Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
File: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json)
Hash identifier: 4B0LBA0rQFOUcsxuqsns6YHy9+fUD3JDOAmoT4hSxn8=
Subject key identifier: F7:45:8F:4A:DC:3E:97:87:E9:57:84:BC:28:C4:D0:27:71:E6:4E:F6
Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
Certificate issuer: /CN=d217978586bff3a6777d55a9a9635841516d43b4
Certificate serial: 0194BD178D421369A84ABED10128C58FEC95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
Manifest number: 09BE
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: zmYJG/KmOpdrzRFFfYqPNO/Q0sUlM9oH0kHUkQGJU50=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8d:42:13:69:a8:4a:be:d1:01:28:c5:8f:ec:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=f7458f4adc3e9787e95784bc28c4d02771e64ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:01:dc:99:91:49:86:fe:ae:c2:bc:04:bf:
43:38:37:f1:e9:bd:88:0b:46:a8:a8:a1:12:15:81:
d1:d7:57:2f:d9:7f:54:7f:f3:cc:cf:31:f5:13:cf:
b2:cd:e3:61:06:c2:26:c0:f7:74:c9:99:e0:f7:50:
60:1a:33:0b:ed:47:ad:a4:e0:a1:99:c6:7f:05:3f:
19:df:1d:be:a4:1f:b7:b1:ae:b7:22:9a:35:5d:c3:
5c:18:b3:ab:ed:57:03:90:0f:07:73:dc:59:b2:ba:
d5:e9:35:85:a6:ea:68:35:57:8d:4b:f0:a9:30:d6:
8f:e9:ad:b1:d5:af:9b:55:e4:60:5e:a2:96:a7:10:
e3:ae:91:60:9a:01:28:bb:e4:e9:b8:83:37:78:10:
02:81:0a:a4:95:f5:74:2d:49:d0:da:35:5d:9e:0d:
b1:56:b6:32:c3:e1:64:cd:d2:b3:59:ab:7d:b3:55:
1e:04:0d:08:f4:4c:19:76:20:9d:9b:35:a5:8a:6a:
30:f6:e3:34:46:de:f7:46:b1:f1:69:83:30:5e:63:
9c:17:a8:9a:c9:2c:60:f1:d4:6f:3d:24:90:09:81:
09:a1:75:c7:12:44:ef:5c:94:a0:39:85:67:0e:f1:
33:03:30:20:3f:5f:0d:8e:bf:da:a1:56:b4:87:32:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:45:8F:4A:DC:3E:97:87:E9:57:84:BC:28:C4:D0:27:71:E6:4E:F6
X509v3 Authority Key Identifier:
keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1f:1d:c2:17:0b:3d:d4:7f:2f:27:03:7c:8d:5d:41:bc:77:
b0:fc:73:1f:7d:b9:41:68:aa:9c:bb:b1:f0:23:0d:0f:9e:29:
39:a5:44:95:e0:ed:0c:8e:b3:5a:93:38:58:56:35:6c:eb:49:
a1:e4:8f:70:2c:e5:5e:67:bb:15:8e:43:2c:ea:d8:1d:08:8f:
7f:e9:48:32:c9:33:d2:75:a1:a5:a8:bc:b3:7b:eb:6a:20:5d:
2f:93:f6:dc:ae:81:55:d9:12:17:68:8b:45:89:d0:ae:54:89:
49:0d:3c:ed:5c:6b:87:3e:41:e7:2c:53:40:a1:52:28:26:9c:
c9:1e:0e:15:39:15:f1:65:04:f8:e2:7c:0c:59:39:83:81:be:
f5:fa:f0:3a:3a:0c:5c:44:2b:65:36:74:e1:f6:78:c8:29:ab:
be:9e:e3:d9:6c:af:eb:01:2d:64:31:07:b5:9d:00:d8:10:bb:
33:29:07:da:93:21:0b:78:b9:1c:15:ad:60:1e:cf:f3:fc:eb:
83:2b:c0:ef:65:d6:5d:7a:e7:3a:d6:97:66:26:ea:ce:4f:e0:
35:10:a2:1d:ab:ee:1c:e1:d6:8b:46:a5:04:58:c5:55:af:88:
63:78:54:a0:7c:4e:6b:35:77:04:8c:c7:da:ab:c6:21:b4:b0:
5f:90:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:12 2025 by rpki-client