Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
File: r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft (raw, json)
Hash identifier: 7LOu+RpSnewM6lHv4S5lQr9DgsTJuF7vNEI9w8XjLV8=
Subject key identifier: C4:77:BF:2D:7A:24:44:FD:A7:98:11:87:B0:47:64:70:09:15:0A:2B
Authority key identifier: AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
Certificate issuer: /CN=afff13a67f225c3c2a606658c23965b8191d4008
Certificate serial: 0194BBCE9FE3A5981AEEB5CF5CC93D117B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
Manifest number: 0A4F
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl (hash: aFvb34VP6kIAd6/waasgDihQsY1wq6NsMaW0pg/YRiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9f:e3:a5:98:1a:ee:b5:cf:5c:c9:3d:11:7b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afff13a67f225c3c2a606658c23965b8191d4008
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=c477bf2d7a2444fda7981187b047647009150a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:b0:d4:04:4d:9c:43:3a:c4:59:a2:59:d7:
6a:bc:9a:0d:61:b8:41:c8:2d:38:87:de:92:2c:3b:
6f:f0:3c:aa:90:6e:3b:99:11:58:3c:11:0f:5b:63:
d4:eb:87:47:73:b7:c4:83:c4:fb:5b:f5:65:a6:2a:
26:d0:02:ee:49:93:0c:51:c8:92:b3:7c:84:ad:82:
0c:b3:a9:03:c4:d7:52:ab:55:c8:64:0b:25:5a:40:
42:db:20:5c:ed:8a:85:81:e6:a3:c6:01:a1:b4:6a:
88:98:6e:2d:39:8e:06:29:aa:83:bf:b0:14:7a:12:
4f:d1:9f:85:a7:c5:9e:a9:43:14:be:7f:f9:c6:e1:
1e:0c:be:48:da:c1:b5:e7:59:02:b0:56:e5:92:3f:
83:9e:2b:a3:fd:a9:e0:ad:aa:27:64:ed:46:cf:0c:
35:3d:1d:76:4b:d5:a9:04:54:ae:94:4a:e0:9c:fb:
37:ba:f6:20:45:ae:85:01:e6:f4:d8:86:4a:5e:30:
2a:65:59:32:33:87:e4:e5:c6:57:3a:1e:94:b4:04:
74:fd:9a:f7:db:7a:0e:d2:ff:12:2e:1b:ee:dc:d4:
66:c9:ad:c6:2b:d2:15:2e:55:f4:80:7b:e7:19:f7:
15:49:b8:22:55:eb:8f:03:3c:a1:29:d1:4e:bf:ff:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:77:BF:2D:7A:24:44:FD:A7:98:11:87:B0:47:64:70:09:15:0A:2B
X509v3 Authority Key Identifier:
keyid:AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fa:af:22:b2:a2:a9:a8:05:96:10:00:50:b1:39:50:61:8b:
43:e2:1a:b8:d7:9f:eb:d6:53:15:38:a0:10:52:4c:c9:ac:10:
32:8b:20:d6:bf:08:c5:19:0b:ff:d8:42:b7:24:02:54:3f:27:
e6:be:8c:c4:52:10:29:7f:c4:ea:37:e7:51:e4:45:9c:7d:c9:
12:94:24:bc:21:6f:e0:aa:e2:a1:dd:25:f5:d7:61:ca:bb:58:
10:31:a8:ae:63:21:00:a2:99:9c:69:bf:d0:92:5e:39:25:80:
7a:71:3b:e5:06:ae:1a:a5:04:3a:2c:67:b2:91:53:e4:9b:47:
cf:34:36:4d:07:03:3e:39:5e:6f:69:cb:fe:c5:32:93:9d:5a:
df:14:7c:ac:4c:b7:c6:ce:7b:e0:b7:35:29:10:f4:e4:51:62:
86:6c:28:ea:7b:c7:7f:93:bd:3e:1a:de:0d:ca:a3:60:d3:93:
7b:e2:4d:14:b1:7e:45:cb:6e:17:59:9d:4e:63:45:09:55:0c:
e6:74:0e:55:d0:13:56:1a:03:3f:7a:d5:b9:fe:f4:a2:40:c1:
f0:d9:5a:a0:9d:10:d9:70:66:af:14:fd:56:2e:d6:06:82:f0:
8e:94:5f:24:08:56:9d:ea:50:42:1d:77:cb:4c:50:fc:08:1d:
56:9d:45:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:19 2025 by rpki-client