Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier: qMEyn8KzJFg+k/ZufDAwe7nH9hr1QKECTWNlRVN2ad4=
Subject key identifier: 2B:AA:2B:D1:4B:70:B9:C0:B0:EA:68:3D:4E:E1:85:89:0F:3C:2A:8F
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer: /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial: 0194BC7285266025A9F9979B4BF859CA23A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number: 0A97
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: 9+eU3PB1bn9WjomIJ9A3IoBETJHvS3cAmlXILzmFZ/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:85:26:60:25:a9:f9:97:9b:4b:f8:59:ca:23:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=2baa2bd14b70b9c0b0ea683d4ee185890f3c2a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:a7:d7:a3:08:b4:c0:8b:d4:7d:8f:b0:d7:
16:35:b6:95:43:12:1c:df:57:5c:12:ac:af:b6:23:
0d:1a:33:11:45:55:fd:dd:80:35:a5:41:4e:02:58:
65:4a:e7:57:80:d6:5c:4b:a0:fe:29:5e:22:f2:62:
d5:93:2d:a4:b0:e8:07:d0:7c:01:be:af:4e:81:32:
a3:45:6a:3b:25:62:94:24:d4:d8:74:5d:e3:18:4f:
ad:16:d7:47:62:62:be:56:e4:09:3c:f6:6f:fb:dd:
e6:19:e6:07:c0:14:c2:45:e5:79:7b:50:a6:e2:45:
3c:13:74:17:1c:5d:2b:c3:04:f9:04:03:87:03:fc:
b3:ac:3a:05:89:3a:a1:0b:93:d0:ab:56:09:65:04:
3f:a0:94:4f:e0:7c:7b:1a:9d:fc:9c:63:5a:12:e2:
ca:3a:50:21:b1:86:55:37:83:dc:af:94:a2:ba:25:
ba:5c:a2:23:8a:cd:0a:68:2b:3c:d1:b1:34:b8:5c:
48:b4:a5:dd:dd:40:10:21:5f:3c:f2:13:fa:fb:a3:
5a:97:98:8f:6d:70:72:42:e4:e8:78:b6:f7:75:e0:
e8:aa:76:48:e6:c2:50:2b:3b:a2:52:b5:cc:ae:c0:
b9:44:96:2d:4c:7b:56:7b:d3:2c:00:b8:7d:2b:c3:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AA:2B:D1:4B:70:B9:C0:B0:EA:68:3D:4E:E1:85:89:0F:3C:2A:8F
X509v3 Authority Key Identifier:
keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:9f:13:64:5b:10:c7:18:ab:b5:5f:eb:76:68:e0:36:2f:42:
9f:9a:1b:41:80:9e:a4:8f:45:ac:a8:c6:40:ad:ae:f7:e0:c3:
90:31:51:67:ba:d1:be:e1:a0:b6:10:f0:f7:9f:4d:51:da:95:
5d:9e:a1:d8:60:85:7b:19:0f:44:be:ff:6c:1b:e2:bd:b5:75:
e8:bb:fe:c3:59:cf:dc:ca:dc:9a:21:96:9f:04:93:d6:e3:9b:
f3:4a:3c:50:6f:bd:e3:ff:6e:dd:f5:81:cd:d9:7c:18:db:04:
6b:a7:41:91:62:a1:d4:66:53:6d:d8:53:88:d5:dc:25:88:91:
99:50:62:87:69:f9:c9:c9:ad:f2:30:84:60:47:8d:cd:48:f1:
ff:42:eb:33:a8:7a:6f:ec:b5:49:60:26:60:67:ef:f8:ac:35:
41:c6:06:d4:2a:cc:b4:b0:dc:e6:6c:5a:13:bd:2b:7d:34:54:
0f:ac:75:96:d0:6a:3a:4e:c1:b1:19:41:b9:fe:fd:f4:b3:18:
02:12:b9:1d:f5:ae:d8:ec:63:4e:65:ce:25:5c:1e:71:4f:c6:
34:af:95:21:c4:ad:24:94:76:f4:55:7b:f3:4d:d9:32:3b:44:
ce:e6:e3:7b:f4:d2:56:85:aa:e5:ab:9f:a2:ea:b9:6d:70:b0:
4d:7f:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:59:49 2025 by rpki-client