Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/RAk01RfFBkEklrgIt98lyg_WRV8.mft
File: RAk01RfFBkEklrgIt98lyg_WRV8.mft (raw, json)
Hash identifier: 3anPq/doSuVysKOfVTk8p1yt82BYKn3rG9ErzkLhEeo=
Subject key identifier: 36:8D:99:A0:73:6B:A8:6B:6E:E2:9A:91:0A:A8:A7:57:BD:36:9B:CB
Authority key identifier: 44:09:34:D5:17:C5:06:41:24:96:B8:08:B7:DF:25:CA:0F:D6:45:5F
Certificate issuer: /CN=440934d517c506412496b808b7df25ca0fd6455f
Certificate serial: 019329426BB3A66F2C1189FE6F3764220F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAk01RfFBkEklrgIt98lyg_WRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/RAk01RfFBkEklrgIt98lyg_WRV8.mft
Manifest number: 1082
Signing time: Thu 14 Nov 2024 06:00:38 +0000
Manifest this update: Thu 14 Nov 2024 06:00:38 +0000
Manifest next update: Fri 15 Nov 2024 06:00:38 +0000
Files and hashes: 1: RAk01RfFBkEklrgIt98lyg_WRV8.crl (hash: ZnQZSoUAd5f2//I9VhNvGCXfPfSPFwdUgqsgzTRKnZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:42:6b:b3:a6:6f:2c:11:89:fe:6f:37:64:22:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440934d517c506412496b808b7df25ca0fd6455f
Validity
Not Before: Nov 14 06:00:38 2024 GMT
Not After : Nov 15 06:00:38 2024 GMT
Subject: CN=368d99a0736ba86b6ee29a910aa8a757bd369bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:44:61:35:80:f0:b5:04:b2:d8:c8:16:e2:
84:0e:f1:36:e3:b1:c6:0e:3d:e3:d6:10:cd:45:93:
96:c6:62:d2:50:19:0a:61:26:46:b9:5a:02:1a:bf:
73:81:4f:59:2c:b7:9c:7c:7e:af:36:62:98:02:51:
ca:45:95:fd:ad:de:88:fc:8b:c2:04:c7:33:03:b7:
b6:c9:4f:ee:ff:0e:26:61:f0:f9:d5:a3:0f:89:67:
2c:f0:68:3c:09:9b:99:8a:b3:28:83:d4:08:fe:4a:
ac:e8:97:1e:61:7b:a5:29:fe:a1:66:bc:73:63:e5:
da:37:2b:53:d3:58:e3:dd:24:4a:b6:b1:4e:0c:69:
e5:a0:69:af:4e:75:bb:f4:c1:df:19:05:af:0b:bd:
0f:2d:c2:75:f8:61:78:6a:8b:d2:1c:12:88:61:dc:
47:1a:07:fe:c3:ad:5d:ed:74:9e:8d:1b:51:2a:bb:
f7:93:40:15:10:8d:84:9e:f9:12:9f:48:fe:d8:5f:
91:76:7a:e4:4f:4f:0c:0b:d3:99:66:8a:e6:49:a1:
28:a9:fd:e0:0e:c6:f5:42:c2:39:58:89:b8:1c:d2:
fa:9b:15:1a:4c:70:43:23:0b:e3:9c:53:c4:e6:41:
65:a4:73:64:37:c1:52:1e:17:d0:97:bf:62:27:dd:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8D:99:A0:73:6B:A8:6B:6E:E2:9A:91:0A:A8:A7:57:BD:36:9B:CB
X509v3 Authority Key Identifier:
keyid:44:09:34:D5:17:C5:06:41:24:96:B8:08:B7:DF:25:CA:0F:D6:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAk01RfFBkEklrgIt98lyg_WRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/RAk01RfFBkEklrgIt98lyg_WRV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/RAk01RfFBkEklrgIt98lyg_WRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0e:ae:f2:a8:c2:95:25:11:e5:5f:65:51:bf:4a:7b:96:61:
e6:49:fe:d4:09:57:58:7b:06:72:11:0e:7e:f9:ce:fd:cd:dc:
85:6e:cd:cf:00:f2:d2:7e:06:b5:1b:4c:8f:11:30:f7:ba:2f:
14:fd:59:e9:7e:22:99:c2:64:1b:a9:89:f7:2f:ec:ab:90:da:
25:ae:e2:95:f4:08:d1:7e:0a:0a:96:f2:22:50:ed:4e:d8:56:
86:cd:22:b9:50:3c:36:73:08:32:23:36:22:77:01:d3:10:97:
d5:9b:0c:3f:56:ad:10:e5:bc:4b:2f:13:47:e2:50:05:65:24:
72:2d:09:a5:bd:aa:cb:4c:86:6d:f0:4d:99:d4:36:55:8a:54:
cd:2e:a3:47:87:7d:72:23:a7:72:f4:60:14:5f:ba:50:56:85:
98:2f:49:9c:9d:f9:2c:01:98:68:e8:31:18:3a:fd:26:5d:c8:
29:3b:b0:3e:a5:ba:b4:3c:d9:c2:de:f8:7d:30:d8:d7:07:a6:
a9:ba:2f:b6:92:32:82:d7:a2:47:0c:5d:e3:d5:80:a3:b0:a9:
25:f0:e4:e3:71:9d:2f:c5:bd:a3:2f:5c:77:2c:e0:fa:32:bf:
62:87:31:01:3c:ca:15:76:57:a7:d0:c4:d4:74:80:cd:21:e3:
6c:59:92:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:00 2025 by rpki-client