Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
File: _hEX6Xaz4zlTuTYbtLseui9Ane0.mft (raw, json)
Hash identifier: +cGp69tKDwci44aM5pkZaEinAZM0Yzwpka2UVcSSw8g=
Subject key identifier: 4A:10:AC:6C:B7:1C:1C:BF:36:72:4A:0A:C4:83:18:D6:18:AD:74:37
Authority key identifier: FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
Certificate issuer: /CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Certificate serial: 0194BCA9834DFDF2CB39C8A07A721B10E5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
Manifest number: 0547
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: _hEX6Xaz4zlTuTYbtLseui9Ane0.crl (hash: ylnaU7hpmT7qgNlVpMBNDh/xLXihXf7UZX4HZaUasn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:83:4d:fd:f2:cb:39:c8:a0:7a:72:1b:10:e5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=4a10ac6cb71c1cbf36724a0ac48318d618ad7437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:00:0d:20:17:8a:78:ba:36:36:17:2b:ca:10:
93:ab:86:64:48:e9:dd:7b:90:b5:a9:10:10:4a:ba:
2e:4f:6b:b6:20:fa:39:af:43:4b:f9:25:8f:a4:6e:
9e:d7:6c:87:b6:53:66:78:a5:bf:21:25:2f:b9:c0:
e6:bc:e7:f3:e4:ce:cb:ea:c7:9b:34:cc:06:00:b8:
a4:69:20:8a:0d:c1:73:44:a8:c9:c9:bd:32:30:be:
fc:eb:3d:68:82:8c:0e:4b:2e:e8:0d:4e:1e:4f:10:
77:ce:45:e3:ee:ac:17:17:5f:a1:5b:5e:64:12:46:
dc:3a:80:55:a7:bd:1d:29:38:d0:cb:07:14:d3:6b:
f2:9f:a2:11:9e:6f:00:63:37:4b:02:ce:5a:d0:47:
bd:e2:a5:f0:8c:77:7a:00:db:31:9a:6a:00:18:f9:
97:a4:38:20:80:bb:49:f1:9e:4b:9a:15:8b:b1:d9:
0e:df:4d:02:d8:8f:20:51:10:4b:9b:c1:d8:e0:f3:
b6:be:a7:cb:06:e3:c2:93:2e:d3:a0:0a:ec:85:d6:
f5:97:c6:0e:06:8e:1c:b2:7d:be:63:23:94:cb:21:
ec:22:70:ef:29:ae:92:0d:e7:80:28:69:00:7f:03:
a8:05:06:20:3f:0a:20:6e:ef:df:b4:6b:9b:c4:e2:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:10:AC:6C:B7:1C:1C:BF:36:72:4A:0A:C4:83:18:D6:18:AD:74:37
X509v3 Authority Key Identifier:
keyid:FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e7:cd:d4:24:06:69:fd:9d:d4:de:4f:d1:fc:4e:69:06:32:
5f:0e:3d:6d:2d:6d:93:2d:6d:12:18:99:3f:88:48:fb:e5:05:
79:b0:52:31:2d:81:2d:d4:87:6b:cf:a6:a5:cd:4d:63:65:09:
7c:0c:47:74:e6:59:13:18:ec:91:d8:6d:fc:c8:97:a3:22:c3:
c4:51:fa:9f:9e:16:e9:59:bd:d9:b2:ba:33:2e:30:08:17:d9:
80:32:a0:2b:92:1a:78:1b:1e:aa:c5:e8:cc:21:99:b4:73:fe:
a5:8e:d6:f7:08:f2:06:7b:2e:da:2f:61:6b:25:c8:6d:12:2f:
13:4e:b0:89:25:de:03:c6:c6:99:64:6f:86:eb:0e:a5:63:59:
81:89:2b:4f:70:0e:be:94:1b:66:d4:16:8a:7c:e4:33:e1:3a:
6f:1a:77:0d:a6:1e:79:e7:b5:61:de:5f:90:3d:75:57:a9:ec:
3c:5b:13:e3:1b:e1:71:5f:e0:be:05:44:db:9e:ef:f3:f4:0b:
46:6a:c7:4a:50:10:9d:aa:d8:c2:ea:40:b2:43:79:b7:a1:e9:
a0:d4:1e:e9:8c:75:5a:16:b7:7e:3c:03:db:74:28:69:24:a7:
b9:16:8a:69:7a:14:81:15:2d:a2:ed:c8:41:40:79:0d:6f:29:
52:4e:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:23 2025 by rpki-client