Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
File: SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft (raw, json)
Hash identifier: Uz5U80eMtnOHpc9fBoagUdHhIL+cW+5aFlVt9io6Ks0=
Subject key identifier: 70:52:8A:10:3F:02:AC:21:3D:A1:2F:C4:22:CA:33:93:F2:28:6A:EB
Authority key identifier: 49:11:E4:1F:8B:BE:E8:0C:65:5C:15:3F:28:A8:19:D0:16:C8:27:1B
Certificate issuer: /CN=4911e41f8bbee80c655c153f28a819d016c8271b
Certificate serial: 0194BC728FC2ED67D98FCCA974B927E2078E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
Manifest number: 08B4
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl (hash: H5tzxVeVy0SvlvymscRQ2TDU/0tSpFR1uV+IFihYbM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8f:c2:ed:67:d9:8f:cc:a9:74:b9:27:e2:07:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911e41f8bbee80c655c153f28a819d016c8271b
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=70528a103f02ac213da12fc422ca3393f2286aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:31:c2:5d:b3:74:43:50:9d:5e:e3:ef:7e:da:
5b:52:f6:a6:d8:e6:8b:c1:ec:99:aa:26:5c:70:e8:
12:e8:4c:04:84:42:9d:46:b6:d8:1e:a6:60:08:7e:
2c:77:22:b6:06:5c:43:d7:de:d9:2c:0a:cd:79:49:
b4:f8:65:c7:43:d9:ad:e7:38:3b:39:41:cc:7a:b1:
c9:0f:88:20:e8:9b:bc:f6:8c:98:14:12:61:02:59:
24:67:f7:97:7e:69:69:92:01:19:c1:48:ef:bc:60:
1d:92:3b:6e:25:ba:a5:71:d4:f7:90:f7:45:9d:5e:
d8:3a:c7:fa:0c:cb:2a:ec:ad:a5:e1:f2:c3:d5:b3:
56:1e:fb:bd:b1:fc:4c:b7:81:88:2a:23:a3:22:c0:
b1:f2:f8:9e:fe:04:a6:64:ef:f3:c2:13:12:db:24:
28:bd:5b:5b:9b:8f:dd:83:50:cc:32:6c:c4:68:9d:
0d:10:f3:d1:f9:f9:7f:47:34:b2:56:2e:a8:9f:c5:
05:55:8d:bb:13:de:82:f7:c6:64:4f:14:29:e5:c0:
b2:7c:2c:a7:ec:80:bd:1f:24:25:03:31:63:a7:ba:
79:de:5b:c5:42:c2:d7:be:c2:f7:07:6f:b3:7b:ae:
b6:43:ce:35:ba:b3:42:6d:ef:88:4d:b6:3a:44:f9:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:52:8A:10:3F:02:AC:21:3D:A1:2F:C4:22:CA:33:93:F2:28:6A:EB
X509v3 Authority Key Identifier:
keyid:49:11:E4:1F:8B:BE:E8:0C:65:5C:15:3F:28:A8:19:D0:16:C8:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:d2:ff:1b:2d:5a:cc:55:c8:6d:23:2b:d6:85:29:a9:f7:
b9:ea:0c:08:ff:94:96:29:e9:49:2c:87:79:a5:c8:ce:fb:dc:
cf:b9:ab:c5:34:1d:32:b0:6e:c1:07:33:5e:71:9d:79:40:f9:
fe:c3:95:75:e4:c7:2f:be:e5:03:6d:c9:a8:e6:66:b5:ea:1a:
e0:2a:b2:ab:09:4c:dc:7f:8e:87:37:83:38:b4:50:7b:f0:78:
f7:50:a9:21:e0:6b:32:77:29:61:5c:4f:ca:50:f9:3f:94:2d:
e6:3a:f0:1f:74:85:c7:cc:02:7a:59:69:2c:9c:d0:65:4e:81:
4f:a2:ca:89:27:4a:f1:1d:cc:3d:6e:64:16:66:a9:ef:20:17:
55:de:39:af:12:16:60:44:f3:45:1c:81:72:ee:ff:63:73:8a:
27:f2:9a:74:2a:fc:3c:6c:55:cf:55:7a:ce:28:d8:39:dc:6c:
68:76:ea:dd:1b:36:8e:0f:d3:ec:20:52:73:c1:c9:72:3d:05:
72:8a:f6:05:3a:69:c1:13:29:45:e7:c9:fd:6e:c0:95:34:c8:
ac:89:e6:74:8e:c0:f4:01:e7:c4:7a:80:0a:fd:61:fc:0a:11:
22:6f:4c:dc:1d:08:20:44:33:02:dc:98:c0:4c:34:f1:06:f0:
8d:47:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:43 2025 by rpki-client