Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: /yYfxrU0r41dhQ4FJ9CFIdUNewWz67BWgTc+nR+CVN8=
Subject key identifier: 81:6F:57:1B:97:C5:D0:A8:79:63:C3:C0:10:76:2E:88:43:27:54:21
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 0194BBCE53F53A00A8A80DE2EF0CB171CB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: GNjriMoVrl4bf+lNBMr8RJbhsmg0mZW7EpCv/V40Ddc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:53:f5:3a:00:a8:a8:0d:e2:ef:0c:b1:71:cb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=816f571b97c5d0a87963c3c010762e8843275421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:e2:e0:b7:8d:4b:96:8f:7a:78:7d:12:2a:
69:df:e5:ff:5a:40:81:0c:2e:38:d5:69:e6:21:27:
e2:95:66:a9:22:13:00:38:2f:c1:da:2d:31:96:a7:
cd:3b:d7:0e:80:7c:14:53:ef:50:e9:d2:6c:cd:2e:
1f:c7:0b:9c:bc:b3:de:52:af:cc:be:48:40:33:b9:
d7:fe:e6:3e:0e:9a:db:67:a2:fd:dd:0c:6c:cb:03:
e5:9c:d2:aa:92:87:85:18:0c:c7:2a:91:2c:3e:74:
68:72:53:a4:8d:d1:f8:4e:3a:4d:5f:ec:e3:b0:9b:
2f:57:37:aa:35:02:09:55:6f:4e:8b:b5:a6:28:52:
ab:db:51:74:d2:72:c2:ef:c8:7c:64:43:02:2b:96:
3e:ec:8a:21:4c:a5:73:22:fe:b5:22:6d:80:a3:64:
00:a1:93:c5:f8:dc:2f:43:8d:63:01:24:9b:3b:af:
a5:40:36:0c:20:8c:27:2b:d4:a1:9c:02:08:5d:8f:
96:e4:41:44:5b:91:fd:e8:2c:f6:87:46:1d:32:91:
96:0e:6c:41:1b:19:77:96:df:c6:e8:25:2a:3d:4e:
13:e6:a1:e1:77:fa:62:1b:3a:0b:42:90:7e:48:f7:
5c:42:3a:6c:f6:ae:d7:ae:97:33:25:1c:55:ae:b5:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6F:57:1B:97:C5:D0:A8:79:63:C3:C0:10:76:2E:88:43:27:54:21
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:63:d7:fd:96:41:b6:f8:4a:5f:7e:f2:94:45:3f:ae:49:b2:
72:4e:df:22:48:dd:88:2e:90:6a:53:74:01:b5:cb:be:4e:d5:
87:2c:29:20:de:b2:f1:4d:8d:34:b1:c1:4e:57:38:f6:a0:a8:
eb:fd:3c:37:bd:c0:5e:d8:14:04:2a:9f:66:c0:23:c7:22:08:
82:5c:6e:b5:de:b8:21:4d:db:41:97:93:fa:59:24:3d:c7:d0:
6e:63:76:0b:b4:3f:b1:ae:0b:e4:a2:bd:b8:9b:59:ce:0a:60:
84:d2:8b:00:19:04:c9:71:b7:08:55:8b:81:b5:69:da:c4:a8:
2d:b3:ba:26:55:15:5e:c1:04:6b:60:c9:19:cb:f1:d3:6b:27:
24:f5:41:fb:d4:55:93:85:96:70:c6:5a:f3:e4:eb:a1:9f:13:
cb:62:3e:b5:47:d6:7b:f5:ab:4a:db:30:6f:e0:ed:cb:a2:bb:
b0:11:a6:46:12:2e:e0:cc:80:5a:76:98:dc:4b:f8:34:fb:b3:
94:9d:b6:4c:5d:68:72:90:81:2d:12:6e:92:76:da:b2:c6:38:
a6:2d:75:eb:0d:17:2e:b9:97:61:ac:cf:2c:62:12:ec:60:cb:
17:7d:53:0a:7f:46:2a:4e:88:fa:29:da:ff:9c:9a:ef:c8:e9:
f5:60:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:52:36 2025 by rpki-client