Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: gA87AMbFISiVXxuFDYAXySk9bqFXxWFIrczlJ7PgXIM=
Subject key identifier: 80:D7:76:2D:BC:18:87:A4:BC:73:28:D9:BA:D4:E8:09:DE:54:E4:17
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 0194BD17AE0D2AADCBC008F740823C193498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: MuXwkut8hYUC610s8OSj2zhlwI3E/EZByJoYUAtisTA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ae:0d:2a:ad:cb:c0:08:f7:40:82:3c:19:34:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=80d7762dbc1887a4bc7328d9bad4e809de54e417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:b8:ac:85:b7:94:a8:7b:17:df:d1:40:20:
d3:1f:59:1d:78:04:8b:5a:a2:4c:ed:5d:8b:47:57:
0d:7f:e7:7e:27:1e:ef:ac:a8:e2:e1:54:1f:09:e1:
d3:69:49:af:ae:d8:8c:29:61:b3:58:c9:e6:62:dd:
20:b9:2f:ef:58:b2:81:64:01:a0:c0:c5:35:88:8d:
42:90:06:7f:3a:86:de:47:8e:1f:c4:fd:06:4d:4e:
97:c9:e8:21:29:cb:67:c7:16:a5:43:af:0d:d6:8f:
05:7f:2c:b7:38:7c:e4:2a:f5:63:78:a8:bc:ff:b0:
86:50:6e:35:fb:d5:9c:58:ac:01:ea:4f:9d:f8:a8:
6f:09:88:17:cc:c5:b9:6e:d9:70:44:6e:17:af:1c:
29:7f:76:8e:49:d1:7e:28:4f:40:06:68:e3:12:7e:
a2:28:b5:cc:30:19:12:d3:b6:35:62:2e:2d:e7:7a:
23:3b:63:7f:ca:b0:3a:4e:ee:42:20:18:47:d8:65:
2f:84:20:9c:dd:91:83:00:03:3d:bc:43:f2:e9:44:
cc:02:11:5a:e1:48:f4:60:0b:7d:08:0b:85:35:9e:
13:d7:09:05:76:8b:65:2c:57:77:a5:ac:71:18:b0:
0e:61:9b:4d:40:8d:30:4e:c9:ee:ea:76:c6:1d:c7:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D7:76:2D:BC:18:87:A4:BC:73:28:D9:BA:D4:E8:09:DE:54:E4:17
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:af:bc:f4:e7:ac:fb:5c:64:e8:bf:79:f3:bd:b2:1a:89:19:
13:1d:ff:7c:9b:f2:92:3a:52:57:b8:37:1d:6d:de:29:09:ff:
2e:2d:bc:97:17:6d:d4:8e:42:bf:f4:37:90:47:67:93:ae:e3:
51:25:41:64:33:98:7d:89:bf:c8:85:5c:33:f6:74:7f:16:eb:
e3:a9:b0:ae:85:dc:05:75:83:4d:67:56:63:b0:d5:65:b2:ce:
d4:7c:2f:1c:a4:a1:45:78:8d:79:75:33:7e:91:d8:59:a4:d4:
cd:c8:71:ea:97:8b:7d:77:33:a7:9a:1f:9d:ce:69:2c:01:56:
db:cd:db:43:51:27:46:81:e5:61:a3:55:5c:ce:df:aa:81:cc:
0d:46:fe:c9:0a:6a:9f:e1:8d:a5:c8:43:02:63:07:86:04:38:
01:19:61:37:4e:62:34:f9:c0:5e:17:1b:cc:8c:64:ae:2d:28:
29:a7:7a:de:0f:a8:60:5a:aa:8b:2c:58:93:26:a1:2a:90:4d:
5c:49:c7:2e:87:b5:62:64:b9:97:32:36:43:38:09:42:ed:0d:
db:b2:11:be:66:12:3c:bc:5d:d8:4c:47:39:fd:39:80:58:3e:
bf:be:30:aa:cf:03:99:5c:34:12:d4:15:48:c7:c8:0e:e3:af:
7c:53:98:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:19 2025 by rpki-client