Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
File: h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft (raw, json)
Hash identifier: XZWmHWlQ01PsrwnX1sXn8yCjqM3GExTheqR7U4FyOmk=
Subject key identifier: 40:29:89:40:DC:F4:89:FE:94:74:DB:92:A9:32:9C:7E:42:54:4B:39
Authority key identifier: 87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE
Certificate issuer: /CN=87d49ea28d2591f72e757c7dad300814c27794be
Certificate serial: 0194BC3C75FB9706F3CB5269B6F7A2814850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
Manifest number: 0396
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl (hash: 0qQaii4uDiF8OLA676Om92JC8X67IwE9sGPoM23DK7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:75:fb:97:06:f3:cb:52:69:b6:f7:a2:81:48:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d49ea28d2591f72e757c7dad300814c27794be
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=40298940dcf489fe9474db92a9329c7e42544b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0e:a2:f7:5f:ba:00:a1:eb:87:03:05:77:c9:
2d:15:27:9c:5d:67:a0:03:8a:cf:6a:da:01:c2:36:
45:40:66:be:66:aa:83:f4:ff:0a:ad:6e:87:18:50:
f8:6c:25:80:03:f5:62:31:c4:0a:c6:48:79:da:3c:
e0:1c:95:a7:74:6d:1f:89:1b:19:a7:0f:d4:19:bf:
38:35:ba:f9:9f:6e:ef:0e:f2:2c:e9:74:14:da:71:
f1:bb:05:84:d2:9b:25:45:8b:85:e8:3a:c9:68:4f:
68:f6:0f:c5:79:fa:fa:d2:9b:ea:1b:fc:b5:8e:1c:
5a:e7:fe:96:38:66:20:db:98:3a:12:fb:da:be:be:
6e:b8:09:93:0b:d4:b8:df:5a:21:f0:96:34:7a:ab:
d9:12:db:94:a7:74:01:3d:a9:01:ad:22:cf:79:3b:
f0:19:0d:3b:a0:ba:c5:06:12:28:2f:2e:da:01:ff:
6c:16:f7:d7:d8:6e:cf:53:62:93:6a:9b:4b:9c:90:
89:7e:63:79:9f:3f:ff:d6:eb:23:fb:14:a8:37:da:
f5:3c:a2:19:d4:9f:0c:b5:fe:7e:17:ce:b3:74:25:
1f:b0:08:17:9c:92:db:d7:a1:71:54:e4:66:00:d5:
60:eb:f4:d3:84:ed:e4:0d:e0:98:94:68:7b:8d:f0:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:29:89:40:DC:F4:89:FE:94:74:DB:92:A9:32:9C:7E:42:54:4B:39
X509v3 Authority Key Identifier:
keyid:87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:83:18:96:dc:20:8d:a8:2f:df:3b:ae:7d:3b:b2:62:f9:7d:
38:c6:b6:a7:ff:e4:62:dd:0b:02:73:3a:eb:78:b1:f8:f7:e5:
8c:81:c2:6e:74:b2:b9:7e:02:d9:98:cb:e5:37:56:51:39:94:
5f:df:73:de:fe:3e:48:40:40:66:0e:5f:ac:c9:e5:16:e6:11:
da:f1:dc:7b:bd:76:aa:7f:08:f6:8e:84:09:56:ec:db:84:f1:
da:f7:b6:59:db:8b:55:fb:fe:f5:01:ba:92:34:55:c8:c0:f0:
6d:f0:1f:3b:d2:1d:f9:18:85:f4:56:38:cc:ce:38:aa:3c:43:
06:18:53:74:e2:65:55:27:01:f6:45:0d:ce:dd:da:d8:ae:ee:
67:6b:13:05:a7:73:8a:b8:d0:6d:e4:2c:aa:55:64:be:b1:53:
69:bf:1d:f2:01:82:30:fb:5e:8b:2a:92:c9:89:03:44:cb:e6:
f0:b8:9c:14:95:61:d9:68:93:76:7d:60:21:a9:c8:06:54:9c:
84:96:e4:63:5a:95:4e:92:b5:65:6d:ba:bf:9a:1e:f5:d5:50:
4f:11:f2:6f:19:fd:c7:e9:b3:e3:c4:71:a0:6f:4f:9e:b8:2c:
13:7f:4e:0e:fb:05:01:0f:d5:12:ba:fa:eb:26:db:bc:5a:d2:
65:65:5e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:24 2025 by rpki-client