Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
File: fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft (raw, json)
Hash identifier: Cql5UGKuWbnEpEOHTojdkWQk6oy2pXlJeeXtgBDp63M=
Subject key identifier: 1B:EA:5F:D6:27:7E:7B:26:BD:07:47:ED:5A:F4:8C:20:A0:AE:53:88
Authority key identifier: 7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
Certificate issuer: /CN=7c3846589a3b395b3758773da3d9f13334c72038
Certificate serial: 0194BCAA2C9DB2A5CD8E85F38DD7D94D6061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl (hash: WJK16jgp4pwxtwLbCc8hbkSzbZvqG9fx8v+jDmpYStA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2c:9d:b2:a5:cd:8e:85:f3:8d:d7:d9:4d:60:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3846589a3b395b3758773da3d9f13334c72038
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=1bea5fd6277e7b26bd0747ed5af48c20a0ae5388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:02:e3:19:f6:87:d6:ef:71:d5:9c:48:fd:
e3:ef:6b:22:be:7a:a1:5e:05:14:c5:a0:60:3b:b4:
4d:77:dc:47:0c:ad:3e:da:6d:ec:ae:1b:99:d4:c6:
16:98:97:01:03:0c:02:fe:7e:16:2c:93:61:f5:09:
a1:01:77:28:14:d3:38:09:b0:ed:bc:92:41:01:0b:
c7:2e:c8:f4:8f:8f:04:b7:9f:a8:19:ce:42:b8:bb:
d4:a5:89:d6:5f:12:82:37:de:7e:a7:3b:6f:75:01:
52:55:6a:df:1e:27:73:45:7b:ad:fb:cb:4c:ab:e3:
f8:0e:dd:be:61:a4:c9:00:36:24:af:ed:15:09:94:
65:53:f4:48:eb:69:e5:ee:d9:07:2f:ea:49:2a:8b:
9c:f5:e5:57:0e:ee:e2:2c:32:e3:09:1f:d8:5d:e1:
c2:21:ba:9d:7a:d0:f0:f1:34:61:b5:76:d0:6f:2b:
4f:61:dd:91:f5:77:71:48:cc:7b:3f:14:a1:f8:f2:
21:18:a3:f2:45:ad:5f:9a:46:13:3c:b2:dc:4d:a0:
ad:10:c1:a1:ae:da:02:50:b0:1a:6f:5d:1f:19:0c:
c8:f6:2e:7a:86:7d:16:d6:ce:21:5b:a4:7e:3a:b7:
fb:40:26:8a:0a:00:45:e3:cb:af:e3:5a:28:27:ca:
5f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EA:5F:D6:27:7E:7B:26:BD:07:47:ED:5A:F4:8C:20:A0:AE:53:88
X509v3 Authority Key Identifier:
keyid:7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e7:7a:5f:9e:27:90:11:a7:25:64:d2:41:78:44:5d:80:d4:
20:bb:25:9a:74:cf:88:ec:95:82:4b:6b:48:d0:dc:b7:86:77:
d1:75:f5:eb:81:ea:85:ae:e0:14:81:85:20:0d:e1:4e:17:82:
d7:8f:dc:4d:06:5b:4e:2b:98:e5:26:7b:f9:fd:6d:0a:eb:83:
b8:5c:ce:fd:23:08:73:f9:1e:32:02:d8:e3:fe:9d:23:b6:68:
a0:72:cc:7c:da:d5:2b:b4:96:8a:03:9e:45:67:88:e4:b9:4f:
ec:21:4b:7e:2a:e1:ea:a8:7e:c8:5a:e4:ba:7a:81:3a:55:8c:
8b:65:fb:98:40:a6:f5:e3:6e:4d:94:c8:ba:c6:05:92:79:4d:
f8:89:04:02:85:af:7e:20:ff:c0:20:ae:32:66:c1:c9:fc:2b:
16:68:f6:aa:c2:3d:d4:2b:15:7e:13:51:02:8f:19:bf:44:49:
f0:20:be:9e:28:18:ea:21:c8:1b:f5:5a:e1:42:b1:ca:5e:f0:
98:57:c9:03:d9:07:6c:cf:80:fc:04:c3:6c:99:a7:83:95:9f:
81:23:ff:1a:70:28:8c:f4:ab:b2:36:97:b6:4d:65:43:da:66:
1f:c5:f7:83:02:a0:24:80:7c:5c:26:de:3d:42:13:42:35:18:
cf:1c:78:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:33 2025 by rpki-client