Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File: C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier: iuh8u+fD3bIE7J2oNZu6urlpzUWHeZjUYehNNaZ/Dls=
Subject key identifier: 3F:90:CB:54:10:6B:30:65:A1:21:6C:71:AE:C0:3A:2E:D8:02:1C:9B
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer: /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial: 0194BBCE99BC95C0D5569058156D5E8E1581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: DiZI0jjtnPr0fxBfbJtvvP3Cm/oWA36Un+MV2dGO598=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:99:bc:95:c0:d5:56:90:58:15:6d:5e:8e:15:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=3f90cb54106b3065a1216c71aec03a2ed8021c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:fc:13:66:00:99:bb:59:ae:d3:43:be:a9:
1f:48:23:f3:f3:b6:40:ab:05:42:9c:ca:5a:81:c2:
41:45:db:92:0e:55:75:9f:79:86:a7:a6:85:87:e1:
f5:e5:93:1a:b3:e9:19:0d:63:f3:eb:61:02:8d:f5:
b6:4b:4c:66:93:62:4f:44:4d:39:14:c1:fb:30:41:
b7:b2:c0:6d:00:fa:2d:da:35:fd:5d:cc:d7:1b:63:
d8:e5:4e:39:dc:76:40:a0:43:4d:f3:e1:d6:b5:84:
f7:1f:9f:8d:61:29:37:89:de:ef:e1:01:7b:a6:9f:
26:98:8b:21:89:ad:5e:0b:97:28:7d:26:6d:f3:b9:
68:b4:23:79:af:ec:59:a1:d6:a3:ed:28:46:9d:a1:
c6:f9:19:ea:66:9c:59:49:b9:da:68:59:25:dc:4f:
4d:8d:af:10:91:a3:60:27:02:7e:1b:af:a4:15:c8:
5a:f3:47:af:10:35:5e:58:90:d4:81:59:02:cf:0c:
1d:bd:76:22:8b:7d:8d:15:09:40:9d:e0:3e:0b:81:
9a:3b:e9:e8:4b:dc:52:a6:de:f4:48:89:23:41:c6:
7c:3a:3a:48:38:ff:ad:fb:b9:5f:7d:c6:a2:03:de:
8c:94:cb:a9:8d:be:c1:62:15:a9:bb:56:82:66:6c:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:90:CB:54:10:6B:30:65:A1:21:6C:71:AE:C0:3A:2E:D8:02:1C:9B
X509v3 Authority Key Identifier:
keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cf:c0:eb:64:ea:1b:3a:35:84:a6:d2:0e:5a:d6:fe:18:bf:
1d:fd:87:ed:29:26:19:29:e7:84:76:4b:db:b0:74:45:2e:b4:
40:7c:63:a5:36:c0:e6:d6:03:25:8b:d9:7b:f2:61:46:50:20:
80:c9:7a:38:c8:6d:59:51:c3:ae:72:b8:84:d8:1f:87:71:ea:
dd:7b:b5:c4:fb:c3:3b:90:45:bc:5b:89:95:27:10:7e:1e:5d:
53:8e:d3:5c:8a:06:e0:cb:45:26:f9:73:57:63:0e:cb:28:fe:
7c:78:63:ec:7c:7b:37:f7:45:01:e7:72:e5:26:02:0d:42:18:
08:bb:df:a5:49:13:4b:4f:08:bf:07:f5:6e:46:58:03:ed:2a:
5d:31:69:56:74:e2:e8:9a:ca:0f:55:c8:cd:59:9f:b2:d1:75:
77:f0:43:4f:45:0b:0c:b3:14:6e:55:74:33:15:9c:fc:ec:de:
f8:17:6e:cc:34:e8:bc:ba:8a:25:1d:e0:fa:1c:a2:66:db:71:
27:7a:de:cf:63:46:27:ba:93:b5:1c:23:93:96:13:6c:23:73:
5f:aa:24:70:be:97:ba:f1:69:bf:68:7a:02:ea:ce:1a:d8:62:
e8:70:67:a1:79:f0:a5:a2:5b:34:95:cc:6c:0f:83:da:75:a9:
74:11:ff:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:55:35 2025 by rpki-client