Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
File: CeVm4OteXiEQflX8lg-x7iGHRHQ.mft (raw, json)
Hash identifier: QGZ9t9c/AFnguWxjGfPjYNPhFGX/4XjX4SmG5mHNwAg=
Subject key identifier: 21:62:A6:7C:16:75:C1:5B:16:F4:C5:58:A1:4A:85:E2:47:A2:D8:9A
Authority key identifier: 09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74
Certificate issuer: /CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
Certificate serial: 0194BBCDF96318C51F1D830BDA638F91A180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
Manifest number: 1271
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: CeVm4OteXiEQflX8lg-x7iGHRHQ.crl (hash: A2bhi9tbT/oe6s0WrHqAtoaS0UiJdHU1Mhn3INaMRlQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f9:63:18:c5:1f:1d:83:0b:da:63:8f:91:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=2162a67c1675c15b16f4c558a14a85e247a2d89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1e:64:d7:7c:68:f6:cf:03:e1:02:6f:54:9f:
c0:4e:57:8d:e0:25:55:15:9d:a0:5f:75:8c:15:9a:
0f:bd:dc:af:b2:ee:bb:20:c0:cc:f7:f0:07:5f:4c:
c3:23:b5:b4:2c:8e:74:5c:81:5b:43:cc:3f:00:4c:
27:c0:f6:3f:80:29:0f:c0:2d:bd:68:b8:03:1d:71:
ad:24:de:45:9c:0a:c2:f1:6d:84:56:8a:6f:bb:20:
10:92:65:a8:bd:d3:c0:7f:4a:6d:f1:9f:b1:6d:d0:
4d:78:04:d6:0a:50:9c:1f:03:fb:e0:83:21:19:67:
33:1e:e5:36:d8:fa:b3:60:bd:46:4b:5d:e6:c3:f4:
80:65:91:1f:ac:64:71:d8:a4:ce:15:eb:ea:4d:ac:
2c:ef:c7:13:cb:60:f0:a7:9c:07:5a:9a:28:af:74:
36:64:79:82:a7:cc:7d:96:c9:d3:7f:22:49:2c:6e:
e4:57:41:18:69:de:ed:69:0e:2c:53:41:fe:fd:9d:
c2:63:e6:39:37:7d:0d:41:72:47:df:da:b4:bb:67:
6e:d0:7d:0b:97:2a:c5:a6:de:18:42:86:a3:93:2a:
e4:c5:33:b4:1b:40:1e:00:13:b2:6f:46:38:10:8b:
4a:0b:1d:3e:9f:b1:a0:c6:88:e9:dc:f8:53:96:0f:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:62:A6:7C:16:75:C1:5B:16:F4:C5:58:A1:4A:85:E2:47:A2:D8:9A
X509v3 Authority Key Identifier:
keyid:09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:99:c4:f2:fb:23:e4:76:ea:c6:67:07:26:20:07:00:df:97:
fe:fc:ab:52:81:70:97:40:35:9a:a2:6d:fa:19:e7:c9:97:67:
d8:f4:31:9e:ad:61:41:a0:a7:5d:ba:e3:d7:e3:16:c6:41:57:
72:1e:95:d5:e2:55:a9:2a:b0:bf:46:a7:7b:f4:c4:12:68:cb:
5d:18:28:39:e8:07:d6:93:57:fa:9d:95:a3:37:47:92:5b:98:
45:84:40:7b:50:4b:35:13:a3:aa:27:ad:06:7b:8e:2e:ef:ec:
81:bf:70:31:45:b6:07:af:22:e7:65:27:4c:e1:40:26:cc:1d:
9a:48:9f:b3:32:2b:cf:77:70:3b:69:0c:be:04:1d:70:57:48:
03:70:0c:d3:35:66:66:77:a4:b6:bf:cb:79:83:ca:62:40:bc:
97:fc:64:74:ca:87:49:cc:b6:f7:f6:87:9e:c4:e4:bc:4d:c9:
2a:5c:de:cc:f2:34:3d:d6:df:0a:72:8a:1b:c0:bb:55:95:d8:
79:bc:cd:c8:0d:54:89:93:63:a2:33:90:3f:c2:83:c1:f8:fa:
71:d9:13:47:01:a9:73:f2:ff:69:81:6b:13:ba:cb:a4:bd:fd:
6c:0c:ce:e1:08:2b:c4:97:9c:fc:85:ed:0e:ec:25:ce:14:73:
4e:78:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:23 2025 by rpki-client