Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/488f2f-c3f3-4692-b1d8-23532b9d6766/1/1vrDRWGv3CP27_aJSiK9Nr5ge-M.mft
File: 1vrDRWGv3CP27_aJSiK9Nr5ge-M.mft (raw, json)
Hash identifier: rk3odFbEDprmodG66aGR5nespPbD4m00l8doIHAJrBE=
Subject key identifier: 6B:0A:0A:7D:F3:94:BE:8D:AA:EC:45:CB:B7:F2:50:70:A0:39:CC:3D
Authority key identifier: D6:FA:C3:45:61:AF:DC:23:F6:EF:F6:89:4A:22:BD:36:BE:60:7B:E3
Certificate issuer: /CN=d6fac34561afdc23f6eff6894a22bd36be607be3
Certificate serial: 0194BC3BE155265EB3789813053E88951EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDRWGv3CP27_aJSiK9Nr5ge-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/488f2f-c3f3-4692-b1d8-23532b9d6766/1/1vrDRWGv3CP27_aJSiK9Nr5ge-M.mft
Manifest number: 071C
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: 1vrDRWGv3CP27_aJSiK9Nr5ge-M.crl (hash: 0WZgeFerVQKcRAvN4vkvUUxbEk4K1JcHoEZ7ksVz5l4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e1:55:26:5e:b3:78:98:13:05:3e:88:95:1e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac34561afdc23f6eff6894a22bd36be607be3
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=6b0a0a7df394be8daaec45cbb7f25070a039cc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:f4:54:34:7d:cb:b7:09:ee:d7:61:e4:34:
1e:03:8a:da:c0:51:a1:a2:78:d8:91:bf:9f:05:09:
17:9b:ae:0c:d3:ee:e2:e0:e0:fd:4e:9a:e2:45:db:
59:d4:97:e7:00:3c:4d:73:cc:af:3b:15:7a:0a:9b:
e1:6e:ce:16:b2:42:d0:9d:8f:38:01:99:ad:00:53:
a1:d6:4d:a3:3c:96:d3:06:2f:be:2c:04:8c:2e:00:
6e:0c:b3:e9:68:02:04:c3:8d:65:bf:ca:40:87:2b:
eb:d9:c7:37:7e:0b:be:3f:17:54:ce:75:75:98:27:
05:27:4e:c7:1f:94:5c:ea:f1:df:2b:e1:70:9d:9a:
8c:44:5f:cd:3f:9c:13:bc:11:d1:d0:15:74:71:70:
73:7a:f8:d8:3b:e4:08:cf:ba:3e:94:a5:f5:cf:42:
73:ac:c9:ba:05:13:f5:54:6b:69:fa:31:67:bb:30:
2a:58:02:40:05:e1:f5:33:29:a6:4c:b9:6a:53:4e:
b9:7e:4a:fb:3e:cf:89:b6:cf:1c:d6:2a:78:47:40:
ca:b1:b2:41:dd:82:9f:1f:7b:9c:04:02:7d:e1:a7:
13:e0:d9:34:ea:c6:56:e4:91:d1:94:0a:25:a3:87:
63:16:8a:c5:44:72:8e:2e:fd:7a:30:28:96:7e:3c:
ac:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0A:0A:7D:F3:94:BE:8D:AA:EC:45:CB:B7:F2:50:70:A0:39:CC:3D
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:45:61:AF:DC:23:F6:EF:F6:89:4A:22:BD:36:BE:60:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDRWGv3CP27_aJSiK9Nr5ge-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/488f2f-c3f3-4692-b1d8-23532b9d6766/1/1vrDRWGv3CP27_aJSiK9Nr5ge-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/488f2f-c3f3-4692-b1d8-23532b9d6766/1/1vrDRWGv3CP27_aJSiK9Nr5ge-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c9:d8:0d:e6:1d:56:7a:72:00:a7:a7:b7:18:c5:7d:5e:70:
4c:b6:c4:49:8e:60:11:e0:db:51:64:63:cb:a1:c1:28:87:80:
bf:74:a2:17:35:0e:a2:06:22:d1:44:a2:28:62:15:12:4e:dc:
23:72:59:3d:70:8e:75:5a:d4:9a:ec:34:eb:eb:87:bc:8d:51:
1b:b5:fe:e2:c6:b6:f5:e1:ff:3c:36:b2:25:8a:6c:98:cd:bf:
07:0a:e0:d0:31:29:48:de:c5:14:61:85:38:52:c8:2a:c0:f4:
cd:2e:55:c0:42:25:be:78:7b:d1:5f:0e:d0:d7:f2:30:89:8f:
dd:78:2b:01:ce:52:ac:50:0e:61:50:28:7d:b2:62:20:91:af:
bc:c5:69:2c:3d:83:e7:92:ba:00:eb:ef:8e:23:d3:a9:d6:d3:
0e:ea:73:9e:31:a0:d3:8d:e1:3f:a3:55:82:fc:81:3e:7a:10:
f3:92:c1:08:03:10:42:23:a4:7c:87:f8:d7:85:ec:7a:f3:35:
37:79:a7:a7:2c:76:92:34:54:2a:1b:7a:d9:ee:7a:a0:7a:10:
cf:17:e4:e2:4a:ab:5a:99:cc:b1:28:83:8e:32:80:54:92:7d:
2e:8b:bf:a7:b8:3c:a8:2d:1c:c3:6c:cc:d4:b4:b0:a8:f0:a6:
e3:8e:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:31 2025 by rpki-client