Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/0d4223-badf-4030-906c-db22c5355dcf/1/81DHgE_X8KfylQ_RnPxactAZZdI.mft
File: 81DHgE_X8KfylQ_RnPxactAZZdI.mft (raw, json)
Hash identifier: j2i/zUUHa1Vvnpj5isd8kKrUKXKR/mynyTmPljfwJsU=
Subject key identifier: D3:ED:EA:FB:3E:C6:18:4D:E6:40:D1:13:DD:EA:DA:64:C5:5D:27:ED
Authority key identifier: F3:50:C7:80:4F:D7:F0:A7:F2:95:0F:D1:9C:FC:5A:72:D0:19:65:D2
Certificate issuer: /CN=f350c7804fd7f0a7f2950fd19cfc5a72d01965d2
Certificate serial: 0186ACF2873CC6AAAC166A03B1FD51E4B133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81DHgE_X8KfylQ_RnPxactAZZdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/0d4223-badf-4030-906c-db22c5355dcf/1/81DHgE_X8KfylQ_RnPxactAZZdI.mft
Manifest number: 01
Signing time: Sat 04 Mar 2023 14:07:00 +0000
Manifest this update: Sat 04 Mar 2023 14:07:00 +0000
Manifest next update: Sun 05 Mar 2023 14:07:00 +0000
Files and hashes: 1: 81DHgE_X8KfylQ_RnPxactAZZdI.crl (hash: F1EHorFCqjXgXfksxItCEzcwFR2yRxEKw2jk6La0+lU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ac:f2:87:3c:c6:aa:ac:16:6a:03:b1:fd:51:e4:b1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f350c7804fd7f0a7f2950fd19cfc5a72d01965d2
Validity
Not Before: Mar 4 14:07:00 2023 GMT
Not After : Mar 5 14:07:00 2023 GMT
Subject: CN=d3edeafb3ec6184de640d113ddeada64c55d27ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f9:0d:9f:52:b8:09:45:ed:9e:fc:05:4e:1c:
9c:4f:ca:7e:21:ce:12:54:ed:37:e5:e4:32:aa:d0:
bd:4b:9f:fc:75:85:e4:b9:11:a7:38:8b:34:35:1d:
08:e2:96:b7:5d:77:08:79:b5:66:c8:30:8b:5e:b2:
f0:aa:ae:ef:df:e0:e8:5e:b5:69:eb:2c:b3:c1:b3:
33:71:84:8d:78:3f:6c:40:a0:b9:9b:e7:61:85:85:
d4:89:29:12:8b:a7:50:69:0d:76:3a:0a:81:a1:98:
d5:2f:ee:32:c2:92:8d:50:bc:38:54:d5:df:ca:a4:
64:62:5b:ac:44:b8:6d:7d:a2:c7:f6:39:51:7e:f1:
74:e3:e9:ed:35:73:b8:72:bf:ad:62:c7:0c:f6:3d:
60:a0:a9:c5:22:62:aa:7c:56:5c:d3:4a:15:a2:8c:
62:ed:64:1d:b1:2d:44:25:41:fa:76:f7:c2:70:7f:
d6:c3:5b:2a:08:cc:9f:01:8b:7a:a4:cf:6b:0c:08:
50:bd:50:22:8d:56:0e:24:8c:01:97:98:39:b6:57:
84:23:de:79:55:2a:f9:48:90:33:b8:e6:50:12:91:
71:22:27:5b:99:b2:1a:73:11:30:3d:82:08:49:a6:
06:4e:cc:52:33:3e:68:48:2d:84:7e:ed:85:e3:03:
7c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:ED:EA:FB:3E:C6:18:4D:E6:40:D1:13:DD:EA:DA:64:C5:5D:27:ED
X509v3 Authority Key Identifier:
keyid:F3:50:C7:80:4F:D7:F0:A7:F2:95:0F:D1:9C:FC:5A:72:D0:19:65:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81DHgE_X8KfylQ_RnPxactAZZdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0d4223-badf-4030-906c-db22c5355dcf/1/81DHgE_X8KfylQ_RnPxactAZZdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0d4223-badf-4030-906c-db22c5355dcf/1/81DHgE_X8KfylQ_RnPxactAZZdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d6:ed:c2:42:22:ce:cb:86:7c:43:f5:f3:23:56:26:30:03:
43:5a:64:1a:b9:b6:73:29:10:ae:74:5e:ca:4a:ab:82:39:96:
cb:69:68:a6:1e:0a:ae:6a:f1:9d:0a:f0:7d:93:52:ce:62:99:
fc:f6:f4:90:6d:82:a4:67:70:34:92:ea:fe:07:76:b6:9f:6f:
8a:b2:43:d6:0f:a9:91:4d:d6:f9:7a:b1:d2:37:b9:35:73:4a:
c6:8b:f2:88:0c:8e:f8:22:5c:75:20:b4:d6:f7:55:09:bf:54:
78:90:68:e3:90:33:9d:60:0b:dd:90:3b:18:8d:8f:7d:f8:99:
07:a9:84:08:a8:3b:77:5a:bf:33:21:b6:55:d9:39:48:35:56:
11:1f:40:0b:63:a1:3b:7b:fc:de:61:fd:e9:d6:dd:a1:35:b2:
ec:86:a6:72:80:42:e7:b1:53:4c:54:bc:8f:16:dd:11:76:c3:
0c:61:ad:8c:5f:77:2d:e3:bd:c5:00:6b:6e:4a:40:5e:40:cc:
b4:22:19:ca:0c:ac:a5:74:e0:bb:0f:07:60:86:1d:da:21:81:
3c:4c:63:0f:df:c6:a5:a1:3a:49:3c:be:b4:cf:48:c6:9f:f1:
7d:16:f5:61:d8:86:f9:fb:46:7e:7a:f2:fd:60:d2:be:56:cb:
72:5a:9e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:17 2025 by rpki-client