Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
File: 8mAhR5HPhJn8k68B96Q_XL6QKpg.mft (raw, json)
Hash identifier: tbOH4WryYhEaAzCCuB+k6tWJrK7nuIQqLrKwVSUb380=
Subject key identifier: 5B:5B:7E:97:F1:09:38:64:A0:4A:1F:E0:DF:D2:CC:98:AB:2E:D3:F9
Authority key identifier: F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
Certificate issuer: /CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Certificate serial: 0194BBCE98D1F22B6895A8035054EF4A75B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
Manifest number: 0D0F
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: 8mAhR5HPhJn8k68B96Q_XL6QKpg.crl (hash: PH6NcWspOzcaJJ6jbro8BOjZFpG9Dze9cJz/ix1xj8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:98:d1:f2:2b:68:95:a8:03:50:54:ef:4a:75:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=5b5b7e97f1093864a04a1fe0dfd2cc98ab2ed3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:e0:34:a7:d7:a2:15:10:98:9d:55:a6:c7:
e3:b1:9f:57:f5:12:c7:45:f9:00:c5:77:61:31:44:
06:3c:37:39:f5:7f:76:a9:fa:a7:c4:9f:8e:93:1d:
a9:78:00:85:37:8a:b3:b3:06:71:f6:2d:23:f5:df:
33:e2:cc:0c:ca:07:fc:8e:e9:50:57:63:b2:e9:13:
70:66:8f:b4:ef:b3:87:b4:ee:2c:3c:3b:d9:bf:06:
d6:31:38:1d:10:d6:b8:86:a4:1f:cf:a6:36:92:e5:
a3:90:b8:4f:85:5c:e7:38:eb:28:dd:81:9b:34:71:
e6:a2:d0:bc:91:23:ec:67:b0:a0:3d:97:98:64:82:
2e:f9:c6:03:9f:65:6d:75:d0:90:f4:ce:90:2d:fb:
6f:0b:4a:54:9b:4a:87:c3:cf:2d:cb:ef:ad:93:d1:
95:a0:f3:3f:bf:84:35:f4:b5:04:ce:7b:c4:3e:ca:
62:02:37:a8:16:33:f8:e8:f4:05:60:89:4e:6b:ef:
2c:29:5b:c3:bb:2c:be:8f:44:81:63:27:21:ef:c6:
1e:39:36:6c:b0:69:5e:cd:94:78:ee:a4:ba:81:59:
3d:09:39:c5:e5:d5:f8:af:74:39:28:4d:70:3c:8f:
d6:20:29:14:39:96:d7:ef:aa:98:20:02:85:b3:43:
5a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:7E:97:F1:09:38:64:A0:4A:1F:E0:DF:D2:CC:98:AB:2E:D3:F9
X509v3 Authority Key Identifier:
keyid:F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7e:65:21:29:35:d0:36:d7:19:2c:49:75:d3:f3:02:1b:4d:
39:e1:09:bc:d7:f7:0f:cc:d0:22:7c:03:43:45:9d:50:2c:7f:
dd:23:4a:65:65:72:fe:ad:4c:81:10:17:46:e8:40:64:d2:69:
7d:db:6c:c5:05:fa:eb:3f:fd:3d:6e:a8:4b:cd:a7:8c:17:fb:
bc:b3:25:7d:f9:7d:9e:25:03:18:f9:ba:7a:5f:ba:fa:89:d8:
29:e6:13:2c:4f:34:a3:bc:d7:a2:63:3d:ba:c5:4b:4d:05:69:
08:6e:ba:61:d3:61:69:ed:a9:9c:75:c6:a6:ba:ef:71:09:c1:
ef:1d:ad:29:6a:cd:31:a3:a0:ff:1d:a0:89:eb:cb:7f:01:c5:
ee:f1:bd:26:f7:90:b0:b4:d8:08:4f:1c:e6:17:42:0a:fd:63:
53:10:25:5b:58:30:46:95:01:e7:5b:dd:00:e9:2a:7f:b1:2c:
b7:6f:c3:56:ad:ca:83:22:41:99:a2:ef:75:67:d9:f3:36:b9:
5c:66:02:c6:27:e8:65:32:38:69:30:76:66:ca:ca:a5:b0:6e:
c8:8b:30:57:32:06:31:80:91:fa:65:76:ce:85:50:9f:d1:a2:
c5:98:de:94:3c:1e:de:86:40:94:84:77:c6:10:e3:98:d6:9f:
aa:84:f8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:29:39 2025 by rpki-client