Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
File: v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft (raw, json)
Hash identifier: dEXN8QvbiwgC8b3ChoG3Ir8z8uPaCjL6DLBHIzX2r9I=
Subject key identifier: 24:88:CD:27:A1:8F:FE:B8:4E:89:93:12:A4:74:80:DD:62:70:BD:B7
Authority key identifier: BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11
Certificate issuer: /CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
Certificate serial: 0194BD4E71B9007414DDFBB17DCEC115CFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
Manifest number: 011C
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl (hash: aMjMfbjk2BTv53WCovV6EwKLso0W7iIdhMeNa99AAC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:71:b9:00:74:14:dd:fb:b1:7d:ce:c1:15:cf:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=2488cd27a18ffeb84e899312a47480dd6270bdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:14:91:5e:e2:c6:31:6d:5f:69:bd:81:e2:e5:
7f:8a:a0:d6:23:f6:7b:63:7e:ae:0f:a3:31:61:c8:
58:5f:8f:fd:5e:f0:de:71:dc:24:3d:11:ff:20:8e:
32:fb:2e:28:5a:cb:4b:5d:49:49:fe:68:a7:5d:f5:
f3:d3:f8:81:92:c5:49:81:c9:ed:f3:d2:32:9b:78:
f7:77:95:b5:29:a4:b5:82:c5:f6:90:b3:b0:29:75:
01:9d:ab:a6:86:cb:0e:91:42:fc:23:88:5d:a1:ea:
ae:a9:9a:a5:11:d0:b3:fd:34:59:e0:f5:a8:83:77:
83:88:f1:8b:91:ed:0a:92:03:bc:11:f6:92:92:7c:
fc:83:ad:51:85:f7:a6:18:8d:9d:29:4b:b5:ba:9e:
cd:16:0e:4a:c7:38:83:69:51:cc:e4:93:04:f0:b7:
47:8d:af:48:2a:a4:70:bf:ba:44:ed:62:d2:ba:fc:
bf:6f:31:e7:3a:89:e4:f0:a0:1b:33:0f:03:1b:f5:
85:08:e1:07:8e:5f:11:41:65:ed:a8:2e:cd:fb:f0:
cf:8b:86:8a:37:a7:09:10:45:9c:13:d1:2d:01:ff:
c9:7c:c3:08:e6:4c:e1:16:a7:ae:4a:6a:9b:d3:b8:
e0:09:d2:eb:68:00:fc:75:23:6a:bc:20:f1:c9:0a:
bb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:88:CD:27:A1:8F:FE:B8:4E:89:93:12:A4:74:80:DD:62:70:BD:B7
X509v3 Authority Key Identifier:
keyid:BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:13:b2:0f:c1:68:f1:b6:3b:0c:d9:36:ca:4a:e9:b9:8d:06:
69:4d:0a:8a:dd:41:d1:af:a1:37:98:6f:67:d9:a5:53:af:f3:
0c:e1:6a:ba:64:b8:84:70:60:30:bf:82:5e:bc:4e:60:30:ba:
e9:aa:00:e0:19:8f:f9:03:84:85:2e:b9:34:82:74:57:04:7f:
4e:82:e4:c2:67:9d:ab:cd:ab:6f:c2:2c:31:28:d8:92:19:09:
4c:5f:36:7d:20:3c:06:4a:f1:4a:13:d8:f7:95:56:0b:ce:05:
c5:76:ad:65:c4:8f:bb:85:b4:64:5e:15:94:e3:09:a9:63:7e:
0f:3e:1b:61:d0:57:a3:f3:46:50:0f:9c:2d:50:28:d6:73:b7:
6b:31:33:80:c1:ef:1a:89:cb:43:eb:f9:c3:5c:16:14:ed:2b:
cb:1e:92:ef:ac:fc:b7:9a:b0:0f:a8:49:1e:b6:79:e2:18:b5:
52:4e:9f:cb:e2:b4:2b:25:66:c1:ec:ea:79:fb:b7:fb:54:4b:
cf:a4:18:37:23:29:76:99:50:1d:4d:05:49:5e:21:f0:65:ce:
b2:0f:1b:59:61:7d:66:c3:a6:9a:b2:49:fb:aa:19:9b:df:a7:
e9:57:f0:c5:9a:9b:f6:c8:fa:07:37:b6:48:94:51:36:2b:32:
4f:d4:96:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:38 2025 by rpki-client