Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
File: c1AO60fC8TVxh2oZZjU3-LY2qA8.mft (raw, json)
Hash identifier: j5k+Hf3xr/A7VuFpND4hCersqXoPWXfcjqfd5pvB9jc=
Subject key identifier: 9C:FA:52:AB:33:22:3E:2B:79:E7:54:9E:42:0E:4E:50:2A:AF:33:11
Authority key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
Certificate issuer: /CN=73500eeb47c2f13571876a19663537f8b636a80f
Certificate serial: 0194BCE0C61D33A18EF62A65B430A1174FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
Manifest number: B1
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: c1AO60fC8TVxh2oZZjU3-LY2qA8.crl (hash: coz5ub3KvaUvbhwlFYtxSgAi+XV2Cy5eonnXdrtT9N4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c6:1d:33:a1:8e:f6:2a:65:b4:30:a1:17:4f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73500eeb47c2f13571876a19663537f8b636a80f
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=9cfa52ab33223e2b79e7549e420e4e502aaf3311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:f2:3d:4f:de:5a:38:5d:85:30:e1:97:35:
8c:23:fd:7b:fd:54:c6:36:52:aa:ef:18:d1:03:3f:
c7:32:dd:ec:b5:30:f3:0d:2e:23:bc:15:d0:c7:e3:
3d:f8:e9:4c:09:b6:ef:e9:06:cf:1d:56:b2:81:10:
a0:e2:ef:e9:b3:a7:1f:62:69:48:e5:83:30:a3:da:
80:de:bc:06:32:91:9a:69:b5:0e:f7:69:10:a2:57:
8a:67:16:4b:30:67:27:21:6c:49:d1:dc:18:d7:b1:
fd:93:c9:a0:19:b7:f0:cf:74:39:99:d6:49:e5:3b:
38:aa:63:59:47:81:cf:10:62:be:79:3d:0e:aa:d2:
f7:30:71:00:fc:0e:67:fd:16:2d:66:66:49:8c:86:
ae:47:a1:ad:c9:06:98:75:cf:35:59:21:68:7d:7a:
ae:e3:c7:8b:8a:33:7f:66:97:a9:10:13:83:93:6e:
87:d4:8a:b1:f8:3e:5e:0f:26:da:a9:75:87:50:08:
78:4b:1e:53:11:89:4b:13:9b:54:a4:5e:6c:67:50:
db:fc:42:67:0a:ca:0b:d3:09:c8:8c:7e:53:7c:25:
32:fc:01:52:a5:eb:fb:25:cd:2a:4b:4b:5d:5a:99:
da:41:d2:ba:ad:da:da:66:44:1b:99:ff:93:b0:b8:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FA:52:AB:33:22:3E:2B:79:E7:54:9E:42:0E:4E:50:2A:AF:33:11
X509v3 Authority Key Identifier:
keyid:73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:de:77:5d:6c:42:d1:78:86:89:a9:f9:55:49:44:71:73:0e:
1d:b0:6c:d0:cd:0c:88:df:fa:42:a8:61:7d:3a:f3:6d:6a:ee:
77:c3:62:75:38:ac:94:54:f0:cb:8b:71:5d:b2:5a:ce:27:89:
98:e6:e7:ee:00:3d:1a:74:fc:4e:de:97:11:45:0f:3a:5a:b1:
eb:08:3d:cb:d5:e6:a0:7f:65:09:73:47:92:50:38:8e:38:3f:
5b:02:72:66:7b:ba:33:60:38:fc:5e:88:3c:4c:d5:a4:8c:e0:
11:59:39:4c:03:77:cf:02:36:41:e2:d8:e5:96:f7:6c:9f:33:
04:51:ba:02:24:cf:b5:d4:67:1a:e2:1e:cf:93:ff:fa:12:63:
17:76:03:e7:eb:c5:69:2c:2c:cd:2b:ea:c3:e1:12:a3:07:5c:
c6:95:76:0a:9a:f5:49:36:1d:91:2f:85:16:fd:a0:7b:2f:1f:
30:5c:ec:7e:e5:ce:47:f3:2e:1c:5a:4e:c5:18:fa:7b:04:90:
f9:c2:33:2b:d6:86:d0:7a:54:fb:fa:1c:93:10:7d:ee:f5:b8:
77:17:4f:b4:0a:ad:e5:74:4f:28:07:38:66:80:c4:7c:40:37:
83:60:3e:93:dd:8b:af:80:b2:34:8c:78:e7:bc:96:53:c4:c4:
d1:5e:b1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:15:07 2025 by rpki-client