Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: CK9xVYbryACupdMqkfozLE+abDJk2QajDBhJWz/xH/0=
Subject key identifier: 78:67:5A:8C:81:34:89:13:D8:43:04:CF:56:D1:C0:63:27:D8:3D:DD
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 0194BCA974D6BDF996E06A19E2CFEC3364D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 073C
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: dzl/UBqdGgLbpTVxwISNxkCu7swtQZb5Q8KUTsq0vsw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:74:d6:bd:f9:96:e0:6a:19:e2:cf:ec:33:64:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=78675a8c81348913d84304cf56d1c06327d83ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:9d:9a:92:0b:67:46:52:15:00:05:f7:bd:
29:ab:27:62:fc:3d:53:85:e6:46:d3:b6:44:b5:dd:
2e:d9:f9:bb:8c:49:e1:f5:1d:5e:5f:59:d2:16:26:
29:ae:69:be:78:f8:11:87:73:b1:7d:70:62:cd:80:
5a:71:4c:7b:d1:b2:09:a0:3d:fc:44:12:4b:b7:b8:
3a:1d:8e:6b:18:e8:08:8f:8a:cd:97:6b:a5:3e:cf:
5d:c9:d0:8d:e8:f7:f1:a8:5d:e2:90:72:dd:a4:bb:
77:90:65:14:4a:78:83:84:c1:f3:55:de:5d:6f:be:
1b:7a:0f:3a:57:94:34:95:64:25:80:d6:34:bf:40:
5d:66:5e:7b:c9:a2:49:de:50:7f:4b:e6:8b:92:7e:
8c:62:66:85:80:11:7c:a2:8d:9e:a1:a9:d4:1d:52:
9a:79:af:b4:3a:ed:85:81:48:2a:80:82:bd:dc:a1:
7b:77:96:da:5a:6f:e4:53:f3:10:d0:63:6b:03:ce:
19:f4:9f:dc:a8:a7:6f:dc:3c:d1:5c:0a:d4:ed:0a:
35:33:a9:d4:c9:34:e7:e7:7f:d0:67:4d:e9:18:37:
d2:07:20:b9:c6:b5:2b:a6:84:b0:c1:18:3a:0c:84:
20:c7:0c:ac:4e:86:c8:e2:46:82:6f:26:d3:6b:6a:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:67:5A:8C:81:34:89:13:D8:43:04:CF:56:D1:C0:63:27:D8:3D:DD
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c7:aa:c7:5c:b7:b3:81:d9:6d:41:0b:c4:39:68:9e:30:a0:
aa:9a:e5:8f:a0:29:d0:dc:fb:db:78:dc:fc:9a:00:36:5a:76:
85:96:46:35:5f:22:28:38:5b:da:24:f8:52:fe:46:5a:a6:2e:
7c:df:74:58:1b:3d:4b:ea:b6:30:91:e9:8a:73:d4:ad:1f:b1:
c6:1f:9b:5c:97:50:ad:22:fb:b2:71:e1:7f:8a:cb:c0:0b:ea:
4e:2e:a3:87:da:ca:26:d0:34:e3:65:fb:7d:97:db:b5:e8:8a:
60:9f:17:bf:25:44:86:d1:bb:d7:bd:ec:2c:a9:c1:6f:34:01:
cb:4f:63:1e:b7:c0:d0:37:95:59:ac:3b:e6:32:17:fc:cc:06:
64:7f:c9:67:cc:5e:2d:0f:98:ed:97:8d:ae:4e:4f:f5:f4:7d:
51:62:af:76:81:c2:ab:c0:5e:d4:06:25:0d:f5:1e:d2:9c:64:
af:fd:75:a2:e5:9b:32:ef:c1:b2:97:16:23:48:d5:fb:55:b9:
bf:be:60:60:8c:46:e4:c6:09:a6:14:14:c9:a3:3b:60:7c:b8:
ff:8a:72:ff:ca:7c:82:7d:11:bb:62:f6:cc:6b:c5:5c:c4:37:
89:b9:e8:92:27:0e:6a:40:e0:7d:57:72:0d:34:0b:ae:cf:87:
35:9f:e7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:02 2025 by rpki-client