Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/03abaf-f8a0-41ff-a1bc-9dc4657f4975/1/40aW5qhVeR3hjKFc9njupXNgZys.mft
File: 40aW5qhVeR3hjKFc9njupXNgZys.mft (raw, json)
Hash identifier: trYdsrjKYw6wp0lCA54V6iOPDagYvjEgiieeQRizA10=
Subject key identifier: 81:D6:97:24:1A:F5:5F:4F:4F:6B:72:16:79:71:EC:C6:DB:4B:7D:57
Authority key identifier: E3:46:96:E6:A8:55:79:1D:E1:8C:A1:5C:F6:78:EE:A5:73:60:67:2B
Certificate issuer: /CN=e34696e6a855791de18ca15cf678eea57360672b
Certificate serial: 01929F125BB568E3B1F01A7BC1BFF8A713E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40aW5qhVeR3hjKFc9njupXNgZys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/03abaf-f8a0-41ff-a1bc-9dc4657f4975/1/40aW5qhVeR3hjKFc9njupXNgZys.mft
Manifest number: 130C
Signing time: Fri 18 Oct 2024 10:00:33 +0000
Manifest this update: Fri 18 Oct 2024 10:00:33 +0000
Manifest next update: Sat 19 Oct 2024 10:00:33 +0000
Files and hashes: 1: 40aW5qhVeR3hjKFc9njupXNgZys.crl (hash: As1kqRwFYMrIB0MGdx3Pej75dofCEuUyc7rnSpB7j30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9f:12:5b:b5:68:e3:b1:f0:1a:7b:c1:bf:f8:a7:13:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34696e6a855791de18ca15cf678eea57360672b
Validity
Not Before: Oct 18 10:00:33 2024 GMT
Not After : Oct 19 10:00:33 2024 GMT
Subject: CN=81d697241af55f4f4f6b72167971ecc6db4b7d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:ee:b0:8d:91:c4:65:21:e7:9d:e0:7a:74:
1d:83:bf:c4:3c:94:63:5a:69:33:b3:e5:df:b0:ba:
c1:a1:33:19:67:96:40:fe:74:d9:6f:80:3e:9e:0e:
59:fe:e7:81:6a:25:54:60:ae:27:e2:59:28:39:a3:
05:8a:c9:b1:0a:60:89:06:10:15:d2:5a:df:f5:1e:
2a:ef:d9:87:71:4b:9a:c2:a1:c7:43:af:fc:5d:28:
65:a2:3b:5c:ed:01:83:f1:40:f6:d3:c0:60:02:3d:
37:05:16:fb:05:6b:9f:4b:94:d7:7f:59:9d:ae:98:
a2:dd:88:6e:be:56:a7:45:b4:cc:17:ea:2d:89:61:
8c:d6:ac:fa:90:e6:95:a8:98:00:15:69:c7:26:e9:
53:90:1e:35:3c:c5:f8:3c:e7:b4:30:4b:a1:e2:b8:
4d:e7:f3:26:bb:d2:4a:d9:54:76:3d:50:47:fd:3b:
e0:bc:a1:3a:ca:da:3d:6b:03:5c:00:f2:d0:c7:8e:
70:cc:5e:98:8c:0a:d4:c4:9d:06:24:37:a4:8d:10:
39:c5:bf:17:60:ac:45:d1:20:e4:42:53:a6:bf:63:
04:64:82:ad:9e:a0:1f:1c:8c:45:50:9c:93:08:fb:
a2:e9:ef:6a:86:6b:72:f8:bb:90:52:5a:6b:7e:df:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D6:97:24:1A:F5:5F:4F:4F:6B:72:16:79:71:EC:C6:DB:4B:7D:57
X509v3 Authority Key Identifier:
keyid:E3:46:96:E6:A8:55:79:1D:E1:8C:A1:5C:F6:78:EE:A5:73:60:67:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40aW5qhVeR3hjKFc9njupXNgZys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/03abaf-f8a0-41ff-a1bc-9dc4657f4975/1/40aW5qhVeR3hjKFc9njupXNgZys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/03abaf-f8a0-41ff-a1bc-9dc4657f4975/1/40aW5qhVeR3hjKFc9njupXNgZys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:17:86:92:bb:2f:14:d4:d2:57:94:ad:04:81:d2:89:3a:f1:
4d:de:8c:29:cf:f0:76:ad:db:8b:f4:63:b1:51:7d:67:c0:d5:
bb:a6:52:60:86:8f:9b:eb:f5:62:90:bb:77:c9:71:ce:ef:3c:
22:5c:33:7f:40:e2:58:f4:cd:14:0a:89:46:9b:9d:5d:f3:d9:
14:69:8e:79:f3:cc:98:68:ab:4d:58:42:ed:07:6e:3b:d4:31:
3f:95:bb:5f:49:bc:23:b5:62:38:ee:61:b3:f2:3e:bd:40:5f:
4d:de:c1:dc:6e:1c:93:12:3d:62:c2:12:4b:1e:d4:03:d3:2a:
d5:7f:0c:d0:d2:fe:f4:16:c9:4e:be:8a:29:93:a2:23:ae:86:
3e:ff:ed:d1:d1:cf:d3:5b:c3:5d:e9:b5:47:6a:90:b9:02:98:
12:dc:6d:32:f4:02:03:c1:5a:d2:41:68:ae:a2:34:68:30:f5:
33:75:23:51:d9:fa:62:a4:e7:da:41:60:f3:22:51:f9:b9:ad:
84:a6:38:ff:d7:22:dd:fa:50:5d:f6:cf:78:78:5b:d2:6c:63:
38:52:fe:62:3e:01:22:00:63:d3:e2:7b:17:38:58:32:05:4a:
ca:41:00:d7:ca:5a:8a:9f:54:f0:47:07:51:f4:9a:ea:1b:b9:
50:55:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:26:18 2025 by rpki-client