Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier: L4tV95lqtfOxwfuhKcaObZYi9T1vxdFsfrMOpnaCeoE=
Subject key identifier: E7:9C:F4:B3:5D:FC:18:4F:A3:80:3E:F0:79:C1:3F:4F:1E:10:90:33
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial: 0194BC3BDE512539D11C1C1D18CBF4C3B965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number: 024F
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: bDI5pXM9Go+hSuh+idDF+tS3sYdERUCJu2BsVSGg4W0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:de:51:25:39:d1:1c:1c:1d:18:cb:f4:c3:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=e79cf4b35dfc184fa3803ef079c13f4f1e109033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:3d:9a:ea:de:e5:b2:99:63:79:39:2b:64:
1e:d8:d7:97:d2:79:73:c8:60:f1:2c:64:b0:98:e9:
8e:af:cd:af:7f:8f:c6:29:20:d4:c4:32:93:bb:4b:
a0:9a:e6:44:81:68:03:79:ef:b8:cc:4b:a7:8b:39:
1a:3f:1d:b2:89:2e:4f:e6:51:e3:26:e6:1f:a8:b5:
aa:bd:21:b9:6b:75:01:cc:8e:1f:12:f7:1a:dd:9f:
e2:8a:8e:86:b6:ae:61:39:3a:4c:67:04:83:55:e6:
b7:44:86:d7:d7:bd:51:c9:7f:0d:e1:e5:34:ba:e5:
74:fe:41:85:c6:93:3a:1e:3a:f0:38:28:a5:f6:02:
ca:9e:72:6f:95:b5:0e:78:a1:b7:5b:cf:e0:c1:dd:
48:63:6d:12:64:cc:03:94:87:10:cc:c3:26:c2:95:
67:79:f8:1f:cb:a8:3c:01:9f:91:5b:50:d0:2a:6f:
55:5f:69:be:e1:d1:be:a5:4b:46:8f:81:ec:57:a9:
86:56:6d:f7:3b:9b:a1:12:14:75:39:2c:d5:39:9f:
65:30:8e:7c:2a:b6:1d:9e:fc:aa:88:20:e2:13:94:
9f:3c:65:e6:4e:99:b2:83:46:6a:22:9f:f3:23:35:
44:68:ee:c6:7c:79:f7:48:ea:54:47:8b:2e:1c:64:
b1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9C:F4:B3:5D:FC:18:4F:A3:80:3E:F0:79:C1:3F:4F:1E:10:90:33
X509v3 Authority Key Identifier:
keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:55:d8:5f:de:eb:06:d5:86:30:ab:d5:36:8a:83:c0:d6:91:
9d:d2:23:70:5e:31:2a:d2:fb:5b:32:92:53:a3:12:8d:88:62:
46:72:2e:11:67:0a:6d:4c:33:ab:40:0a:d1:52:df:ad:65:75:
f8:fc:dc:69:34:11:3b:5b:e4:e2:29:02:cc:bb:75:19:8e:93:
00:58:0c:f0:b7:8a:62:cb:d3:18:5f:37:56:a3:ae:b2:f2:e2:
c9:77:0a:e5:7b:9b:e2:ac:a2:fa:62:95:aa:0f:29:84:e1:31:
9e:f8:ff:e7:f5:c4:86:73:7c:b4:3d:7f:46:c2:7e:52:27:e8:
20:60:99:0c:50:18:4a:0a:d5:41:0c:64:c2:85:ca:ed:1d:ba:
57:3d:74:8a:d6:d3:62:e8:29:6e:5e:36:12:91:40:fe:f1:23:
59:88:bf:f0:44:92:76:61:d2:cf:5c:d3:bf:05:c2:fe:5e:68:
fc:3d:74:95:e5:0c:00:fa:05:ff:02:f3:7c:aa:84:2c:f7:ef:
d0:de:45:5c:1e:64:f0:52:5c:04:b8:d6:31:7d:1b:8b:a4:d8:
35:f9:38:24:b8:f7:ff:7a:06:91:b5:40:1b:5b:f8:2b:5a:ab:
2b:b5:97:b0:e4:d9:8b:8d:95:1a:a1:cf:be:75:b5:41:bd:c3:
08:08:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:46 2025 by rpki-client