Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
File: T9a30KYwNXvDweDN2gbcqIo0Y-w.mft (raw, json)
Hash identifier: Hu8tKgMJnhFlwDSWsyCL2hSrsH1ExBLhiKWK+cEeSsA=
Subject key identifier: 07:A9:9C:E1:F0:EF:42:66:94:E2:B5:E2:64:54:5D:56:9D:1B:CB:A2
Authority key identifier: 4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
Certificate issuer: /CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Certificate serial: 0194BCA97FC74BE8ABEEF161D6FE4A782499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
Manifest number: 0319
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: T9a30KYwNXvDweDN2gbcqIo0Y-w.crl (hash: a0kCyOV9L3/Ze0SVwmADSZojfvqSxeKkjOG2QDlZBj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7f:c7:4b:e8:ab:ee:f1:61:d6:fe:4a:78:24:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6b7d0a630357bc3c1e0cdda06dca88a3463ec
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=07a99ce1f0ef426694e2b5e264545d569d1bcba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:e4:6a:8c:be:5d:2b:6e:9c:4e:16:fe:5f:
9d:d0:bd:b8:44:24:d1:07:e1:cb:c8:bc:89:7a:e1:
2a:9f:15:14:a5:7a:6e:1b:8e:83:93:bf:f2:b6:4f:
b7:8c:fc:67:da:dd:87:4d:84:61:d2:67:85:3c:a0:
6d:f1:6b:22:67:8d:f8:b1:0e:03:45:c3:b1:b2:b0:
6a:0f:6f:d7:18:40:43:f5:46:82:19:5a:20:33:95:
45:ce:61:e1:a8:79:2c:81:cc:c1:6f:9f:ab:b6:5c:
66:d2:a7:c6:3d:eb:8f:51:d0:86:61:e9:51:ea:2d:
69:bb:7e:41:04:17:df:23:f3:c8:51:27:f2:1f:a5:
0b:db:25:19:86:8f:c7:13:f5:bc:ea:9a:e5:f2:5c:
46:2b:16:f8:18:e7:7c:62:c4:71:c8:c2:cf:54:14:
3b:e8:98:7f:ab:7a:7b:a8:25:1d:e5:ad:a5:b8:58:
fa:63:45:66:d7:4b:6c:d4:6d:59:18:c4:24:91:9a:
5a:fa:d3:83:da:de:c2:aa:0a:14:01:47:57:66:c9:
07:b7:75:09:35:5e:34:98:2b:ff:d2:65:d4:60:b4:
1d:2e:10:a9:cd:04:c9:c7:53:07:af:57:8f:56:1c:
e6:98:ad:39:2f:13:96:f7:ae:3e:81:67:2c:3e:a8:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:9C:E1:F0:EF:42:66:94:E2:B5:E2:64:54:5D:56:9D:1B:CB:A2
X509v3 Authority Key Identifier:
keyid:4F:D6:B7:D0:A6:30:35:7B:C3:C1:E0:CD:DA:06:DC:A8:8A:34:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9a30KYwNXvDweDN2gbcqIo0Y-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ff31f0-7960-4df1-9885-d3146bfcddff/1/T9a30KYwNXvDweDN2gbcqIo0Y-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d1:82:f2:1e:5d:88:e8:1a:eb:c9:68:33:96:00:9d:91:c5:
7e:0e:12:f1:b1:56:49:e9:98:d2:ef:26:7b:68:0a:5c:f7:26:
49:16:15:d6:60:cb:41:4b:97:1e:46:61:c7:63:72:78:d6:b3:
05:a9:a6:66:56:2e:bc:92:00:19:f3:50:92:38:ec:44:99:6f:
ae:d5:93:79:22:ea:06:71:84:4e:f9:7e:3b:05:f9:73:3f:51:
82:1b:62:87:60:36:18:d2:77:28:8b:d9:ad:dd:c4:d6:71:f0:
99:53:34:0d:38:ed:93:b8:a9:0a:bc:8a:d4:b9:2e:1d:24:50:
4c:18:be:45:b3:fc:b0:a4:e4:cc:69:d6:17:b7:f3:ab:b0:23:
a4:54:ff:ae:62:29:35:2f:0e:7f:0c:ce:e3:66:03:a5:7b:d7:
49:30:a7:4b:cd:f7:b5:e3:b4:61:94:ed:49:f9:f4:32:ac:a6:
81:f6:e4:e4:aa:51:f8:3c:cd:45:73:5f:ef:02:1c:e9:e7:4b:
d5:61:25:db:4c:c2:a0:5a:c4:ef:23:78:d8:ea:8f:54:f1:41:
d4:82:6b:97:87:8a:0a:17:f6:3b:07:1f:06:da:24:fd:bc:0e:
ec:b0:87:e5:2a:7a:8f:f7:91:cb:91:f3:0b:94:09:31:b8:3c:
26:64:78:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:52 2025 by rpki-client