Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
File: SRrcI2V17CPX67-9wgQ5kYAmvvw.mft (raw, json)
Hash identifier: JikC8y+lLfsYtWjJq3DJwarGHu9m5b9QYB5m8n56nmg=
Subject key identifier: 0C:C1:68:9C:C6:F0:15:23:8D:37:C7:25:1C:78:6C:1F:FB:D3:7C:96
Authority key identifier: 49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
Certificate issuer: /CN=491adc236575ec23d7ebbfbdc20439918026befc
Certificate serial: 0194BBCEA8375B52E92D2AC93A4AE4CFEE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
Manifest number: 1151
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: SRrcI2V17CPX67-9wgQ5kYAmvvw.crl (hash: iE5ztXyK4kyCzp6J+Bzay8wBMlhbI6cxMJBu8lt9CYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a8:37:5b:52:e9:2d:2a:c9:3a:4a:e4:cf:ee:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491adc236575ec23d7ebbfbdc20439918026befc
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=0cc1689cc6f015238d37c7251c786c1ffbd37c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:78:3f:e0:1a:b2:e6:1d:c4:4c:08:9c:57:
2a:ec:ba:db:55:f7:8e:05:61:b6:c6:06:5b:1c:94:
9c:c5:c0:af:12:d7:28:df:52:9e:1a:7f:78:e6:44:
bb:1f:c3:58:63:7d:16:c7:e7:ce:71:a1:84:48:0c:
dd:e3:5f:51:af:1b:e5:b8:9a:7f:2f:4d:87:75:9b:
fc:2d:fe:d2:5e:1a:65:b5:55:78:12:f8:c5:e6:0d:
b8:9f:91:ee:73:74:cd:cc:49:e1:94:a8:ab:95:03:
48:42:8a:d3:c9:7c:0f:bf:ea:df:2e:2b:5f:a5:23:
27:5e:93:43:ae:ae:a1:03:bb:d7:44:cb:eb:93:be:
bb:4f:69:f2:2b:8c:ac:d7:fb:49:3d:90:fe:04:5d:
f0:1f:05:f0:2c:cc:f2:4b:e9:5e:ae:76:6f:4d:92:
3a:e2:1e:fb:37:38:ea:36:c1:c1:d9:88:65:54:7c:
62:54:54:66:cd:6f:40:7b:6c:f1:9a:d6:f9:c6:0a:
26:4b:64:62:e6:f1:1b:78:6c:e1:f2:d2:32:5f:b9:
6e:aa:10:10:e8:be:37:35:7a:b5:0b:64:b3:79:48:
81:99:d9:69:37:b2:59:45:d2:37:a9:2d:49:54:5d:
bc:f4:c6:44:8a:c2:ac:ea:80:f7:2b:e8:e9:65:d2:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C1:68:9C:C6:F0:15:23:8D:37:C7:25:1C:78:6C:1F:FB:D3:7C:96
X509v3 Authority Key Identifier:
keyid:49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ce:33:51:1c:e0:83:57:b7:ed:37:68:e3:08:99:e2:35:c5:
b1:2a:a4:a1:9c:e5:44:44:eb:c5:f5:cc:03:d9:8d:11:ce:59:
9f:80:a1:83:0b:22:00:25:1b:f7:cf:d4:18:94:4e:fd:3f:d3:
17:4e:7b:d5:8b:0f:7c:1d:ba:a9:02:1f:eb:d7:9e:94:1e:64:
88:23:83:4c:8e:56:8d:80:4b:4c:a6:47:3e:e2:9f:37:17:52:
2d:71:51:87:07:66:d3:3e:e8:85:0f:5d:a9:e6:31:23:55:75:
28:7e:4d:da:fa:53:53:54:d6:a4:e6:7d:be:89:bd:9e:1b:75:
bd:cf:a0:2f:c0:06:0a:4d:b6:ff:c1:79:65:9c:c5:93:8d:0d:
64:fe:3f:3e:32:1a:1f:4d:93:95:f7:4a:ba:80:50:be:49:6a:
31:7b:98:a2:b3:ad:e3:62:49:cf:4e:4d:28:ec:99:41:da:8a:
c4:8c:33:89:0e:69:c0:7f:4e:45:3e:eb:00:7e:17:a2:85:a0:
48:1b:0a:66:6d:d3:ee:4e:86:22:48:c4:4e:01:c2:5e:1c:e0:
7a:7f:f9:99:a4:3b:f6:be:b0:79:b4:76:cc:ec:1f:19:32:5c:
16:a2:24:c6:29:47:73:79:c7:52:66:ba:8c:0a:0c:62:98:db:
a3:3c:1d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:35 2025 by rpki-client