Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.mft (raw, json)
Hash identifier: sFARxJe+xU4x46hq+FxfUIdnVDGMRFe8bT9xp6d6OK4=
Subject key identifier: 53:30:62:DB:F4:EB:0A:28:DD:59:CA:0C:DE:34:2F:CC:77:B2:D3:16
Authority key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Certificate issuer: /CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Certificate serial: 0194BD17BA118301CBFB2A8F5A2FEDF9BE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
Manifest number: 0FDE
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: 97KiPZsF9XV53i8CRJtmYD4-Vzo.crl (hash: v90sPYH0oUiTez0KH6XnL4VRQpbl+9Ly9uUU9MOzNcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ba:11:83:01:cb:fb:2a:8f:5a:2f:ed:f9:be:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=533062dbf4eb0a28dd59ca0cde342fcc77b2d316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:ed:e5:5f:58:38:d2:5a:7b:96:11:c3:9e:
3c:1b:b8:b2:8c:63:f4:aa:61:82:31:e0:00:61:95:
03:61:40:c2:2d:82:fe:04:73:17:30:a4:43:57:d7:
7d:f5:b8:22:39:0e:b1:ad:bc:be:47:89:3f:7b:bd:
b1:bb:fa:e9:04:d6:06:c1:95:78:b1:db:e1:e0:96:
74:dc:d4:58:9f:db:d7:c4:ba:c9:fc:4d:a8:46:c1:
f2:b1:06:ac:a7:b3:65:5f:b9:35:2b:3c:f3:4d:df:
b9:76:e9:0e:9e:46:6b:b0:f5:85:dd:60:0e:08:1d:
8c:e8:ce:a8:f4:b0:d0:9e:2c:79:2e:71:6a:b2:b3:
f2:62:f3:cc:ca:a0:b1:90:ae:5d:c4:36:8d:aa:23:
b8:90:4c:f9:df:2c:20:9f:84:eb:a8:ec:ba:13:a2:
01:e4:4e:c8:46:f9:ce:fd:e6:c7:ba:27:ee:ab:39:
f9:01:cd:55:05:18:2e:54:8c:e2:17:07:9b:e7:e4:
fc:98:ec:0e:2f:0f:b2:ba:5c:b9:27:10:e9:87:65:
b3:51:88:c0:cc:56:4a:ee:37:63:59:33:2a:88:78:
aa:37:94:eb:41:eb:30:fe:d5:b0:3e:30:b3:b6:69:
f2:6e:b1:60:03:33:15:8c:0b:b7:99:fb:e9:cd:71:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:30:62:DB:F4:EB:0A:28:DD:59:CA:0C:DE:34:2F:CC:77:B2:D3:16
X509v3 Authority Key Identifier:
keyid:F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6e:67:fe:4e:ab:d8:66:88:09:ac:64:f4:de:47:f7:8a:61:
23:34:6e:48:cc:3c:26:f9:e5:51:cc:8c:6a:63:ad:5d:f2:0c:
fd:01:89:a8:ac:52:8d:ca:2f:c0:6c:93:d2:17:1c:0a:d0:f9:
ca:fa:aa:98:5e:56:a8:3a:4e:2d:d4:4f:cd:fa:6c:e6:05:fa:
39:89:46:3a:e9:89:ff:3d:4c:0e:7f:95:67:dc:5e:a6:cf:7e:
7c:59:0b:4f:a8:cd:a0:53:39:86:75:dd:1d:e7:52:32:de:05:
97:4f:51:db:2b:bb:c4:6c:de:a3:f8:fb:d6:2b:96:87:1b:3b:
9d:7f:b7:51:52:2f:24:8b:81:fc:15:62:ec:f0:a7:a5:d6:75:
ec:3c:d3:f5:c9:b5:68:f2:23:b5:40:b1:94:34:0e:2b:ca:6b:
40:37:82:0b:f9:27:30:7e:76:0e:f8:0a:de:d5:6e:e7:0e:d9:
4c:0c:17:26:b2:da:f4:73:77:bb:60:67:b7:83:1b:0b:ee:07:
2d:8a:1f:fc:ca:61:e9:47:7e:d0:16:59:1e:e1:fa:54:75:cd:
46:64:25:23:d6:08:13:10:2e:d1:47:01:e3:87:27:30:68:70:
16:73:89:9b:3c:7b:0e:48:af:aa:8c:f9:67:4d:82:0f:49:a0:
55:03:c4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:41 2025 by rpki-client