Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
File: 1-XhhvCSEodMubzbMLEayFG4xW8E.mft (raw, json)
Hash identifier: cgkatrqpe0U9ImcKUu9I3/CPRgfemMo44rgrg0n+Tms=
Subject key identifier: 55:C2:1D:36:55:DB:E4:09:98:86:1E:B0:3E:05:15:32:12:B4:34:E9
Authority key identifier: F9:78:61:BC:24:84:A1:D3:2E:6F:36:CC:2C:46:B2:14:6E:31:5B:C1
Certificate issuer: /CN=f97861bc2484a1d32e6f36cc2c46b2146e315bc1
Certificate serial: 0194BCA9F4E61B280B51260F1F10A9153212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XhhvCSEodMubzbMLEayFG4xW8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
Manifest number: 08F9
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: 1-XhhvCSEodMubzbMLEayFG4xW8E.crl (hash: aQ1JjaGVkqQ1bGreoAGgxFYKUrqYL11xWkkiifJPaq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f4:e6:1b:28:0b:51:26:0f:1f:10:a9:15:32:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97861bc2484a1d32e6f36cc2c46b2146e315bc1
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=55c21d3655dbe40998861eb03e05153212b434e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:1e:c3:b3:ca:88:fa:53:71:f9:47:0e:7f:
61:b7:d2:49:1d:aa:e4:a6:7f:c5:ee:23:1b:e0:cf:
4a:a8:6d:d3:90:7a:5f:27:1a:9a:3c:b0:72:5b:0e:
fe:4c:86:61:f8:ab:cd:ee:70:bc:dc:45:4c:e5:b1:
2f:63:14:e2:aa:e7:97:10:a9:05:70:5b:b3:65:37:
19:8b:38:c5:33:9e:9e:8f:11:c3:d6:e2:20:ee:6c:
2d:48:b1:f5:bc:7c:b0:78:f2:7d:a4:80:b4:bc:01:
85:e9:de:6f:99:dd:7c:f2:b5:80:2d:19:47:32:90:
2b:c9:71:81:32:a0:e7:c6:6f:2f:06:40:2e:ea:be:
75:46:09:0d:69:47:cd:c4:f0:4c:64:2d:fb:b7:c9:
d1:f8:33:07:51:87:ba:f5:2b:9a:da:29:00:e7:1a:
18:d7:00:61:2a:66:d5:7e:5b:fc:ae:2a:6a:24:8a:
c4:42:d2:84:ec:c1:ef:a6:76:94:5f:ea:c5:1c:4e:
45:b8:c4:91:df:44:f1:27:33:f7:27:cd:9a:18:c8:
f9:4d:aa:09:a7:be:a3:24:20:24:9c:b8:08:33:17:
2e:af:ae:9f:95:64:b4:70:cd:6c:2d:31:c0:68:57:
af:2b:52:e6:ad:1b:65:6d:36:b2:4b:6e:71:f0:3f:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C2:1D:36:55:DB:E4:09:98:86:1E:B0:3E:05:15:32:12:B4:34:E9
X509v3 Authority Key Identifier:
keyid:F9:78:61:BC:24:84:A1:D3:2E:6F:36:CC:2C:46:B2:14:6E:31:5B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XhhvCSEodMubzbMLEayFG4xW8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a3a48d-ccae-458d-8dbd-9685b8484789/1/1-XhhvCSEodMubzbMLEayFG4xW8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f7:56:d1:06:da:db:6e:38:7c:cf:a9:c1:51:b0:29:28:64:
c0:3c:79:d3:ff:79:bf:f1:2d:3d:5d:d4:a1:52:41:5e:12:e3:
dc:79:0e:ee:3b:3a:39:65:51:e9:f5:a3:4d:11:50:85:94:ee:
05:ed:b4:d6:62:fb:1f:3c:d6:b5:44:47:8e:59:cc:c6:8b:a5:
a9:cd:3d:ab:5b:2e:73:85:18:28:d5:1f:b5:81:02:c1:f6:ca:
b2:0e:66:c9:e2:dc:92:f0:2b:90:71:65:9a:43:15:63:ff:15:
b5:34:bf:49:57:7d:a6:99:ff:2e:0b:0d:f1:00:52:a0:93:c3:
de:ca:62:39:a4:6e:af:d0:7b:cd:49:36:60:a6:33:e1:1b:98:
b9:4c:ce:68:cd:39:f5:2e:51:0f:0d:29:70:ed:ae:76:19:b9:
34:46:88:f6:f4:d7:e1:76:f5:56:dd:44:d9:17:a9:ae:d7:e3:
b3:57:35:53:9d:e2:63:61:54:4e:2d:4b:d8:17:40:7e:76:b5:
5d:45:cb:19:94:03:75:a3:60:f2:3f:49:df:ab:4b:ee:1f:1f:
b1:62:69:0f:aa:89:c5:2b:79:5c:13:fb:c5:1f:ef:4b:2a:4b:
55:11:6f:86:6f:90:bd:a1:48:d2:b3:58:90:ca:88:e4:bc:5a:
80:3e:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:12 2025 by rpki-client