Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier: aDYn0dtXKimkCY01q8Hzh5llsBLhiPDhk4J2+CrKAXE=
Subject key identifier: 88:E2:B3:C0:5E:F7:43:B5:42:30:57:44:DA:6F:93:54:87:BB:85:AF
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial: 0194BC3C86942EC0F90102B0745470DB3FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number: 03FC
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: 3WiT6sx4JFllBY8DSe+nJyniKxFLHojEh2bCPx1TSw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:86:94:2e:c0:f9:01:02:b0:74:54:70:db:3f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54460596d6d532401de313df890366e5376d602
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=88e2b3c05ef743b542305744da6f935487bb85af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:4e:f7:60:85:11:5f:fd:e2:0c:08:3d:7f:
6d:ee:b4:a6:cf:a4:bc:20:b8:87:4a:7d:31:04:36:
f9:29:8a:e0:cf:74:95:e5:14:c9:28:db:ee:87:dd:
ef:31:30:26:1b:7f:88:69:aa:aa:15:5f:33:e4:a8:
5a:4d:0e:fe:2d:9d:38:f3:b9:4e:c8:d1:94:00:99:
6c:9a:22:dd:3c:c9:29:b4:f5:db:a4:99:b2:5d:f5:
dd:de:76:7f:78:97:47:ea:99:f2:f4:f3:3f:0d:20:
38:9b:14:78:c0:82:d1:13:b9:0f:0a:11:96:b0:6c:
58:65:0a:68:b2:09:ca:65:fe:fc:4b:a5:d2:26:ac:
b7:2b:73:80:34:39:1c:ca:e4:10:b0:84:c8:f7:d3:
f8:77:90:e9:da:d4:7d:f3:30:69:cc:4f:c7:da:4d:
7b:00:89:92:ce:1f:d5:03:73:58:f5:82:54:0f:db:
c7:02:e6:9b:d3:d4:57:69:49:02:4e:5f:f5:5d:72:
92:62:cf:02:a1:4c:36:7d:0d:67:39:eb:22:d8:f4:
01:85:d2:06:11:8b:f9:6c:bd:7f:ba:30:a7:1a:74:
37:53:b3:fc:e3:28:63:54:ab:3b:af:e5:39:54:35:
b0:9f:17:2b:53:b6:58:29:60:71:5e:48:4b:b2:c1:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E2:B3:C0:5E:F7:43:B5:42:30:57:44:DA:6F:93:54:87:BB:85:AF
X509v3 Authority Key Identifier:
keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:38:24:1a:51:60:32:0c:82:d8:0a:2c:5b:13:71:0c:80:19:
2a:b0:44:2b:6e:eb:e9:5a:19:92:a0:d4:61:35:11:9b:77:54:
3a:6b:27:60:71:fa:05:8a:24:aa:25:98:2c:e2:dd:2d:de:e2:
47:2d:10:05:f6:f1:a8:2c:b0:27:22:fe:45:0c:65:c3:29:4c:
56:10:9a:ab:ce:70:a7:91:92:b4:cd:da:95:cb:42:4b:4f:0f:
b0:86:33:36:9e:38:12:05:bf:e2:05:03:bd:35:3c:1a:f9:b0:
1c:e9:22:74:dc:fd:8c:f2:7b:a9:5b:15:89:4e:8e:ca:d7:55:
a5:a5:f9:60:1e:24:7b:c3:4c:19:e7:f7:43:79:15:e4:d3:68:
64:c6:68:fe:5b:14:b6:4b:72:ed:89:e0:a1:08:8d:58:6f:44:
60:0c:da:91:6f:8a:01:1e:6d:b4:c7:d3:37:73:3a:f3:56:64:
d0:03:34:58:78:86:c9:0b:00:47:c6:5d:b1:eb:a8:0a:06:76:
c2:5a:66:f2:2e:ee:9e:b3:6c:fd:ef:69:3b:68:04:9a:3a:20:
42:dc:fd:dd:2e:23:66:9a:82:6c:17:0d:47:5a:cc:18:e0:50:
28:0e:e6:f0:03:8c:93:f5:c1:b4:d1:3d:9c:b7:b3:64:8a:08:
28:ca:18:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:21:36 2025 by rpki-client