Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.mft
File: IH7fmk0-60c-6Y8vOyw0PsOsHqw.mft (raw, json)
Hash identifier: JeUFJ6EVsi0X0wyn8xNnwhYnGjQGxqghYHfZRvG2IzQ=
Subject key identifier: 36:77:DB:B2:E2:90:6E:A5:DE:25:ED:25:C8:EF:C8:B5:57:D7:98:DF
Authority key identifier: 20:7E:DF:9A:4D:3E:EB:47:3E:E9:8F:2F:3B:2C:34:3E:C3:AC:1E:AC
Certificate issuer: /CN=207edf9a4d3eeb473ee98f2f3b2c343ec3ac1eac
Certificate serial: 0194BC3CAEB24B4B276425281F0BC69A101E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH7fmk0-60c-6Y8vOyw0PsOsHqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.mft
Manifest number: 0752
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: IH7fmk0-60c-6Y8vOyw0PsOsHqw.crl (hash: duAXoNlCJmg7u6dY05QV4CZowW3ZUIA3iE4KMOQA2xA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ae:b2:4b:4b:27:64:25:28:1f:0b:c6:9a:10:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207edf9a4d3eeb473ee98f2f3b2c343ec3ac1eac
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=3677dbb2e2906ea5de25ed25c8efc8b557d798df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:d7:37:b3:3b:7f:f7:0d:f8:ec:90:d7:fd:
be:d0:60:28:16:8d:12:1d:a5:38:f1:73:a8:7b:f5:
0a:3c:ed:b0:50:b0:0e:6f:cb:0f:79:ba:1a:2a:f4:
51:64:5e:9e:8e:2e:67:e1:4f:4d:ae:b4:43:b0:65:
9a:91:cb:81:c5:a8:e8:6c:1a:9b:c5:9e:3d:1d:91:
0f:0c:50:5c:8f:4b:c2:11:da:a7:52:44:ae:26:3a:
de:6e:e7:03:43:72:c0:e3:bb:b7:d7:6a:0e:a5:9b:
3a:f0:c0:99:1d:4d:38:22:aa:2f:30:7e:f4:7e:18:
90:95:25:25:d1:9d:0f:d4:3c:22:c5:14:0f:fd:a9:
90:90:15:e9:2f:1c:99:6e:ec:ef:ed:41:eb:83:e7:
fd:e6:a0:d7:1b:48:d0:88:f3:d2:13:c3:d2:d8:6c:
89:1b:8e:96:9e:ec:a2:3a:bf:9d:48:3a:4a:01:6a:
94:51:62:61:20:8d:ef:12:36:51:9a:b3:fd:cc:17:
e7:8c:55:7e:a7:db:85:9e:fd:a4:04:6f:ac:6c:78:
aa:05:e2:ca:f8:7b:7c:5a:42:57:14:c1:c8:f8:34:
30:98:fb:01:f5:66:6d:5c:4c:e2:40:30:4f:0f:7c:
d0:9d:85:44:77:e5:59:df:8d:65:38:b2:41:83:7e:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:77:DB:B2:E2:90:6E:A5:DE:25:ED:25:C8:EF:C8:B5:57:D7:98:DF
X509v3 Authority Key Identifier:
keyid:20:7E:DF:9A:4D:3E:EB:47:3E:E9:8F:2F:3B:2C:34:3E:C3:AC:1E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH7fmk0-60c-6Y8vOyw0PsOsHqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:15:85:21:9a:42:85:a1:10:22:06:b2:29:82:20:f6:fc:09:
8d:4c:e6:a5:e7:2a:bb:14:d5:b2:36:5c:d7:dd:c5:84:9b:3b:
3e:92:72:93:72:58:d3:6b:f3:3e:66:e5:de:b5:b1:7e:b7:02:
3f:44:ca:ea:64:1c:5a:9b:90:4e:c4:b8:b4:b7:4d:e7:e3:56:
9a:85:4a:cc:e2:31:72:46:3d:8d:f3:e2:e5:54:12:c3:2d:d4:
f5:00:b0:d6:7c:26:b2:d4:53:7d:66:35:18:8c:7c:c6:58:76:
f1:e8:2b:6d:54:21:e2:a1:4e:3a:61:e0:a4:3f:61:d9:21:bb:
4f:e2:23:5e:60:25:54:fd:92:cf:ef:17:6b:1e:e8:05:7e:eb:
df:36:05:de:7e:15:6e:e1:89:08:b3:86:5d:64:1d:a8:3d:7b:
4d:eb:b0:30:3f:68:2d:73:5e:99:5b:42:d0:a3:9c:8c:e4:09:
f1:e1:83:bb:2c:60:24:cb:26:8a:59:bc:99:77:ba:fe:4d:f7:
b2:82:21:ba:ba:36:4d:7a:df:f8:fb:ab:9a:8f:8c:46:69:52:
1a:39:a1:6d:0c:05:9e:4e:95:49:4f:2b:30:48:78:81:28:84:
1d:d0:71:03:f2:25:4b:5d:5f:b1:e4:a3:a4:49:45:0d:fe:77:
b9:ec:54:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:36 2025 by rpki-client