Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
File: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft (raw, json)
Hash identifier: maSXEvst5dTYaVvkxGRJJDPTF7QWTienrLUlBuEx+J0=
Subject key identifier: 3B:5D:5C:D6:72:CE:E4:D5:09:17:9A:80:E4:F4:D2:F0:09:91:69:2E
Authority key identifier: F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
Certificate issuer: /CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Certificate serial: 0194BBCE99BF03B2F3374E504F623832A0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
Manifest number: 0836
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl (hash: gSnwHiXVLu7FtGqNAnjwoDEvZ4nvC33QdHeuwLjHk4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:99:bf:03:b2:f3:37:4e:50:4f:62:38:32:a0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=3b5d5cd672cee4d509179a80e4f4d2f00991692e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:d5:54:c4:81:22:26:7f:4e:76:28:80:73:
71:52:d3:ce:3f:c3:e6:37:89:13:05:45:07:94:1e:
4b:a8:98:37:08:f0:b1:e3:6b:7e:d4:71:5c:97:ce:
01:ff:ab:ee:08:3c:fb:b4:90:5b:4e:2f:35:82:0b:
98:15:6e:4e:4e:3a:a6:c7:63:5e:86:b7:9d:16:e0:
59:ec:5b:9e:6f:5f:68:4c:06:a0:c0:df:2c:c2:58:
ee:43:db:e5:2b:00:ad:0a:22:a5:77:71:17:42:1e:
32:de:24:e2:27:29:ce:a4:4a:84:55:8f:fa:70:6e:
cf:da:a8:6f:1e:0b:3a:e8:d7:77:8f:68:b9:63:f2:
12:f0:0c:0c:39:67:1a:e4:9c:be:5b:31:27:92:b0:
f0:b4:1f:02:a6:cb:b7:72:6f:51:0d:9b:05:1e:f9:
75:b7:69:20:e0:2d:1d:fd:53:84:c5:1f:4d:77:48:
c6:96:b0:b5:4c:c0:7f:1d:48:18:a3:d5:5f:94:1f:
55:9b:14:e3:48:e1:94:02:0e:af:08:78:cb:8f:47:
b1:0f:44:6e:2a:5e:da:d6:ff:a4:c4:43:f6:1f:55:
3c:77:92:d5:94:c9:cb:7b:ae:6f:f8:93:d8:fb:ce:
ec:59:1d:b8:20:e9:4c:d6:2f:e6:b3:a6:f1:90:0a:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5D:5C:D6:72:CE:E4:D5:09:17:9A:80:E4:F4:D2:F0:09:91:69:2E
X509v3 Authority Key Identifier:
keyid:F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:86:72:0f:c0:b1:bd:82:c5:57:7a:5a:50:ca:a3:5f:85:c5:
4c:1c:1e:10:b9:6a:ac:d2:33:c2:a3:4e:3b:0c:52:12:69:f2:
c0:79:9d:e6:3e:58:50:81:13:28:8c:00:55:95:e4:1a:cf:1f:
eb:d7:dc:cd:66:a3:50:69:57:13:15:c2:e7:5a:f8:c2:73:10:
b7:eb:3b:56:87:ed:f3:0f:1e:3e:bd:e9:4e:3a:19:29:27:76:
12:03:ac:64:f4:bd:2b:c6:72:c0:61:4f:a7:16:78:f5:d8:2a:
fa:ff:ef:d1:b8:0b:c3:c4:a2:2b:ae:af:d2:80:a8:d8:6a:1e:
11:ce:a6:c6:30:73:93:fa:88:3a:85:5e:a7:dd:1e:4a:9f:6a:
a8:95:ef:48:b9:ec:7d:00:d6:4f:9f:2f:ae:61:c4:35:16:f9:
04:5e:20:68:e0:48:21:8f:60:52:cd:c2:6e:f5:5b:5f:04:94:
d5:3b:32:ae:8e:9e:4d:5e:e7:9f:be:48:dd:35:b9:88:22:27:
66:93:dd:05:ca:75:db:0b:60:4a:97:e7:5f:c4:1c:12:61:b8:
4f:8a:02:3b:aa:48:a9:26:af:ce:7e:eb:1a:e8:f5:2a:12:d2:
86:94:20:a4:bb:82:3b:08:17:fa:1a:c4:5d:e3:fb:fb:e4:27:
16:83:78:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:11 2025 by rpki-client