Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
File: id8L4W7M0-twbmQXlLyQ1PfWeMk.mft (raw, json)
Hash identifier: DRpqBhF88adyxoYATwMPugxs3AT60Fa+JrygZn/yM8I=
Subject key identifier: FB:D0:6A:63:BD:F9:61:B3:31:8E:37:38:2B:AA:4C:D5:58:FF:FC:86
Authority key identifier: 89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
Certificate issuer: /CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Certificate serial: 0195E0465D12C31A8F755C4223F1DE0D8E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
Manifest number: 14BD
Signing time: Sat 29 Mar 2025 05:01:02 +0000
Manifest this update: Sat 29 Mar 2025 05:01:02 +0000
Manifest next update: Sun 30 Mar 2025 05:01:02 +0000
Files and hashes: 1: id8L4W7M0-twbmQXlLyQ1PfWeMk.crl (hash: SrPU2X1A/4Rk8HH+HqHiZlCtxWwvSrk33tVCKlqgx3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:5d:12:c3:1a:8f:75:5c:42:23:f1:de:0d:8e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Validity
Not Before: Mar 29 05:01:02 2025 GMT
Not After : Mar 30 05:01:02 2025 GMT
Subject: CN=fbd06a63bdf961b3318e37382baa4cd558fffc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:33:fe:bf:09:77:27:fb:75:37:29:ab:55:
1c:3d:6d:21:28:11:ac:34:69:b1:55:74:73:0e:cc:
9f:d5:3f:5e:23:b8:37:24:9c:97:2a:dd:04:99:0e:
b4:9a:8d:19:fb:df:2d:c6:28:34:0c:65:f8:dc:fa:
49:74:fa:f8:44:aa:eb:f1:b7:97:0c:ff:8c:cc:11:
ec:f2:5f:85:fd:7c:37:ff:1f:7a:a2:65:d8:78:c8:
63:58:cc:42:50:39:b8:f8:5d:81:56:cf:ab:ff:92:
f8:fc:54:07:28:07:ca:44:4b:29:d5:ff:91:c3:9e:
f3:4f:a5:c7:11:c9:fa:e5:45:4b:c7:07:4e:0b:51:
62:aa:8b:94:19:fd:dd:b9:31:11:9f:2b:1c:8f:e6:
34:64:3f:47:03:99:6a:2e:1c:d4:95:46:85:7b:19:
a8:fb:51:b2:95:2c:de:ae:b3:4c:76:1f:17:c5:45:
b8:96:7f:0c:16:80:86:ca:a3:24:4c:19:68:d9:72:
89:36:e9:ee:c0:af:47:6d:ce:d9:d9:c2:66:19:d7:
9f:70:47:6a:a9:75:6b:86:e1:f2:bd:9c:77:a6:bd:
9c:45:40:ee:5b:8e:05:3a:49:ac:b5:2c:38:1a:00:
b0:16:80:72:0f:b6:19:83:04:03:06:d7:0e:be:f6:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D0:6A:63:BD:F9:61:B3:31:8E:37:38:2B:AA:4C:D5:58:FF:FC:86
X509v3 Authority Key Identifier:
keyid:89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4c:81:d9:9e:6c:47:d6:f0:87:3f:eb:aa:8e:07:c0:ce:a3:
18:9d:27:75:ce:eb:ec:30:6f:fe:78:0c:b0:d5:19:e0:d1:02:
dd:1f:ea:ed:fd:2b:9d:8d:4e:20:42:a5:1f:69:00:aa:57:36:
49:ce:7c:06:c2:7f:b1:e9:c4:d8:00:17:99:5b:66:d1:5a:a8:
19:61:f0:29:09:15:59:6d:c4:24:af:e5:d7:3a:a6:9a:5f:3f:
d7:e1:5d:d0:9d:6b:73:29:b5:af:21:ae:e3:d8:37:cb:1e:1c:
24:5c:ed:37:f0:da:3a:6d:22:c3:9c:c9:06:c1:8b:95:0c:c9:
45:bb:c5:80:e8:d5:29:11:1e:ce:2f:b8:f7:a1:1a:ca:99:5b:
c7:ba:54:25:ff:0c:8d:38:76:8c:8b:78:2c:62:0c:4a:17:2e:
03:7e:b6:3d:9f:d1:e9:20:b8:09:28:4e:52:9e:a0:44:47:86:
d4:86:a2:ef:44:23:d1:1a:7b:b8:8b:15:9c:66:79:18:e7:e8:
9c:ed:24:b5:5b:89:59:36:0a:eb:bf:98:e4:a3:0c:2d:2d:2c:
78:27:55:13:b0:a5:e5:ed:35:f2:4b:30:0c:48:d1:dc:bf:31:
35:91:de:68:4c:0f:39:49:34:9f:e0:5b:ca:61:83:58:b7:54:
22:ea:f9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:29 2025 by rpki-client