Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a35af5-bd96-4f5c-86c0-d9db770438e8/1/SAzOVGbhQMwvJCxhRG5LhH1IMkM.mft
File: SAzOVGbhQMwvJCxhRG5LhH1IMkM.mft (raw, json)
Hash identifier: QHEiSE23HQXbWdZi9bfzPma/SqxFMENjGc7uFLoro30=
Subject key identifier: 32:79:C8:8D:83:EC:4C:E0:70:07:62:E2:4E:EE:DD:A8:E2:32:CB:2D
Authority key identifier: 48:0C:CE:54:66:E1:40:CC:2F:24:2C:61:44:6E:4B:84:7D:48:32:43
Certificate issuer: /CN=480cce5466e140cc2f242c61446e4b847d483243
Certificate serial: 0195513CD850240E30A5D1102FDCCE0250F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAzOVGbhQMwvJCxhRG5LhH1IMkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a35af5-bd96-4f5c-86c0-d9db770438e8/1/SAzOVGbhQMwvJCxhRG5LhH1IMkM.mft
Manifest number: 01
Signing time: Sat 01 Mar 2025 10:24:56 +0000
Manifest this update: Sat 01 Mar 2025 10:24:56 +0000
Manifest next update: Sun 02 Mar 2025 10:24:56 +0000
Files and hashes: 1: SAzOVGbhQMwvJCxhRG5LhH1IMkM.crl (hash: 6RyKJDwi+lnqPv53wLscEZviWDmedvtjyO1/wGfQLxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:51:3c:d8:50:24:0e:30:a5:d1:10:2f:dc:ce:02:50:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480cce5466e140cc2f242c61446e4b847d483243
Validity
Not Before: Mar 1 10:24:56 2025 GMT
Not After : Mar 2 10:24:56 2025 GMT
Subject: CN=3279c88d83ec4ce0700762e24eeedda8e232cb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:5a:ec:88:81:da:ea:bc:aa:36:fc:fa:48:
14:38:39:d6:c9:47:3a:f9:af:4c:cb:8a:d8:2b:3a:
a2:6d:0f:dc:89:55:39:48:db:e8:c6:52:3f:2c:75:
e3:3c:7d:45:ea:a2:7b:3c:07:f4:04:23:17:ee:4b:
a0:87:df:ef:a8:76:6b:10:3e:3a:f0:af:15:02:b9:
5d:b2:88:45:fe:b0:f9:0f:c2:5a:b1:73:cd:c6:45:
bc:69:06:36:a5:42:9c:2a:f3:17:1a:29:a7:a0:1c:
27:5d:e3:a2:cc:1f:81:89:6e:09:cf:00:63:9a:22:
af:82:b7:af:36:63:cb:d8:ab:e2:96:fd:99:b1:41:
4c:5d:89:e6:67:b4:5a:c7:ff:0f:74:e9:5c:9a:5d:
79:7d:72:a8:b6:ae:5b:55:25:df:46:9d:04:e8:af:
8e:86:5b:30:0b:5f:de:ec:c5:f7:1f:8c:21:cd:b3:
95:db:be:96:45:1e:ba:87:85:e4:ed:93:63:ee:0e:
65:70:cf:69:df:12:7a:6a:f9:54:87:df:57:79:c7:
da:2a:07:0e:f9:09:00:ce:70:d4:85:97:6d:b4:43:
bb:79:e3:1c:82:4b:db:20:f9:47:95:5a:85:c1:88:
32:ba:a6:fe:ef:d9:52:b8:b6:25:56:f1:9c:db:c1:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:79:C8:8D:83:EC:4C:E0:70:07:62:E2:4E:EE:DD:A8:E2:32:CB:2D
X509v3 Authority Key Identifier:
keyid:48:0C:CE:54:66:E1:40:CC:2F:24:2C:61:44:6E:4B:84:7D:48:32:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAzOVGbhQMwvJCxhRG5LhH1IMkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a35af5-bd96-4f5c-86c0-d9db770438e8/1/SAzOVGbhQMwvJCxhRG5LhH1IMkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a35af5-bd96-4f5c-86c0-d9db770438e8/1/SAzOVGbhQMwvJCxhRG5LhH1IMkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:71:e1:fb:3f:4c:ab:6d:7a:70:bf:d3:fb:f8:e9:4c:34:8b:
0f:5e:d5:67:54:42:b2:33:6c:c5:23:8f:fe:c4:7d:2b:95:60:
e4:48:4a:7d:11:9a:74:b5:82:70:9b:30:58:b1:aa:27:12:9a:
45:ad:ab:33:6a:a6:cd:75:86:0d:59:8c:01:28:51:87:dc:ac:
8b:ba:4b:f2:5d:27:b0:d3:ff:e0:43:56:c3:ef:e7:01:be:f6:
b0:6f:67:47:64:12:72:1e:eb:f3:fa:8f:b6:08:a5:f4:b6:97:
a7:40:5c:22:41:86:03:b8:da:4d:45:e3:1d:c5:d5:3e:d9:eb:
75:14:54:fc:b9:3c:5e:ea:6d:c4:7e:57:f2:27:09:80:72:9d:
53:84:bb:f3:79:ef:31:f2:e1:42:35:93:d6:53:56:92:f3:72:
82:bb:60:ec:09:dc:3b:fc:2e:8e:d8:20:68:a1:ca:ae:33:66:
b5:88:2b:f3:cb:27:ec:8c:a6:6a:c3:1d:68:71:20:d6:ac:e5:
e9:a8:c3:2b:cb:e0:fd:03:64:9f:dc:61:f4:27:7d:b1:07:05:
ca:81:0d:ad:ef:b3:71:a7:e4:37:81:69:6e:58:a6:4f:77:56:
82:81:9e:43:a7:ac:d6:8a:9c:9d:c6:4a:12:58:f0:e0:c8:5e:
6d:32:21:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:30:38 2025 by rpki-client