Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: LbTcc0zlWrtY+wyBBUtbeEgxqtHpHwTTkH1VlH4CakQ=
Subject key identifier: 60:BE:1F:41:9A:B5:0A:EC:E4:B6:40:E2:A4:B9:7F:1F:C2:6D:07:AD
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 0194BBCEDC6B5C3319B7E21EFD4BD0F74AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: RGJXU64kD/ViDE7FwTVrT4NVeSF/f8RDeDeVfip67U0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:dc:6b:5c:33:19:b7:e2:1e:fd:4b:d0:f7:4a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=60be1f419ab50aece4b640e2a4b97f1fc26d07ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:55:d9:9d:ec:27:94:d0:c7:c2:55:db:b5:
93:18:a2:3d:b7:44:58:3e:26:6c:c0:6b:ba:06:b0:
19:8c:1e:ca:71:24:ee:e0:d0:d9:6a:31:15:14:9b:
43:4d:ba:4b:93:cc:83:52:d1:0a:eb:ff:6d:9b:a8:
52:bf:d9:ac:5b:fc:57:38:12:70:c7:9d:71:9d:aa:
fc:dc:be:8c:d6:9c:2d:0a:d6:3a:3a:86:4f:5d:9e:
ae:02:9a:be:f3:67:94:9d:62:04:8c:31:2f:d9:d5:
30:e6:7d:9b:a7:fe:9a:75:1a:b3:b8:53:e6:4c:fd:
ba:33:9b:71:82:01:f2:ac:e4:1d:d9:70:f7:cd:7e:
ac:b0:bf:a3:4a:52:b9:4a:37:4c:2e:bf:92:bc:0b:
d3:5d:d6:ba:1e:2b:47:62:19:86:d7:06:f4:0b:25:
15:c2:08:c3:37:33:46:58:bb:c4:15:73:47:9e:db:
99:22:b8:8c:92:eb:b2:f7:7c:6e:a8:43:b2:30:c5:
46:b2:6e:05:94:21:be:51:96:4e:86:e3:c5:13:8f:
f6:8a:80:ed:e1:f0:98:45:88:c2:9e:ac:12:3e:19:
68:f0:53:3a:fb:b6:11:5e:22:70:31:d3:92:ac:0c:
4e:f8:eb:3f:b9:a6:54:0a:ab:82:82:fc:5c:dd:15:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BE:1F:41:9A:B5:0A:EC:E4:B6:40:E2:A4:B9:7F:1F:C2:6D:07:AD
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5d:d4:06:49:08:c6:ed:0d:87:f0:d3:40:01:17:c3:96:57:
a0:05:fa:33:a5:24:61:92:40:9c:68:7a:b5:7f:18:3a:2f:cb:
d6:c5:49:63:3a:7b:5a:fa:14:9f:8f:6e:51:98:37:66:33:5a:
94:f2:85:3b:89:cb:16:da:91:8a:b4:01:ac:bf:23:bc:41:79:
1d:f6:c3:f2:27:d6:e4:77:f8:6c:8d:ea:cd:78:4c:69:51:d1:
a2:51:c4:fb:cb:1a:32:83:2f:93:72:87:c1:96:6a:c6:0c:2f:
ad:6f:94:8c:36:78:14:81:98:65:9b:d1:b4:1e:dd:72:8f:8b:
d5:4e:72:84:2d:ed:7c:a9:e0:ee:04:00:10:58:b2:01:3a:81:
40:87:25:b3:a4:a6:4c:a1:a8:5b:62:66:76:c6:48:a7:88:60:
ad:39:1c:50:aa:53:be:42:c0:fa:c3:f0:f5:e4:82:ec:15:94:
cf:ff:12:bf:dd:02:0a:e1:d0:6f:3b:93:7d:48:7c:27:d5:3d:
62:0f:09:1f:d6:d0:d1:25:83:89:ac:9e:44:4b:e9:52:2d:7d:
40:18:cc:c1:db:0e:f1:53:9f:4d:e7:02:e0:07:ca:35:45:7f:
86:ff:95:99:93:f4:6c:bb:52:fd:00:8d:c5:77:9f:5e:6b:da:
ee:99:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:26 2025 by rpki-client