Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier: aE5Sy3fsxSRYKZoQo8ZmftsuXdr3ZnhbgnFx9S6o+JQ=
Subject key identifier: C9:89:D4:F1:E1:E3:2A:DC:C2:6E:C1:ED:14:0A:93:B4:C5:45:5C:64
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer: /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial: 0194BC3C790D99750E7549B2E39DF11738CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: GIDkdYgpJamMY+nZPt/fM0uPTe9PiRCwFupKmNtFHtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:79:0d:99:75:0e:75:49:b2:e3:9d:f1:17:38:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=c989d4f1e1e32adcc26ec1ed140a93b4c5455c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:01:ad:83:aa:1d:89:c9:cf:60:7a:ae:2a:
39:42:15:96:1e:f6:c0:46:cf:d2:c7:20:05:f3:59:
17:00:11:aa:b1:cd:bd:4a:be:4e:98:24:e9:ed:01:
63:fa:4a:f2:0a:af:3c:bc:09:ff:d2:94:c5:a1:eb:
4f:f3:53:01:20:cc:01:98:70:e7:4f:d5:d2:52:04:
40:d4:9c:89:bc:39:ec:a9:ae:06:a4:e1:62:b4:db:
29:9f:10:f1:42:f5:49:eb:ba:f2:3b:0d:b8:23:c7:
57:b8:59:8f:1f:fa:0b:82:c0:ab:45:80:52:1f:43:
50:c0:f8:ec:1f:05:19:cb:34:8c:58:f5:13:55:d3:
ad:0c:5a:66:15:40:62:10:22:10:d1:3a:fb:1c:f5:
cf:54:22:e5:a2:ca:df:96:3e:41:2b:94:07:db:c2:
ee:40:14:c7:cf:77:27:e2:ba:66:26:80:c6:0d:62:
89:37:02:b2:19:20:a0:fa:1c:40:5b:e8:f9:52:4e:
23:76:c1:c7:f7:48:03:c8:fe:8d:de:e8:48:cb:66:
ee:c7:53:df:e6:d7:d8:2e:dd:4a:2e:b6:09:99:3c:
3f:88:22:02:98:23:1e:6f:78:b0:c8:63:81:30:5b:
d1:5d:2d:ba:41:b4:3a:e3:71:df:41:e1:3c:1c:d9:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:89:D4:F1:E1:E3:2A:DC:C2:6E:C1:ED:14:0A:93:B4:C5:45:5C:64
X509v3 Authority Key Identifier:
keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:97:88:08:d7:d4:80:89:7a:49:dc:2d:0d:ac:b2:37:d9:07:
5a:c8:ba:02:22:c4:d8:59:a8:a2:34:de:76:fb:c5:17:d7:5f:
44:39:54:6b:18:82:72:fa:f2:e4:9a:0e:f8:db:35:67:f2:bf:
a3:df:32:cd:d4:ba:b5:6c:58:c3:c9:4d:7c:3b:57:94:5a:2e:
eb:32:f0:2a:c7:5c:3f:4d:4e:3d:02:5e:29:2a:05:a5:4c:50:
2e:34:e5:62:04:70:62:0c:3b:ff:6b:13:fa:9c:34:6e:5c:52:
0a:16:62:ee:6d:7e:08:7d:fd:22:86:e0:b8:d0:01:30:b5:6c:
c6:61:18:5f:9d:e5:b1:6c:5d:6b:8a:55:28:b6:8c:f9:19:27:
c1:0e:31:df:7a:10:0b:10:2a:5a:2f:bf:95:cf:4c:0b:55:64:
8f:de:66:a0:64:5c:76:bb:ff:0d:c0:af:68:76:6f:24:cc:c9:
1a:80:88:d9:ca:78:f5:07:ea:f1:18:e0:d3:ec:4c:e9:6d:77:
c1:13:f7:0c:e4:b9:b6:58:92:b1:06:f2:65:bc:a1:3e:12:af:
b1:bd:30:3d:8c:aa:b6:04:0f:4b:e6:24:d1:7b:f7:bf:a6:91:
07:1d:1b:a1:d7:e3:f1:37:40:60:d1:8e:ea:da:6f:4e:9c:9f:
ca:47:35:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:45 2025 by rpki-client