Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
File: 861SH4OIdIPIybDG895f1e1Whck.mft (raw, json)
Hash identifier: pgBxu8s4mNh0wYxWyZU8IAMHPyM3D9KlLzINX300JF8=
Subject key identifier: 6F:C3:92:96:1D:B6:FA:EB:2E:B4:DD:AB:AA:4C:40:3A:D5:9B:3D:C4
Authority key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
Certificate issuer: /CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Certificate serial: 0194BBCEDA6656177319B517E1336C4CA651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
Manifest number: 09B4
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 861SH4OIdIPIybDG895f1e1Whck.crl (hash: DN1naFQ0vyKSUFmbilGgm+eawzaH6JB7Rzoeu5FwEoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:da:66:56:17:73:19:b5:17:e1:33:6c:4c:a6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=6fc392961db6faeb2eb4ddabaa4c403ad59b3dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:80:9b:74:bb:7f:0d:00:a7:b5:f5:0f:62:
e2:07:2c:0a:e9:bc:f8:31:19:b0:05:e0:5f:23:5f:
b1:14:d1:04:9d:06:5a:6c:4b:8c:fa:3f:77:a1:28:
ea:28:ba:78:e3:fd:c5:29:e5:c1:dd:ba:20:74:5b:
20:b4:b0:e6:99:de:07:50:32:4f:46:88:8c:19:38:
4a:49:d9:13:42:09:08:c9:4e:68:70:d5:13:e7:c4:
c6:b6:98:d4:96:57:b6:bb:d0:30:d3:18:25:33:c8:
ef:d8:21:3a:fb:1a:71:65:22:4b:eb:f7:67:2a:18:
a3:84:67:2b:e7:ca:a6:c6:e1:89:2e:23:ea:d4:4d:
ba:e4:f6:6d:d3:06:11:4e:13:d8:e8:3a:72:4b:39:
08:f4:fa:14:00:fa:9d:b6:b4:ab:3f:6a:99:b5:da:
eb:9e:8e:ff:72:df:f5:13:7a:01:1a:30:10:d8:56:
5a:db:d1:ed:78:fa:4a:6d:fe:a5:b6:9c:2e:af:31:
69:5c:03:c4:96:55:c9:e0:3f:ea:18:3c:37:ce:fc:
72:bc:9a:26:17:cb:fe:e1:0c:45:d9:eb:94:79:99:
3b:2f:a1:6b:8d:df:07:ec:8f:03:fa:30:84:e3:ca:
6c:43:77:eb:0a:28:28:08:d9:7e:d8:3d:bb:e8:b6:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C3:92:96:1D:B6:FA:EB:2E:B4:DD:AB:AA:4C:40:3A:D5:9B:3D:C4
X509v3 Authority Key Identifier:
keyid:F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4a:5b:e3:aa:f2:c6:8c:f7:26:44:35:a3:8c:10:7c:76:57:
05:f9:88:1f:ca:2b:7b:23:4c:da:67:3c:ff:c7:e5:b1:43:27:
1e:c0:68:44:fd:c5:5e:a7:35:73:a3:39:9e:0f:89:7a:6f:b3:
c3:8a:3a:12:5f:13:38:8f:2d:bc:9d:98:b6:e3:17:1d:e8:45:
6a:d2:8f:7d:5a:cf:03:68:4b:6a:fe:97:3d:57:76:83:28:be:
38:73:c6:71:f1:c4:e6:ec:af:e3:78:14:cd:42:1c:11:da:1e:
bb:b2:76:22:9f:d7:8b:86:43:8c:fb:d4:ed:f0:93:b3:07:75:
7f:25:4b:05:5a:7b:aa:04:c0:85:3c:77:e5:4d:09:52:3b:3c:
f8:ae:5b:64:b1:8d:e0:8d:c1:69:69:2f:ab:e4:fe:a0:30:73:
83:6f:fd:b0:66:0b:99:b8:ed:24:69:d1:71:8f:8f:01:30:1a:
eb:d0:6a:c3:6d:fb:91:bb:a3:f5:dc:f7:ef:f0:d4:4b:85:ae:
a7:f6:b4:3d:12:42:35:a7:23:b7:e5:b8:14:e4:91:0e:2c:b0:
12:e7:29:a7:98:31:1c:46:57:37:87:54:12:48:8c:66:f0:cf:
f4:32:d0:8f:82:76:46:ff:43:fb:34:b9:d9:22:e5:46:10:e6:
ed:74:41:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:31 2025 by rpki-client