Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
File: G7Qd9-pn1O3-D60S99XOzYPhjZo.mft (raw, json)
Hash identifier: ODdZrk3MNfsnHEuBXsb0d+7uTNKgu3txVA35WSV3LRU=
Subject key identifier: C9:C0:FF:DE:91:CF:04:17:65:FE:3A:CF:5C:26:1D:6D:D6:9D:72:1F
Authority key identifier: 1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A
Certificate issuer: /CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a
Certificate serial: 0194BC04CE4BE2AD1EE9905433E72C60FAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
Manifest number: 0207
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: G7Qd9-pn1O3-D60S99XOzYPhjZo.crl (hash: qazt6LToBqj+pQ3lZULBzlViSYE3cOctpkPtdgTvz3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ce:4b:e2:ad:1e:e9:90:54:33:e7:2c:60:fa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=c9c0ffde91cf041765fe3acf5c261d6dd69d721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:c4:20:08:3f:2e:d0:06:90:31:f3:87:3d:
01:b7:16:e6:92:6c:3d:1f:e4:db:20:bb:4d:76:80:
1a:60:99:93:60:0f:0f:32:1b:ed:d5:f9:df:59:0d:
1f:1c:fa:4e:68:62:4d:b9:bd:17:7e:ca:16:b8:04:
e3:b3:75:78:6b:f4:a3:5f:d0:6f:4b:21:f7:d3:27:
1c:df:ed:e5:d6:c1:29:e1:27:ea:d9:29:cf:b1:26:
68:5b:75:96:68:d6:9c:0d:4c:1d:19:a5:fc:63:e1:
13:c0:0c:70:71:40:78:1a:47:2a:b5:9b:a7:96:6a:
7b:bd:c4:d0:10:7f:25:74:ff:6f:5b:64:68:f6:17:
d1:6d:7e:ae:f6:56:82:46:75:87:95:d2:19:a4:08:
72:6c:7d:ff:bd:bd:6c:a9:51:e7:db:17:c3:fb:ad:
a9:4a:9a:c3:b6:7d:64:cf:77:6e:1b:81:8c:68:6c:
b0:9e:e6:a0:99:ef:2d:b6:31:fe:a3:22:cb:72:16:
19:a4:7c:75:26:2b:65:c4:26:1e:da:e9:00:e0:16:
92:a1:fb:28:22:5c:30:6c:06:c1:03:77:03:12:b5:
38:5f:f7:a8:e0:bf:7c:b7:c8:3f:00:0a:25:8e:04:
9b:3b:07:f0:cd:c5:98:5f:7c:70:40:91:9e:d8:01:
62:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C0:FF:DE:91:CF:04:17:65:FE:3A:CF:5C:26:1D:6D:D6:9D:72:1F
X509v3 Authority Key Identifier:
keyid:1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:02:6f:4a:f0:5a:79:5a:6f:90:1a:93:57:cf:f8:ab:dc:39:
41:ed:e6:fd:fa:c0:94:8f:d9:6d:2f:90:e2:c6:4e:cd:e3:6d:
3d:37:5c:7d:b2:d2:2f:46:46:31:5b:a8:2e:a8:22:f0:d4:47:
35:cf:e4:44:ff:12:49:ff:61:b4:db:1d:92:0c:c6:19:8b:3c:
7c:4e:88:8a:16:83:43:1a:ab:e8:da:2d:b0:a6:f6:9c:ed:a7:
cc:56:a1:1a:d0:60:9b:4b:92:87:2a:31:55:77:20:3c:c3:a0:
81:be:d4:69:15:19:f2:a2:1e:5a:8d:48:85:84:f1:47:1a:98:
f3:0a:3e:83:d6:54:d2:89:d1:cf:8f:c9:b1:29:11:89:5b:d5:
91:08:7f:79:c9:86:46:7c:81:9f:28:de:82:4e:5f:56:7b:43:
d3:4d:d6:b5:67:5c:3e:a5:e6:73:a1:89:e2:03:67:32:bd:27:
33:d0:48:50:34:41:ac:7f:bc:e2:c9:41:b4:be:bc:99:ed:70:
9f:e7:bf:47:79:07:2d:e1:d2:df:f7:ea:50:88:5e:cf:c8:f2:
47:af:cc:d2:6e:30:b2:b6:05:60:f3:ab:4f:65:5c:9c:0d:49:
56:22:0e:45:c4:62:3e:27:a0:bd:74:e1:aa:53:fb:0e:43:30:
4c:91:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:36 2025 by rpki-client