Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
File: l37KDVyVbeF79pcQRvLrlc5hXik.mft (raw, json)
Hash identifier: /K7hVAACJM9qEqkhk34lTk8x/HbmcY5ukzTIVaWdHe0=
Subject key identifier: DA:06:72:4B:56:A3:36:4D:EB:DC:9F:C3:73:86:D9:A1:FE:72:B5:21
Authority key identifier: 97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
Certificate issuer: /CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Certificate serial: 0194BBCDECEE5F906ECF14F9251AB9CDF592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: l37KDVyVbeF79pcQRvLrlc5hXik.crl (hash: VPB+0mi3peSbyee+eaiFuAdZUXnl8O2cmwhFDYxFVS4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ec:ee:5f:90:6e:cf:14:f9:25:1a:b9:cd:f5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=da06724b56a3364debdc9fc37386d9a1fe72b521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f6:08:c5:62:1b:54:05:b3:73:04:68:dd:10:
15:4b:13:46:4a:eb:84:2d:bb:08:4d:ae:fa:fa:a2:
ba:8f:dd:2f:a9:48:9c:87:12:5e:d6:38:40:3b:55:
dc:79:62:93:d4:7a:06:6a:40:58:3d:67:d9:28:48:
eb:6e:94:1c:f5:7a:a8:0a:29:a3:5d:55:79:6e:26:
47:3d:26:91:ac:0a:58:24:c2:1e:85:29:65:4c:ee:
8d:9b:ab:34:e7:52:7f:97:1d:33:e3:30:6d:83:f2:
8f:3e:3d:c4:4b:57:2b:b5:20:9c:62:31:84:a4:94:
7f:45:4b:d9:1c:a1:0a:e1:30:42:9e:dc:a2:94:c3:
f9:1c:be:a3:f3:e9:52:d4:a5:f9:75:4c:b9:50:53:
50:60:42:35:f5:8c:b8:6a:3f:14:02:5e:84:ba:c6:
1a:eb:4d:81:41:9a:13:c0:aa:46:d0:0a:77:4e:f1:
19:a2:81:1a:af:0e:fb:66:b7:f6:35:1d:50:40:df:
42:61:78:e0:8b:18:b9:09:b9:fa:3f:29:a0:25:2b:
6a:a9:ff:b7:50:7b:26:89:0a:c7:09:eb:9a:e9:83:
35:ea:7a:26:65:73:c3:b5:be:35:1c:ed:c8:75:36:
d4:2b:e2:bb:31:6f:7e:b2:23:c9:7c:a9:98:17:8f:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:06:72:4B:56:A3:36:4D:EB:DC:9F:C3:73:86:D9:A1:FE:72:B5:21
X509v3 Authority Key Identifier:
keyid:97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:14:9e:c8:d3:8a:b9:41:a7:2d:f8:91:e4:84:7b:df:e8:2a:
4d:27:7b:f0:10:fe:0c:e1:e2:98:c6:f1:aa:21:c1:01:c6:7a:
f6:4f:b6:0d:94:a3:5a:01:98:2a:61:06:30:39:eb:e1:25:28:
43:71:41:60:18:79:7c:d0:25:3c:8d:8d:ce:b0:b8:fa:e6:a4:
89:69:af:43:83:a5:0b:ea:1c:0d:dd:f0:ff:26:0c:4d:d4:c0:
3b:5c:97:5b:46:7e:40:d0:7a:4b:58:dd:47:a6:bb:65:ca:36:
d6:53:da:d3:fe:d2:81:50:48:54:fb:98:2c:14:c5:9c:70:f9:
db:ad:58:b9:b2:bc:66:f6:21:fb:70:17:2e:67:26:5e:19:fe:
c6:07:c8:de:6f:31:50:8a:72:b8:c2:7f:b0:18:ca:61:b2:70:
68:86:0a:0c:57:4a:ae:22:21:e3:64:b6:99:eb:19:a9:bd:21:
c6:2f:af:92:78:d1:42:d9:26:f9:6b:fb:d5:82:5d:e4:bb:3b:
26:36:ea:82:65:af:de:db:73:b4:94:20:ce:cd:a1:93:16:e4:
66:08:2b:73:86:5a:54:23:7b:b4:09:2e:b8:2c:d5:cd:81:0d:
9a:c3:2f:7e:26:63:f3:35:65:f5:7b:ef:3a:95:d3:f2:77:2e:
65:97:f3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:11 2025 by rpki-client