Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
File: H38fQMjrspNo9ug7-d3QZ14H1O0.mft (raw, json)
Hash identifier: whOw2U/9987lrV+5zBNJfcxIJkLGVcEO+nd2fa/Ml8U=
Subject key identifier: F8:B7:C3:9E:4B:B7:98:46:FB:CD:3F:EC:B5:CE:87:4B:6F:7C:52:F7
Authority key identifier: 1F:7F:1F:40:C8:EB:B2:93:68:F6:E8:3B:F9:DD:D0:67:5E:07:D4:ED
Certificate issuer: /CN=1f7f1f40c8ebb29368f6e83bf9ddd0675e07d4ed
Certificate serial: 0194BBCE4A82C9DAADF3BF075719949D5F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H38fQMjrspNo9ug7-d3QZ14H1O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
Manifest number: 0CEA
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: H38fQMjrspNo9ug7-d3QZ14H1O0.crl (hash: G8tPkZ1fkBcj3lQ2DY9i1CaiC+2BhKZw0wDpz1Eeavg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4a:82:c9:da:ad:f3:bf:07:57:19:94:9d:5f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7f1f40c8ebb29368f6e83bf9ddd0675e07d4ed
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=f8b7c39e4bb79846fbcd3fecb5ce874b6f7c52f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:b4:be:53:ce:e2:44:20:e0:56:69:bd:7d:
e0:b3:a3:d9:ea:37:a7:8c:2c:72:f5:a3:85:c0:97:
a6:5e:18:f6:73:7c:b2:2f:35:b3:52:0f:7c:c1:20:
aa:fc:13:05:9d:a6:71:66:13:79:d1:0d:b4:cc:1b:
96:c5:7a:88:dc:b1:52:4e:12:98:f5:13:32:35:50:
27:f0:6b:44:3c:df:eb:ea:6b:ac:6e:ae:7e:86:62:
40:e2:43:d7:6a:b8:4c:ec:15:24:c1:71:16:47:b8:
dc:a5:93:85:3d:41:0b:9c:d9:2f:37:7e:2f:a5:03:
19:e3:43:58:b6:37:7d:e8:4b:3b:40:97:2f:13:23:
6e:6b:b4:a8:49:80:67:38:61:cb:88:72:eb:04:0c:
b1:14:5d:bd:50:21:01:70:4d:b1:f7:58:70:d0:cd:
e1:17:8a:1c:fd:3e:54:af:97:c0:30:5d:5f:b2:82:
c9:d7:55:35:70:be:5b:05:1d:39:f9:f5:97:e1:18:
9f:91:ba:59:05:9e:c4:ec:11:c8:fc:e4:b5:13:c3:
44:68:ad:ad:52:b4:24:e2:fb:8c:d4:bf:8f:8b:41:
f4:9e:f2:84:a6:59:d1:6f:1d:c8:1d:bd:d1:d6:67:
b7:07:f5:55:eb:a2:e5:2c:6d:37:da:45:66:e4:98:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B7:C3:9E:4B:B7:98:46:FB:CD:3F:EC:B5:CE:87:4B:6F:7C:52:F7
X509v3 Authority Key Identifier:
keyid:1F:7F:1F:40:C8:EB:B2:93:68:F6:E8:3B:F9:DD:D0:67:5E:07:D4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H38fQMjrspNo9ug7-d3QZ14H1O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d8:8d:e3:22:0c:c5:eb:dc:e0:ce:42:8d:90:3f:ed:e7:1d:
7d:c6:55:b9:94:a5:17:02:7f:2a:0b:89:2a:bf:24:48:f6:b8:
5e:27:98:4a:69:d6:21:94:21:8d:f8:44:a5:d4:18:6c:1f:8e:
88:59:df:91:eb:5c:09:e1:f3:fa:de:96:8d:12:cb:31:60:fc:
68:3c:b1:a7:70:08:6f:70:ad:5a:45:ef:d3:54:6e:6c:e7:21:
26:c1:7b:c0:a2:f2:78:83:89:8e:4f:2a:b1:9f:58:1b:cc:4e:
74:44:ea:66:4e:80:ae:f0:da:f0:de:67:03:5d:7e:0b:88:aa:
5b:2a:4c:76:d2:fe:3d:08:34:e3:4c:25:cb:f4:5c:b2:40:7f:
87:90:e3:31:e5:e0:55:8f:1e:55:43:04:23:bc:bb:32:4b:0e:
af:7c:dd:1c:82:4f:6d:4a:a6:94:83:c9:93:4e:6f:39:77:03:
0e:66:63:93:f8:65:ec:9a:f2:15:3a:27:c3:3d:f5:6f:15:f2:
6e:6b:f6:45:b7:88:2a:2d:eb:e7:f8:6d:af:84:12:ea:bf:d2:
5a:3c:4f:5e:db:4b:d9:5e:af:9e:53:f1:5e:88:2c:82:4d:f4:
28:ef:51:2a:0a:15:25:f7:83:c2:98:3e:a2:00:68:30:b9:f4:
6c:db:0e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:49 2025 by rpki-client