Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
File: 9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json)
Hash identifier: vurCQN6ppQefb9DoNj7vVhMw8et4BIi4Z+2tlQOqd00=
Subject key identifier: 88:DB:3C:4C:3C:60:C7:F1:F8:4A:09:2D:8D:2B:D3:CF:FF:39:3F:67
Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
Certificate issuer: /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Certificate serial: 0194BCA9776BD6557783DBEA837A246F16EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
Manifest number: 0153
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: pZpRnjid9Q4LzEK96A+4fRGDZXmhjpbgtUpyc5x4B/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:77:6b:d6:55:77:83:db:ea:83:7a:24:6f:16:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=88db3c4c3c60c7f1f84a092d8d2bd3cfff393f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:ff:5a:f1:16:8c:fa:fc:28:1a:9b:46:ae:
be:db:1a:ca:a4:5b:21:09:fc:33:12:53:54:f3:5a:
db:c3:22:c6:d9:fe:11:08:56:39:5f:0f:e4:0d:ac:
cd:5e:95:cf:6d:67:55:77:44:ab:46:cb:10:89:3f:
62:1b:f9:78:db:23:11:7e:3e:8c:b1:2f:7e:03:bc:
9d:5c:8e:ee:e7:a0:a7:5e:63:3c:b0:a1:1d:6a:44:
86:1d:5f:97:d3:fb:2a:43:5d:07:68:ee:ca:b4:fe:
8f:33:0c:ce:30:ae:13:24:de:20:2e:91:65:94:12:
6d:8a:b2:ef:0a:c7:11:2b:04:dc:b8:8c:a1:bb:a5:
e9:af:fe:25:30:7d:a3:37:cc:74:bb:ab:88:a9:05:
b5:fc:b4:69:ac:44:02:c0:1b:ef:07:b5:73:f8:a0:
1b:82:92:17:88:23:b6:5e:45:89:59:d1:c6:03:b1:
c4:9e:ee:24:31:47:91:84:20:bb:1d:31:4e:63:3d:
f3:95:94:b5:31:80:26:57:ae:f8:9e:2c:77:a0:53:
33:a7:56:00:68:df:84:47:0a:a3:3a:4c:14:1b:93:
d7:e3:eb:5b:6a:0c:21:48:b9:07:c4:0a:0d:90:d6:
c6:18:28:26:e8:58:d7:5d:3f:1d:8b:9f:62:ce:14:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DB:3C:4C:3C:60:C7:F1:F8:4A:09:2D:8D:2B:D3:CF:FF:39:3F:67
X509v3 Authority Key Identifier:
keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2b:30:c9:fb:e8:70:1f:f2:b9:47:72:be:43:81:d8:1c:3f:
36:e6:16:31:2d:87:bf:bd:5e:52:bf:e4:e6:60:8e:bd:45:26:
9f:37:87:79:f2:2d:3f:42:1e:2e:73:95:09:d7:db:e5:86:c2:
3f:4a:c6:61:b6:dc:70:e7:17:65:65:7d:df:a9:a9:c2:81:2c:
6d:67:d6:0a:41:a0:1d:d5:1e:c9:f8:3b:27:5e:db:38:c7:de:
e6:58:01:85:e5:21:ef:7e:9c:05:7b:22:6c:b2:eb:7b:a6:b3:
02:46:cc:3a:83:31:ef:d9:01:2d:a0:b0:32:60:35:7a:65:24:
8b:8d:16:d8:82:f8:53:54:60:38:1f:2a:0c:71:bb:0e:91:eb:
73:7f:f6:ea:3b:2e:d0:ea:81:0b:82:b2:ef:e6:f4:54:bf:98:
9f:0c:3e:1a:28:ac:93:1a:fb:ab:9c:97:b6:9e:28:65:20:75:
b0:5f:b4:d7:e9:40:02:d5:03:92:55:5b:a7:d7:81:eb:c8:5c:
c4:b0:4d:46:1d:c9:d0:70:3a:53:1b:9e:7c:eb:05:7a:c5:3a:
fc:47:d3:62:73:13:01:df:2e:a0:e0:d5:9a:5e:52:17:fd:da:
d8:d0:6d:8b:8f:c4:22:c8:cd:8e:fe:60:0c:15:e1:9d:eb:e7:
2d:4e:2d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:15:53 2025 by rpki-client