Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
File: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft (raw, json)
Hash identifier: PQ/kCQyZm+4NOiZll89KLFUON3zdixDQeZFPRwV7tXs=
Subject key identifier: AD:E1:F0:F1:AC:3E:3C:D0:A2:12:A8:25:FF:37:48:54:26:A0:ED:EF
Authority key identifier: 07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
Certificate issuer: /CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Certificate serial: 0194BCA98D7FF5C5130B2B730D04DFC258B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl (hash: Pr7MuS1L/D9SP7WhdXx0zHvccgy2cEnQj1e00RJgUQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8d:7f:f5:c5:13:0b:2b:73:0d:04:df:c2:58:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d47b21cc3ba29cc8f8a9354f337f2d5c302154
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=ade1f0f1ac3e3cd0a212a825ff37485426a0edef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:54:2c:73:5d:fb:ed:dd:02:0b:62:a9:4a:
f0:ba:3b:d2:27:4d:a0:7f:85:64:70:9d:1a:b5:9c:
70:52:18:54:40:41:e1:1d:d5:49:02:22:44:08:fd:
ed:98:0c:e3:36:b6:da:be:34:ba:36:20:fa:38:0a:
3a:76:1e:66:23:98:38:c6:47:60:a1:31:d9:29:a6:
14:08:15:6b:c3:bc:7b:a6:14:0c:ab:2f:3a:32:5e:
6e:9b:94:6b:83:5b:e8:65:80:91:b0:c1:33:f1:83:
19:3e:34:42:64:22:24:c0:d1:ee:d1:e1:dc:0c:71:
05:f9:55:bd:63:89:8f:a4:e2:75:2f:5d:e7:13:ac:
88:45:90:d8:a2:87:df:00:93:05:7a:3a:a6:8b:39:
47:9b:04:74:97:d8:ed:c8:0e:1e:81:40:ae:77:30:
94:79:db:b2:f4:63:37:1b:a9:d5:63:12:84:5b:ee:
63:4b:37:98:c3:f0:8f:05:71:4f:50:f7:13:a1:c3:
b8:2f:43:18:87:a4:37:47:a2:2b:54:8d:1f:eb:aa:
dd:ba:61:3a:a6:37:e5:2b:9f:42:d2:1c:03:b3:78:
02:c6:90:06:50:cf:45:82:a2:2e:c3:63:f7:d0:89:
f7:c2:06:fa:1f:08:34:06:92:54:1a:3e:27:f4:5b:
27:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E1:F0:F1:AC:3E:3C:D0:A2:12:A8:25:FF:37:48:54:26:A0:ED:EF
X509v3 Authority Key Identifier:
keyid:07:D4:7B:21:CC:3B:A2:9C:C8:F8:A9:35:4F:33:7F:2D:5C:30:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/365a98-b803-4fc6-97be-253ab7aac417/1/B9R7Icw7opzI-Kk1TzN_LVwwIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:29:83:1a:4d:bf:ca:b5:25:90:f8:2b:98:88:31:7b:b7:fc:
bf:ea:fe:74:31:00:fc:7c:e2:e5:00:6c:1d:bf:08:c1:9f:d3:
dd:d2:28:bf:43:f2:45:e9:76:1c:9f:84:02:b6:25:58:42:c1:
e7:e1:51:e2:21:3c:d4:61:31:4e:e1:b8:c2:42:1e:ea:06:20:
d7:50:96:ec:91:65:e7:38:96:8f:4d:25:0e:88:14:56:1f:bd:
09:61:73:8a:5e:11:31:6d:94:3d:13:1b:19:87:04:69:38:0e:
5e:06:44:dc:6f:9f:05:1f:ce:ae:ee:9d:ef:88:39:8f:b0:15:
7d:be:12:25:f2:c5:e5:15:d4:e9:0c:5d:d7:4f:12:03:f1:27:
b3:2f:55:79:0d:35:84:8a:9f:ce:65:c0:7e:f0:69:eb:42:1a:
1a:6b:d0:42:02:b4:ab:87:f5:49:f1:f8:0f:f1:13:d3:ce:f3:
ea:1a:9a:0b:03:ae:87:e3:03:75:22:4f:50:a7:ff:12:ac:f7:
a5:26:ad:8a:71:b9:93:1d:f4:df:75:49:35:a2:c4:0f:4c:2a:
97:a6:e1:72:0b:50:c9:e2:b4:0b:ba:03:1a:f3:61:93:f2:bb:
bc:1f:6d:ca:01:9f:5f:21:4b:eb:ae:95:2b:b3:ae:e2:4d:6c:
4d:be:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:54 2025 by rpki-client