Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
File: _drec0yM3oXb9k0PdWr955y8gCM.mft (raw, json)
Hash identifier: htWpn+Sea5VBPIG0puJu+74jS1oavHmHHW6JUW6yWTo=
Subject key identifier: 08:F0:63:98:0B:24:AA:8E:09:54:F4:37:7F:1E:B3:6A:A0:AA:6A:CE
Authority key identifier: FD:DA:DE:73:4C:8C:DE:85:DB:F6:4D:0F:75:6A:FD:E7:9C:BC:80:23
Certificate issuer: /CN=fddade734c8cde85dbf64d0f756afde79cbc8023
Certificate serial: 0195C650CCC5F96FA3D0D0B14CD84F2E8499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_drec0yM3oXb9k0PdWr955y8gCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
Manifest number: 0B83
Signing time: Mon 24 Mar 2025 04:02:18 +0000
Manifest this update: Mon 24 Mar 2025 04:02:18 +0000
Manifest next update: Tue 25 Mar 2025 04:02:18 +0000
Files and hashes: 1: _drec0yM3oXb9k0PdWr955y8gCM.crl (hash: T9u22JU02Zmo3koXL75S2D8DiyOeIvcoKGBq5MxSLdc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:50:cc:c5:f9:6f:a3:d0:d0:b1:4c:d8:4f:2e:84:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fddade734c8cde85dbf64d0f756afde79cbc8023
Validity
Not Before: Mar 24 04:02:18 2025 GMT
Not After : Mar 25 04:02:18 2025 GMT
Subject: CN=08f063980b24aa8e0954f4377f1eb36aa0aa6ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f2:2d:66:89:1f:c9:58:4a:2d:63:71:83:e9:
b4:9c:67:8b:3a:8b:37:10:70:60:aa:b7:c6:0f:6a:
f0:08:f8:f3:00:85:86:6e:17:b3:59:75:0a:e5:a3:
19:a3:36:01:7b:53:d6:6f:53:18:52:49:60:05:b4:
ad:a3:11:15:58:bd:2b:03:e0:39:91:44:eb:55:24:
01:a9:44:d3:2b:9a:fb:81:46:be:e0:fb:32:9a:74:
6b:24:6a:d4:9b:a7:06:29:e8:3e:cf:f7:fa:29:90:
58:cc:b5:43:a3:3e:53:06:51:08:a1:10:c1:cd:d2:
be:10:ad:89:b8:0a:5b:7b:d1:92:ce:84:57:d3:7e:
85:e5:ad:b7:8b:17:20:0f:53:51:54:7e:c4:32:7e:
b4:60:66:06:e5:02:e0:22:a4:6c:87:9f:a9:f1:71:
0c:85:37:d9:c1:9c:cd:25:c9:bd:79:6a:ba:0d:a8:
16:3d:d5:3d:6c:57:25:ce:98:51:1d:c6:62:f1:57:
ea:48:a4:8d:af:46:91:99:21:3c:3d:6a:c4:3f:9e:
3f:0b:8a:8b:e3:ae:a4:2a:bb:45:83:4f:15:b4:0f:
7f:50:86:41:38:e0:28:27:33:09:64:f8:8a:ac:0d:
39:6b:b9:fa:ce:f1:2e:15:e0:a9:f4:8f:aa:63:ce:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F0:63:98:0B:24:AA:8E:09:54:F4:37:7F:1E:B3:6A:A0:AA:6A:CE
X509v3 Authority Key Identifier:
keyid:FD:DA:DE:73:4C:8C:DE:85:DB:F6:4D:0F:75:6A:FD:E7:9C:BC:80:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_drec0yM3oXb9k0PdWr955y8gCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0f5ff9-bae8-4345-805c-cbc3597dc57c/1/_drec0yM3oXb9k0PdWr955y8gCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:91:37:35:4e:28:9e:28:0d:b8:c9:db:fd:db:85:8c:8e:36:
07:94:86:ba:9e:b0:5e:12:2e:6b:4c:e9:0f:19:58:9c:88:8f:
9a:87:a0:9a:63:c4:f9:c2:f4:87:38:02:0a:0f:56:cf:29:35:
4a:81:4e:dd:f3:bb:96:1d:65:a0:18:a2:9f:58:a5:dc:01:61:
e8:ed:b3:73:69:53:69:b1:45:bc:23:66:4a:a5:6c:b9:b1:fc:
68:ed:ed:7e:fc:25:21:32:4a:a0:1b:38:76:55:17:18:8d:0e:
1a:3f:ce:90:49:c9:0a:ef:47:e3:72:79:f9:3b:fd:6e:56:e5:
b8:c9:da:f4:f6:99:42:ab:e0:11:b5:b1:2d:ea:94:43:97:39:
54:2b:32:05:be:68:c8:36:5f:31:50:51:61:a1:43:32:f8:59:
fc:bc:35:11:29:c0:31:b6:dc:a5:65:d9:99:e1:80:42:f9:9f:
84:c5:96:39:2e:58:d1:ba:a9:5b:39:f8:5c:61:9a:61:2a:31:
72:f4:b0:88:87:56:4d:28:46:90:fe:f5:f5:3e:86:54:23:0f:
9c:d8:84:0e:07:2b:6a:11:18:37:f2:1c:86:5d:96:9b:4a:06:
3a:1c:32:1b:48:c6:54:e3:72:21:e1:b4:d9:78:cc:75:75:a5:
b3:c9:1e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:15:50 2025 by rpki-client