1a:be:0d:c0:a1:54:55:2b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: Mar 29 05:01:32 2025 GMT
Not After : Mar 30 05:01:32 2025 GMT
Subject: CN=b77e6bed9c05dfc63c75c1c80c6f5306efa13975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:ee:c8:0b:97:d9:72:1d:a0:ff:19:41:65:
91:ae:42:9e:4f:ec:a6:dd:35:a1:b1:25:b0:55:02:
7e:6c:7e:ae:a4:f2:b9:0a:9c:c1:31:3c:64:21:b1:
4e:45:2d:b7:b7:91:6b:6d:8a:a4:0d:76:c1:10:e2:
fc:70:79:b8:08:88:2e:84:b8:ad:da:92:6e:c1:5f:
16:d6:eb:f5:d9:d2:5b:ff:7a:5b:96:d4:18:72:59:
1e:6b:0c:6f:a4:87:4c:16:28:3b:56:5d:4d:c7:b7:
1e:6f:db:69:05:39:56:96:f0:aa:11:9b:f0:90:4d:
fa:4f:c7:19:90:c1:03:18:5b:9b:23:b2:75:19:d1:
12:97:d2:a3:65:f2:71:c2:4c:37:05:81:69:77:cf:
c7:ba:f6:ba:ea:9a:b3:31:60:75:d2:04:09:fb:d4:
59:f1:1f:1c:58:5d:f2:01:64:87:38:bb:da:12:41:
bf:cb:6d:0e:ec:12:a7:5c:e6:0d:76:84:27:78:ba:
09:53:9b:ae:ef:0f:b2:d1:cf:6c:2c:9c:0d:4e:f0:
80:d7:8f:03:8b:4c:c8:ce:8e:86:05:24:3d:28:c7:
d2:7f:ae:0f:85:32:8a:50:70:c0:28:9f:56:8a:ba:
5e:a4:da:02:5b:14:27:d4:9d:41:af:03:f5:36:24:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7E:6B:ED:9C:05:DF:C6:3C:75:C1:C8:0C:6F:53:06:EF:A1:39:75
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d7:c8:91:4f:1d:b1:8f:e4:6e:1f:cc:87:4f:e1:51:45:5e:
25:83:91:82:a3:f3:32:9d:65:4c:71:be:d4:63:69:14:d8:c5:
ce:1c:a2:9d:e9:53:b9:b1:64:38:3f:5a:59:c0:45:cb:20:a5:
2a:b9:8c:6c:48:9a:0f:8f:bf:0e:1e:55:f5:8d:06:bf:49:0c:
75:ab:d3:07:eb:9d:7c:80:92:51:83:7f:0c:24:5a:4f:ce:c5:
a0:ac:59:1c:a8:6e:1f:78:0e:82:46:b0:86:a9:de:ab:f8:05:
21:e4:3d:c9:fa:07:ae:6e:64:7b:d4:1f:fa:79:bf:6e:e7:f2:
cd:58:70:6d:0e:46:8b:d9:e7:f7:d2:74:50:26:41:1d:c4:c8:
6b:d1:b1:f2:a1:e8:65:85:b3:1b:53:c6:d5:ad:65:82:82:57:
69:95:2d:27:de:73:7d:15:68:db:95:ac:cf:ab:00:77:e0:74:
7c:78:9a:25:0a:3e:f5:f7:d6:6d:90:0f:2b:9c:2e:71:ec:ca:
f2:e8:71:88:27:09:66:b9:64:3e:eb:67:e0:1b:6d:5d:cb:15:
08:cd:53:97:60:87:bd:83:cc:3a:db:a1:de:29:f2:8f:7b:84:
eb:80:fa:3b:c6:16:24:6a:22:2e:8c:63:09:ea:83:ce:57:4d:
0d:3d:40:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:36 2025 by rpki-client