Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
File: o7HPJ-q7mfazXewahDm21lPc4zo.mft (raw, json)
Hash identifier: kPIozXRWxoxiVsSN8oyFzx3+K/vGrr4my2/VfkdXIJ8=
Subject key identifier: C9:F7:22:32:57:3E:9D:3F:E9:1F:E1:3F:54:2A:7A:70:90:56:70:46
Authority key identifier: A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A
Certificate issuer: /CN=a3b1cf27eabb99f6b35dec1a8439b6d653dce33a
Certificate serial: 0194BC3C9D633967CB77AD68B83A584EA19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: o7HPJ-q7mfazXewahDm21lPc4zo.crl (hash: py4vvY526nsS2kz6/+Mz7OmbgoR5LDZeeX0BgAvQz7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9d:63:39:67:cb:77:ad:68:b8:3a:58:4e:a1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b1cf27eabb99f6b35dec1a8439b6d653dce33a
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=c9f72232573e9d3fe91fe13f542a7a7090567046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:c1:4f:8d:d2:a5:54:cb:00:34:82:12:b6:
3b:b2:ca:f2:98:58:7d:6c:19:95:23:5c:99:e8:37:
28:aa:a0:1a:6d:2a:d0:00:78:0a:0a:ac:15:61:28:
a1:82:77:cb:60:73:43:fa:63:bb:d5:04:2b:37:bc:
94:aa:81:eb:4e:42:a7:a5:2f:bc:83:5b:b7:50:6a:
3e:ac:07:54:14:1c:7f:3c:c7:17:9e:27:d8:a6:a6:
45:ba:ce:c6:fd:16:df:f2:fa:e2:9d:dd:b6:0c:a1:
69:e6:82:1f:ca:01:03:83:72:97:eb:45:28:1e:2a:
37:f5:b3:9a:15:eb:14:fb:0d:31:55:60:a6:09:4a:
1c:f5:54:7a:66:b5:e9:dd:f4:54:fe:95:d6:96:b4:
2e:b6:15:e6:03:b9:27:5d:c7:a4:79:1f:cc:b3:cd:
b7:de:55:62:4c:e9:02:04:f6:95:d7:e1:20:6b:24:
f8:3c:b4:f6:c9:ad:4e:d0:8f:e5:7f:2b:be:1e:8e:
ca:94:53:cd:d6:35:b8:b4:14:95:98:34:9c:ca:3f:
2e:f8:65:47:d7:49:12:38:bf:42:47:11:1b:bb:5e:
db:0b:ed:e0:00:82:31:b0:d3:14:64:fb:b6:c4:65:
66:2e:30:32:c5:d8:df:8d:38:dc:5c:2f:f8:3a:22:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F7:22:32:57:3E:9D:3F:E9:1F:E1:3F:54:2A:7A:70:90:56:70:46
X509v3 Authority Key Identifier:
keyid:A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:04:64:15:17:f5:b5:8c:66:fa:7e:a8:da:0c:5e:5f:52:c0:
68:2f:2c:34:49:1c:4f:bb:f9:2c:e7:b9:01:e5:17:19:e0:76:
b0:5d:8b:8f:98:30:60:32:70:db:e9:7f:7d:05:de:1a:c1:65:
72:35:9f:81:a8:69:b0:35:26:d4:f6:eb:3d:d6:79:90:1a:be:
4b:e9:dc:60:f8:67:93:da:45:1c:0b:65:1c:54:e4:a8:b6:e3:
a5:bc:d8:de:af:34:1e:0e:33:06:c3:03:60:0f:94:0f:98:68:
c0:8f:c4:b0:f2:92:2c:f7:a4:cf:f5:3b:e1:42:73:56:27:12:
ab:20:6c:88:e3:99:bb:9f:c6:48:e8:15:9b:c8:b8:3a:49:32:
29:85:0c:84:c5:18:c3:f4:83:58:f3:d8:a4:70:29:d1:26:2c:
52:ee:34:76:a3:48:70:9c:9d:e0:48:83:b9:f3:82:8c:5a:4c:
a9:ff:d9:c6:41:d8:4e:39:90:d3:ac:88:a9:c9:a5:1e:8f:84:
b4:5b:e8:33:1a:19:a6:1c:6f:e4:76:bb:15:8a:6d:89:29:91:
cb:bc:24:73:8d:19:fc:e5:43:01:71:9c:13:5f:d2:10:1b:7a:
7a:bb:36:19:6c:8b:f4:7b:da:03:2b:d8:7b:46:0c:64:7d:c2:
f3:7c:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:00 2025 by rpki-client