Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: B2KkQNCw+DmaTlugSOtLkhI4wEF0MfVUes7mi16Vokk=
Subject key identifier: B8:78:C4:89:8E:1C:23:A5:8D:2A:7C:94:84:3A:4B:63:40:43:0F:EB
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 0194BCA9BE9BBC49A5ECBA2ABBCB402F0CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 0E9B
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: LXumjcEb+Dd5FiULoeGemBQE0FKhp0u9QoNsX3Pu7TI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:be:9b:bc:49:a5:ec:ba:2a:bb:cb:40:2f:0c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=b878c4898e1c23a58d2a7c94843a4b6340430feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:85:c3:ea:63:8d:02:c7:48:0a:e4:cb:69:
dd:f2:a7:a8:02:a9:97:d0:8e:64:ed:2b:fb:df:29:
dc:d7:6f:b3:f6:81:14:07:02:4f:53:c2:2f:b2:c2:
59:67:30:63:d1:58:c8:e9:bb:2d:6e:aa:31:7f:25:
d3:52:b9:ca:d4:95:d6:cc:85:50:d1:c9:ec:3f:66:
e8:a8:4e:d1:8c:1e:cb:fb:94:b7:c8:08:c1:03:8e:
09:a6:2b:04:01:c0:1a:58:1c:b4:20:82:5a:06:4e:
a3:1e:41:18:fb:24:e1:c3:d1:81:d7:31:09:ac:cb:
bc:9c:d5:82:ab:c4:8f:a1:cc:70:1e:2a:57:fa:ba:
76:5d:d6:35:f6:55:6d:f1:99:50:6b:b8:6a:0d:08:
67:a9:49:a7:5e:31:e3:e4:93:c7:32:a8:18:7c:95:
51:44:b8:ea:e0:11:1c:d1:13:d3:c4:8e:6d:d7:60:
51:27:92:1d:b8:d7:2d:0b:35:e2:c7:7f:a2:5d:82:
f8:a7:81:0a:06:ab:86:09:ea:7f:e7:ed:62:d4:1a:
85:87:a8:3e:22:82:27:fc:76:2b:06:bb:61:d7:fa:
a5:85:2a:22:7d:93:2f:57:df:d6:e2:0c:3c:ef:6e:
97:41:c2:7d:56:f0:57:58:2e:2a:65:b8:58:32:70:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:78:C4:89:8E:1C:23:A5:8D:2A:7C:94:84:3A:4B:63:40:43:0F:EB
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2d:6d:ae:0d:ea:16:b1:cb:b5:b7:b4:9b:6d:de:5d:04:d1:
1f:97:36:c5:31:c9:ea:36:e8:24:4c:c0:c1:71:73:be:2c:bc:
0b:35:b9:6b:10:30:7c:38:32:a4:4b:8d:5d:a5:2f:bf:e6:de:
7a:18:c9:83:14:ec:89:d8:b5:36:bd:1b:3a:df:42:f9:e0:f5:
01:ee:c7:a9:15:f3:08:ae:6f:91:4b:83:61:bd:b4:43:c1:59:
dd:56:69:d3:d5:81:09:bc:65:4b:63:26:22:5f:ff:e4:75:af:
0e:b6:64:9d:0e:18:94:cc:7b:96:f2:84:fc:3a:a4:bd:84:9d:
9f:8f:c7:ff:17:9a:c5:b3:2e:ac:a2:61:c5:51:9c:fb:82:f1:
e3:ce:33:db:3e:4b:87:01:01:9a:10:b2:60:0a:a5:67:e5:ef:
00:ae:d6:60:a1:68:1c:af:7a:2e:90:22:ce:fa:cb:1a:da:4a:
62:36:06:c3:67:08:82:d8:e4:dd:70:59:70:ad:e2:eb:84:4c:
27:42:c0:c0:15:6a:bc:3e:e3:ef:82:0d:c5:e5:46:1b:13:52:
b9:8d:f0:a3:f9:e2:5c:80:5c:2d:f8:e2:28:c8:78:13:0c:3d:
60:57:a6:53:5e:a7:26:53:50:1f:f7:fb:dd:81:8e:e1:39:95:
d2:fb:86:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:16 2025 by rpki-client