Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
File: n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json)
Hash identifier: 69V8AKrSu19qxO6y4oaxdhjA0mi7OoiSvQx6DoDW8RI=
Subject key identifier: EB:71:6F:30:FE:D7:0F:ED:C6:59:BB:20:1D:69:92:32:C4:6B:F2:E7
Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
Certificate issuer: /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Certificate serial: 0194BCA99ACE87DAA6636F07185F4E729E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
Manifest number: 0326
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: LRDHKsxG3EZH6c+0Mu1dz6Fagkx/j5WImcKakqxwp5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9a:ce:87:da:a6:63:6f:07:18:5f:4e:72:9e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=eb716f30fed70fedc659bb201d699232c46bf2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:d9:8b:b1:ba:24:79:8c:50:14:de:a7:10:
e3:5e:b1:b2:9f:de:a1:11:c3:8e:e8:1c:5a:36:31:
14:ac:a3:76:cc:ce:3b:06:08:ec:89:c6:2a:72:35:
3d:fb:0b:ea:e5:1c:af:7f:2f:83:ec:55:da:64:f4:
75:6d:9b:f2:bd:74:55:82:5f:8d:0e:15:34:58:28:
be:13:2d:ae:f1:7c:90:1e:3c:d7:89:75:f8:64:72:
43:9b:db:5f:99:0d:58:4b:36:06:8d:e0:82:7d:50:
42:48:e2:85:08:65:ee:c3:00:ea:c6:fc:49:79:fe:
46:36:e4:d1:5e:00:99:b8:72:16:69:a4:cf:81:7f:
d6:8c:e2:36:5a:05:75:5d:c9:e8:67:a4:4e:c7:d3:
31:19:cc:19:e1:3b:a5:c6:23:63:4f:a1:c8:66:29:
ef:c1:68:4b:87:30:99:43:4e:e7:98:e1:ab:a0:48:
cb:56:75:ef:e5:4b:07:cf:c1:dd:fe:92:4b:bb:85:
2b:a5:ad:28:87:28:1c:a2:3b:ec:c4:3b:90:5d:0a:
ee:42:72:8c:47:f3:c7:07:6e:b6:52:96:a2:4a:25:
57:ec:89:1d:97:a5:02:dd:a5:5a:32:e7:35:7d:43:
cb:d6:39:d0:54:60:88:57:69:a5:af:39:ce:32:c2:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:71:6F:30:FE:D7:0F:ED:C6:59:BB:20:1D:69:92:32:C4:6B:F2:E7
X509v3 Authority Key Identifier:
keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f0:1b:00:a9:2d:15:3b:53:ec:0d:17:06:28:f7:d4:fd:26:
34:7d:a1:c4:d2:f5:14:ae:94:ba:2b:60:0e:81:9b:d4:06:ba:
08:e2:7e:15:fd:e5:e6:31:f1:fe:fd:07:4b:89:03:82:8d:a0:
44:5d:72:b5:91:bd:d5:66:ff:df:95:46:3f:b6:e1:6d:e8:c6:
78:33:a1:18:00:0a:65:4d:a5:27:bc:19:92:c8:ce:08:c5:1f:
ad:c1:7c:42:d7:0d:5b:86:14:d3:de:7a:8f:56:12:9e:0e:0e:
5c:ec:ef:8a:b5:a2:e6:2e:4f:3f:7c:db:19:f7:10:78:1f:01:
a7:55:4f:4c:0c:28:3d:7a:cb:12:74:88:50:f7:07:a5:14:ea:
0b:16:37:6f:1f:24:3d:b2:92:3c:75:bf:da:ea:98:a1:68:af:
f9:40:3f:7f:86:c7:3e:40:a1:22:f2:bc:bf:ad:07:59:3f:7d:
77:91:94:a9:0c:af:aa:2f:4a:ef:76:c7:41:ae:9e:86:f4:4c:
3c:3e:bd:53:4a:3e:cf:c6:dc:ce:51:d2:8e:da:0b:c4:1e:5d:
ae:45:f3:5c:c4:13:76:d5:04:df:71:4f:23:a7:3e:06:d7:ba:
16:b6:b8:98:3e:52:bc:25:88:bc:1d:62:fb:ae:73:fb:de:3c:
ce:b6:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:38 2025 by rpki-client