Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
File: H9nOye0f1PQcCx4w77lshhVTvjY.mft (raw, json)
Hash identifier: xY7v7b2ySJ+MK+UVV/Z2CgjiK2Heie74vaYL7GC3GGk=
Subject key identifier: 28:3F:1A:C7:A9:91:DB:FC:97:55:5D:74:D6:66:7B:5C:C0:7C:50:44
Authority key identifier: 1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
Certificate issuer: /CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Certificate serial: 0194BBCE9758642CE304B58416B282B3C37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
Manifest number: 0B
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: H9nOye0f1PQcCx4w77lshhVTvjY.crl (hash: q1rJ5hXqUsBkF5wl4Tv3GpabAPnhhA0i6eP1wCH22R8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:97:58:64:2c:e3:04:b5:84:16:b2:82:b3:c3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=283f1ac7a991dbfc97555d74d6667b5cc07c5044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:11:11:5d:8e:3f:8f:70:a5:c0:0a:ed:34:
af:f5:f8:1a:0f:c8:2f:bc:fc:89:85:a0:f0:e3:77:
06:aa:84:56:cd:e8:7e:28:b2:cd:17:5c:ad:c6:af:
58:96:99:e7:f2:7c:04:ae:cb:84:7a:42:70:be:8e:
30:0a:39:67:60:d2:0f:89:c4:70:c2:9f:2c:40:37:
4e:b6:fe:72:32:a9:09:e1:c2:0d:e6:ce:38:4e:95:
30:56:44:67:49:06:37:5e:6c:e3:c3:cd:b3:ee:2a:
a7:0b:28:e1:7c:b3:c5:87:39:29:f2:4d:95:c9:5a:
34:b4:2f:fc:fc:04:c8:ee:ce:31:47:35:e6:2d:72:
f6:96:6d:12:ce:03:12:a2:31:03:4b:73:a1:a2:91:
cb:80:28:05:e7:17:51:36:24:62:75:6d:a7:50:a5:
6a:1f:99:1d:ca:5b:9d:4c:4c:b7:16:22:95:b0:22:
06:18:1f:8e:2a:de:ba:a5:5d:5e:16:34:4b:38:88:
ef:8e:20:64:44:62:e2:f6:ae:f6:c7:32:84:f2:52:
4c:fd:ca:68:29:2f:bb:dd:fd:1a:1e:ec:3b:84:91:
cf:1a:30:a6:32:71:d6:89:8f:73:20:fe:2e:2c:df:
93:c3:3a:fd:f9:c5:a7:f0:73:20:30:20:30:64:9b:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3F:1A:C7:A9:91:DB:FC:97:55:5D:74:D6:66:7B:5C:C0:7C:50:44
X509v3 Authority Key Identifier:
keyid:1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:97:0d:ae:8e:0c:76:fe:04:a1:ac:04:0e:83:77:1c:f3:80:
e4:42:a4:57:c1:d1:2c:01:3f:34:8a:19:57:6f:5b:6d:00:68:
b7:5f:2f:a9:40:c7:d0:70:9c:5d:0d:10:c0:ad:97:24:be:8d:
38:5e:c6:42:40:5c:a0:fe:92:35:c8:1a:92:59:f8:0d:d2:84:
0c:34:65:32:c1:b9:21:8d:3f:45:4f:92:48:e3:67:42:2e:0f:
1c:34:3b:03:37:36:94:63:7f:ac:c9:cc:69:3b:98:51:66:21:
2b:2b:96:cc:81:9d:6e:d0:d7:58:f2:5a:9b:3a:09:4c:72:ba:
6c:67:aa:ff:38:49:6c:d5:4a:0e:b2:bb:4d:62:4f:c2:d0:7b:
c5:89:98:0f:b6:f0:fc:9d:3e:b2:ae:0c:02:26:23:35:89:96:
2b:cf:08:60:14:58:8c:8a:ac:77:87:c0:8a:d2:dc:f9:73:bd:
a7:d1:0f:35:bd:c9:13:46:63:6d:44:a8:04:a7:2e:a3:6f:93:
81:4c:28:84:c7:76:f6:56:d0:ea:fc:fa:74:d6:53:15:ef:a6:
6c:54:27:52:3f:db:6a:5e:ab:6a:1f:61:d5:8c:31:9a:51:1e:
39:47:3f:5d:19:d5:8a:19:13:bd:e4:68:94:60:07:28:da:fa:
60:da:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:42 2025 by rpki-client