Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
File: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json)
Hash identifier: SoFeOwq9bNi/qdz7BYuRQQblVBwaidhefqFm9EVdp9s=
Subject key identifier: B9:35:F2:7C:89:06:8C:18:B2:EB:D4:08:72:EF:91:7E:7C:58:2E:C7
Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
Certificate issuer: /CN=b7d296d69059457be39c3c82466aceed02766836
Certificate serial: 0194BC3C6690723948DE9C790595725F79B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
Manifest number: 051C
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: ZTVKDaKukn0FWXGpm/0Vn+sW4FkHV/iSPfLwEyMx3HI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:66:90:72:39:48:de:9c:79:05:95:72:5f:79:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7d296d69059457be39c3c82466aceed02766836
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=b935f27c89068c18b2ebd40872ef917e7c582ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:ed:6b:91:63:26:1a:0c:0a:29:6c:d8:f3:
06:6f:81:5e:58:db:3d:12:31:f9:00:5d:15:4f:bb:
a1:49:22:b4:89:82:7c:34:ff:ac:61:1f:80:30:a2:
be:7c:58:1b:be:96:66:1f:5d:da:fa:86:4f:1b:b6:
c3:64:30:4b:5d:7c:a9:f3:21:77:08:1d:d5:9b:d3:
28:52:83:76:e3:91:36:74:05:2f:01:f1:4f:81:b5:
5b:00:4f:6d:8a:78:3d:ed:7a:25:6f:37:36:6b:ea:
49:44:46:25:4a:51:69:cb:64:b3:14:6e:56:c1:d2:
8f:48:7f:75:b0:ef:a5:b6:00:31:a2:7a:16:dc:63:
00:3b:72:27:18:0f:f7:8f:64:cc:b7:be:36:93:ba:
0e:0c:9e:89:d5:8b:a2:00:4a:92:56:28:4d:15:9b:
db:06:eb:25:0f:8a:33:6d:00:84:0b:a2:e7:e1:57:
9f:f5:70:e8:1d:22:14:f8:08:d6:2f:e2:cb:f2:a2:
9a:da:46:7c:63:78:f5:b0:ce:f7:c8:aa:df:66:7a:
82:26:33:4f:98:4e:24:59:f2:81:fc:12:c4:6f:55:
09:23:90:32:4d:01:aa:a9:4b:f4:fe:97:cc:ea:4e:
9b:b0:ff:40:01:35:68:53:1e:72:00:e7:d9:d3:a8:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:35:F2:7C:89:06:8C:18:B2:EB:D4:08:72:EF:91:7E:7C:58:2E:C7
X509v3 Authority Key Identifier:
keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:43:c0:9b:1b:01:ef:02:a5:48:ae:64:d3:42:aa:a7:a4:a1:
10:0c:be:1e:e1:a0:22:ab:83:8c:cd:e7:e4:69:ce:51:4c:a4:
1a:3a:d9:5d:79:64:d8:39:11:a7:c0:22:4a:fa:0a:e0:b7:ec:
19:2a:78:89:98:9d:09:54:1a:0d:2c:ee:d5:59:0b:a0:f4:5e:
85:cd:3c:95:1b:5d:98:2c:02:a4:5c:c8:38:b7:73:9e:2d:23:
b5:cf:7e:de:b2:be:3b:a5:80:eb:e9:9d:6b:05:7a:f7:9e:1c:
09:e6:84:da:19:58:ee:1e:64:d4:18:cd:87:13:c9:a8:1c:ee:
45:a6:3c:fb:ec:04:a3:a5:90:d5:39:89:e4:bf:58:08:93:c4:
d0:b9:4e:e4:9e:4d:23:b0:75:ff:01:5e:f7:b0:70:9c:1e:60:
a5:84:32:4b:ed:db:0d:38:15:6e:a9:51:29:91:a6:19:2c:3a:
d2:40:9b:e9:c8:9c:59:b8:cf:84:ff:d2:cb:a3:69:2f:a6:ec:
de:52:c9:c5:64:4b:4e:3d:2c:1c:4b:1d:68:5f:2d:1c:ea:c5:
6d:f6:90:5f:93:4a:17:70:12:02:87:ac:fc:0e:30:ab:5e:0d:
73:81:05:3a:5e:c6:6a:56:ae:1a:1c:db:bc:9f:b5:84:b8:93:
f6:9b:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:00 2025 by rpki-client