Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier: scbHJl3bjvudcVCQ+O0ZFLKTnWuirn799T+ElxzfYio=
Subject key identifier: 12:7A:77:20:BF:98:CA:4E:34:C0:5E:42:A4:A4:E2:74:9C:0C:9F:88
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer: /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial: 0194BBCE197A5ED2614E47A0A7A6D4CF5BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: oY3G4QVMDaQ7+PNTkMZUd2jv/RPA0iJ2Y9WcSui5Gik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:19:7a:5e:d2:61:4e:47:a0:a7:a6:d4:cf:5b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=127a7720bf98ca4e34c05e42a4a4e2749c0c9f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:9b:83:2c:cf:6c:a7:2a:d4:1d:41:ef:4c:
89:e2:62:08:bb:b8:14:4f:46:67:4d:31:98:e2:a9:
bc:16:a3:fb:10:b0:f8:96:7c:39:44:c7:da:58:82:
43:f6:9e:b4:73:d3:af:4e:31:90:e1:9d:36:f4:39:
1a:df:71:1a:8f:85:bb:88:3e:7c:16:cc:e3:d3:92:
85:b7:a6:92:c4:52:2d:94:ad:c8:3e:8c:c7:ad:56:
43:6d:6e:21:59:f5:54:38:2f:14:13:20:7d:ea:95:
15:8a:81:ae:37:e0:78:b5:71:78:80:8c:cb:66:92:
5f:6d:87:ce:8a:e7:dc:67:28:cc:05:ee:fb:6d:dc:
9d:87:b3:d1:f6:5c:fd:b9:64:e1:67:d5:6b:16:d1:
f7:c7:7e:67:0c:77:53:e2:e3:e3:c7:04:17:e6:df:
06:26:6b:db:3f:35:61:03:ca:34:7a:a1:32:bf:e6:
ac:09:6d:61:4a:dc:45:92:d5:44:90:52:9e:6b:2a:
b8:e1:ca:55:60:63:ec:58:be:15:8c:41:8b:c4:82:
7c:9f:04:c0:a7:27:4d:ed:13:2b:24:7a:91:c1:60:
77:fb:f6:7a:79:86:39:04:bc:26:76:f9:5f:11:54:
e2:97:ea:06:d8:ba:fd:be:0a:79:ff:50:7f:3a:53:
cb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7A:77:20:BF:98:CA:4E:34:C0:5E:42:A4:A4:E2:74:9C:0C:9F:88
X509v3 Authority Key Identifier:
keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3b:2c:83:3d:7f:7d:ae:07:16:e0:71:7d:d0:f9:64:c3:a5:
1b:eb:97:bb:01:d5:ae:1f:be:6a:52:a1:72:51:fd:d5:82:76:
f3:c0:43:bd:c0:06:42:c0:f2:a5:1e:ec:b8:fa:76:01:8a:85:
14:1b:67:27:cd:5e:75:ae:d7:fe:3c:76:d8:c8:d5:95:aa:53:
cb:86:14:b9:d2:58:ba:50:3f:b0:46:c9:1f:81:2f:3e:78:d6:
8f:29:c4:f1:0e:2f:a5:7e:5f:e3:34:9b:c3:24:8c:61:13:23:
9d:b9:3d:5f:e5:f5:56:a1:32:65:1a:1a:28:d4:15:4f:92:c3:
ad:30:e4:2a:0e:20:07:00:da:31:bd:3b:d6:b6:ea:27:f1:a2:
6c:47:b5:3a:6a:f2:41:65:33:b3:3d:56:34:54:47:a0:e4:6e:
60:b7:e7:09:a1:39:05:4b:7a:c5:ec:c3:a8:d7:48:78:37:0f:
1b:ae:9b:d5:90:1c:b6:d3:2a:14:27:29:39:ce:1f:aa:7f:87:
0d:32:4d:0a:20:39:39:96:5f:9a:5b:41:e1:d5:3a:48:9a:cb:
80:f6:f2:47:2a:aa:f4:29:20:52:21:b9:83:e4:10:3d:de:02:
c4:9d:08:39:6b:c3:89:ab:ac:7a:8d:b6:9b:20:36:02:05:25:
1e:9b:1d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:03 2025 by rpki-client