Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
File: 8KSyRplUYkr0JKVO8WdhwhWLJIM.mft (raw, json)
Hash identifier: xsBRhCdvT++wiEzcV2X5Ceadz2lGlBCkFWkYxSaUvyI=
Subject key identifier: AF:61:72:BE:1F:9A:F9:45:4F:8D:9B:32:25:AB:0C:7C:B4:7A:E1:80
Authority key identifier: F0:A4:B2:46:99:54:62:4A:F4:24:A5:4E:F1:67:61:C2:15:8B:24:83
Certificate issuer: /CN=f0a4b2469954624af424a54ef16761c2158b2483
Certificate serial: 0194BCA9AF5D29C33959320AF094165C28E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
Manifest number: 1387
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 8KSyRplUYkr0JKVO8WdhwhWLJIM.crl (hash: QDq8tC0Xr08oJEtEFS/B8Kvlj448KlvINQuSuhxtSL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:af:5d:29:c3:39:59:32:0a:f0:94:16:5c:28:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a4b2469954624af424a54ef16761c2158b2483
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=af6172be1f9af9454f8d9b3225ab0c7cb47ae180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:67:c8:9d:8b:e0:b9:53:73:45:d1:cc:fe:
5f:19:3c:f2:50:f0:66:31:03:03:e1:54:a0:7d:47:
de:58:1d:6e:f6:4b:7f:47:8e:26:13:c9:64:a8:4f:
89:30:8f:b8:ed:21:80:84:e8:d9:6c:ff:4b:cc:34:
4d:e8:66:f4:fa:be:a3:eb:07:cb:5d:de:0f:69:c8:
65:7a:fe:83:47:71:2b:f0:9d:9a:ee:ac:5c:10:9e:
c1:fc:a0:47:37:a1:5b:5a:be:e1:cb:e4:cd:06:60:
9d:3b:73:24:3f:af:76:f8:8c:86:34:fa:f2:68:b2:
c5:5e:a2:f8:fe:93:06:80:cc:84:d9:9a:25:a6:6c:
97:7a:e4:42:11:22:a8:e4:1f:10:32:cf:bd:e5:fd:
47:e6:14:65:27:43:20:a8:12:13:f0:5f:09:df:39:
1c:53:71:54:17:8e:c5:37:69:81:38:a3:56:68:3b:
51:2b:50:7e:0c:3b:51:09:d2:0b:b5:70:35:a8:1a:
fb:4a:22:4f:da:85:33:54:8f:7c:15:d0:b3:5f:ef:
3e:6f:69:aa:16:7e:6a:1a:17:64:df:0a:97:74:f3:
9d:19:1c:f9:23:39:10:28:26:de:95:bb:87:63:8f:
d9:7d:d0:c7:0f:62:ce:ec:a4:f8:4f:f0:d5:f2:0b:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:61:72:BE:1F:9A:F9:45:4F:8D:9B:32:25:AB:0C:7C:B4:7A:E1:80
X509v3 Authority Key Identifier:
keyid:F0:A4:B2:46:99:54:62:4A:F4:24:A5:4E:F1:67:61:C2:15:8B:24:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a4:25:d5:2a:09:a5:62:5e:f2:85:63:8d:83:33:bb:3f:85:
75:da:f4:ec:4e:02:05:78:b6:d5:ff:52:98:92:5c:84:df:ab:
bd:fa:e0:46:1c:65:ec:06:35:6e:2b:b3:61:94:ab:e9:29:b8:
3c:80:ac:d0:48:ad:39:43:29:f1:e2:e9:02:f3:9a:90:ed:27:
7e:36:ac:76:10:e4:d3:a2:3a:e1:c9:63:20:66:e8:ca:38:47:
de:89:13:e3:c2:4d:f6:84:49:46:98:bf:4f:86:77:15:2d:65:
d5:12:09:fe:6f:ed:84:e6:90:66:fe:ad:86:51:79:80:32:50:
cc:47:e2:66:12:ad:ba:dd:a5:f7:f4:65:a9:53:94:06:e0:12:
5b:6f:83:4a:d1:05:90:2e:4c:b2:68:ba:18:e1:e8:93:ce:1c:
fa:70:1a:e9:b4:c9:4e:c3:b2:e5:45:04:73:0d:22:e4:fa:3a:
36:64:41:40:13:75:de:98:85:05:f0:9e:35:e4:fb:49:05:c2:
2d:41:4b:95:f5:49:42:57:36:61:8c:4e:fa:97:a2:71:82:56:
88:1c:93:c5:79:40:8a:38:6e:df:ed:fb:cf:7f:d6:ed:74:43:
73:48:fa:6e:cb:d4:9b:a5:06:5f:6f:c0:c9:a9:c8:fb:e4:0b:
72:0d:00:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:08 2025 by rpki-client