Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/85710d-f078-4613-b173-dd4b785ca5ed/1/0CdGZU04uoKhdY-22KoxZtMCKIk.mft
File: 0CdGZU04uoKhdY-22KoxZtMCKIk.mft (raw, json)
Hash identifier: JhGhgFm1QjC5jQ+mf+xtbNTDzvErumdtLkAk4y4XoKc=
Subject key identifier: D6:E0:EA:3C:96:AC:76:CC:6A:30:5E:ED:AD:53:F3:F2:90:87:E9:21
Authority key identifier: D0:27:46:65:4D:38:BA:82:A1:75:8F:B6:D8:AA:31:66:D3:02:28:89
Certificate issuer: /CN=d02746654d38ba82a1758fb6d8aa3166d3022889
Certificate serial: 018E4A6128411191BD7DB65F97B538C466DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CdGZU04uoKhdY-22KoxZtMCKIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/85710d-f078-4613-b173-dd4b785ca5ed/1/0CdGZU04uoKhdY-22KoxZtMCKIk.mft
Manifest number: 01
Signing time: Sun 17 Mar 2024 03:07:45 +0000
Manifest this update: Sun 17 Mar 2024 03:07:45 +0000
Manifest next update: Mon 18 Mar 2024 03:07:45 +0000
Files and hashes: 1: 0CdGZU04uoKhdY-22KoxZtMCKIk.crl (hash: Vu5LoId1zDeFrikW7pn3wGT2Y1HuLeGUfVR0nIDDyqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4a:61:28:41:11:91:bd:7d:b6:5f:97:b5:38:c4:66:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02746654d38ba82a1758fb6d8aa3166d3022889
Validity
Not Before: Mar 17 03:07:45 2024 GMT
Not After : Mar 18 03:07:45 2024 GMT
Subject: CN=d6e0ea3c96ac76cc6a305eedad53f3f29087e921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:c1:53:43:c7:8c:fd:da:40:cb:7b:21:74:
17:2b:0d:ca:9a:c2:56:2e:1d:9c:c3:0a:28:58:52:
0b:c0:03:0d:d8:82:60:7d:8c:3c:9a:cc:a4:70:26:
fb:d2:d5:26:78:67:12:1a:e2:e0:46:62:5f:d6:07:
2a:2c:b7:4d:f6:f2:48:74:b7:4e:bd:75:7d:d0:f8:
91:95:23:f4:9d:f3:db:2c:43:01:04:dc:bc:3d:1c:
57:b7:a5:b8:c3:3d:c6:d4:35:b2:52:99:c6:41:3e:
96:32:bc:bd:b9:9c:34:56:8c:27:73:3a:d0:48:9e:
cc:ca:a5:95:bd:de:6e:26:ea:98:14:22:12:f7:6c:
5c:95:56:23:60:0f:22:60:70:30:91:59:94:f0:f6:
27:90:a6:be:6d:d4:72:19:50:38:36:89:4f:90:49:
28:2b:9a:af:cd:7b:41:d6:f3:c8:e4:cb:44:3d:7d:
60:f2:41:ff:e9:18:66:04:ae:41:1b:52:13:a4:a9:
77:8c:3b:c8:d0:88:9b:32:08:5f:b2:fe:84:54:84:
7f:43:75:ec:38:de:f4:9d:b0:d7:e1:c8:a3:6d:ad:
14:e5:ba:f1:15:cb:ac:7e:34:df:6d:e1:60:7c:b1:
18:5f:35:4a:f5:ea:ec:1f:e7:12:d1:3c:1d:13:cf:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E0:EA:3C:96:AC:76:CC:6A:30:5E:ED:AD:53:F3:F2:90:87:E9:21
X509v3 Authority Key Identifier:
keyid:D0:27:46:65:4D:38:BA:82:A1:75:8F:B6:D8:AA:31:66:D3:02:28:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CdGZU04uoKhdY-22KoxZtMCKIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/85710d-f078-4613-b173-dd4b785ca5ed/1/0CdGZU04uoKhdY-22KoxZtMCKIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/85710d-f078-4613-b173-dd4b785ca5ed/1/0CdGZU04uoKhdY-22KoxZtMCKIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:25:e4:7e:26:d2:6c:4d:3b:6a:69:64:b8:a4:5b:95:f4:92:
10:1b:bd:c6:e5:aa:09:02:ea:54:c7:be:5d:dd:df:ae:4e:b2:
af:56:97:37:a8:f3:ed:99:15:1f:89:01:b4:09:97:9c:ca:40:
f1:58:b0:76:4d:ee:f1:d4:b1:5e:1d:cc:2f:c8:2a:1e:3f:7c:
e7:02:32:3b:37:15:1b:3d:bc:16:6c:9c:8d:14:52:0e:fc:43:
c8:6b:e0:e2:d5:d9:25:2e:a5:76:b6:fc:88:59:10:07:c8:40:
16:e3:c9:e5:32:ae:73:48:21:b5:5f:53:87:30:d5:e0:c7:1b:
b7:5b:7e:4f:0d:ec:19:f4:ea:dc:74:72:a8:7c:0b:a0:28:94:
b8:2b:e8:cb:08:64:f8:d7:2b:e1:93:05:f9:fa:2a:44:f8:4f:
9d:c3:e3:33:24:93:87:6f:97:8e:f5:32:49:48:9e:e9:0f:04:
95:d4:07:d8:ba:f2:6a:3a:42:6b:51:f9:0a:ca:94:15:a6:9d:
4f:da:b7:e8:f1:73:af:bb:8a:e4:3e:45:50:7c:81:f7:9b:0d:
41:47:7a:a2:fe:58:44:97:d3:14:12:ed:f0:dd:29:d1:37:28:
bd:e1:58:b0:37:07:fb:fe:08:d5:6c:f3:76:f3:c2:2a:12:82:
c5:46:d7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:17:48 2025 by rpki-client