Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.mft
File: 8d4LVDF8gVsFFTACYEv9VZBpqLA.mft (raw, json)
Hash identifier: IPTtPPGIQaxZqlGiBaVdT2A+vF8S/rjxy7606d3LaUc=
Subject key identifier: 3C:08:E8:17:A3:B5:4B:AD:C1:F6:70:A7:64:D1:65:4C:AD:7D:AE:AF
Authority key identifier: F1:DE:0B:54:31:7C:81:5B:05:15:30:02:60:4B:FD:55:90:69:A8:B0
Certificate issuer: /CN=f1de0b54317c815b05153002604bfd559069a8b0
Certificate serial: 019522963459DFDBD502B7974852B0B4B817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d4LVDF8gVsFFTACYEv9VZBpqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.mft
Manifest number: 048E
Signing time: Thu 20 Feb 2025 09:00:23 +0000
Manifest this update: Thu 20 Feb 2025 09:00:23 +0000
Manifest next update: Fri 21 Feb 2025 09:00:23 +0000
Files and hashes: 1: 8d4LVDF8gVsFFTACYEv9VZBpqLA.crl (hash: M6w/fb3Cf4Ay7xqytYu5vJuOXqBQ6pitRE56pJZTEuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:96:34:59:df:db:d5:02:b7:97:48:52:b0:b4:b8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1de0b54317c815b05153002604bfd559069a8b0
Validity
Not Before: Feb 20 09:00:23 2025 GMT
Not After : Feb 21 09:00:23 2025 GMT
Subject: CN=3c08e817a3b54badc1f670a764d1654cad7daeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:4e:5b:63:0c:cd:fc:09:a2:4e:59:b2:38:
6a:72:6d:a1:a4:62:9f:ba:96:e0:b8:19:2c:f6:2d:
a4:c4:f9:6d:58:e5:05:34:4a:4c:f7:9c:b4:d8:d5:
ad:ef:e0:bf:14:13:92:02:1c:14:90:a5:64:84:e9:
77:a8:11:6c:4e:67:26:ed:4d:15:85:76:f9:f1:d0:
e2:c1:61:4b:94:41:a3:b9:80:32:4a:88:db:50:5e:
5e:ed:79:5d:1d:da:c5:4a:c8:1c:ee:40:8b:8d:e8:
61:9a:b4:48:97:70:c3:e0:d8:0a:8d:ea:1b:f3:97:
f4:88:11:18:32:9d:12:0f:e2:7c:d7:6e:5e:a0:d5:
af:5a:7c:83:3c:96:6b:99:5f:e3:00:8d:74:f8:aa:
7c:d5:a6:2d:cc:00:3a:cb:8e:e2:f4:ed:20:2c:ca:
78:0b:42:3d:a8:36:73:29:b6:4f:8a:b4:c7:6d:5e:
fd:91:e4:32:59:52:ea:7e:eb:10:3f:ed:4b:2a:93:
9b:86:ad:78:b1:6e:df:f2:25:45:58:6a:e9:32:97:
bc:84:98:83:fe:0e:b3:23:f3:bf:1b:2b:35:cc:c4:
c5:74:24:57:90:d5:f9:45:42:db:f9:47:29:cc:50:
65:1f:0f:58:a2:74:3c:da:30:29:d7:c1:6c:79:02:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:08:E8:17:A3:B5:4B:AD:C1:F6:70:A7:64:D1:65:4C:AD:7D:AE:AF
X509v3 Authority Key Identifier:
keyid:F1:DE:0B:54:31:7C:81:5B:05:15:30:02:60:4B:FD:55:90:69:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d4LVDF8gVsFFTACYEv9VZBpqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f3:60:0e:8e:c5:e2:1e:26:ca:07:66:b5:81:60:35:82:b3:
21:4e:60:8f:32:cb:ee:cd:fe:49:b5:c2:9d:dc:49:0b:60:1e:
b1:2b:fd:b1:12:b2:23:c1:88:ba:d5:2b:e7:cd:33:b2:00:79:
1d:7c:e2:41:b1:20:5f:1b:26:9a:46:d0:c1:8d:c3:4d:be:a6:
b0:ca:a3:b7:07:24:b1:57:8f:39:cd:bf:6a:12:bf:9d:6d:d5:
bd:75:f4:f0:d0:1c:e9:bf:0e:22:b9:eb:e3:a1:68:03:64:6e:
f1:55:6b:98:40:e0:e8:2d:25:53:1f:ef:52:34:2c:c7:5e:f3:
fa:e0:46:c7:a5:1d:de:06:c9:07:2f:b6:25:2a:a9:3c:b3:81:
8c:27:93:d3:6c:c0:a2:02:1a:58:4c:33:3f:38:23:a2:97:3f:
1c:a8:d8:44:c8:26:49:99:12:82:ca:e8:aa:f7:c9:b2:48:9c:
8f:42:2e:46:6a:b6:5d:94:fa:d8:ae:db:8a:a8:39:79:07:61:
ce:5b:1c:ef:bb:6e:5b:f2:b8:fc:a0:a6:03:89:d0:a4:a8:1b:
34:d3:2f:a4:f8:f0:00:8f:2d:1b:b7:a6:54:7c:59:85:d7:52:
53:01:87:66:40:93:d6:1c:40:d4:f2:f7:32:25:3d:f2:7b:09:
d9:79:7b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:31:26 2025 by rpki-client