Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
File: Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft (raw, json)
Hash identifier: JrrxzkFn3m4E46HHEpREWkm6L9xjF+d6y555CxvNTcg=
Subject key identifier: 28:E6:9E:9F:B9:CE:5F:B7:70:19:FB:62:2A:FF:21:6E:35:BD:F7:9B
Authority key identifier: 46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99
Certificate issuer: /CN=466cfa4f8847f1561b55971670165c0e68b62799
Certificate serial: 0194BCA979BB78023E39789E1B40F855FC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
Manifest number: 0877
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl (hash: rtLfznW+k1bXHW9lprLfKAblJr8G2YP7xSiUTf1U7mY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:79:bb:78:02:3e:39:78:9e:1b:40:f8:55:fc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=466cfa4f8847f1561b55971670165c0e68b62799
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=28e69e9fb9ce5fb77019fb622aff216e35bdf79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:4c:12:09:2c:03:ef:08:08:46:c2:6d:3c:
54:b6:d0:17:d7:b7:2a:5d:78:7e:c9:8e:f0:f0:f9:
e8:95:50:13:98:be:65:38:2a:0a:15:00:40:0e:7f:
40:1e:54:a5:af:2c:c7:b5:94:74:79:f4:11:77:79:
65:4b:d1:a7:b8:e6:08:92:6f:b1:13:80:e6:be:3b:
15:60:38:0e:f9:82:1a:3b:6d:d4:56:ed:98:74:e6:
cf:72:e1:7a:50:67:1f:79:02:93:60:6a:79:f3:3d:
91:fc:84:92:9e:b7:70:59:06:78:9e:00:87:d2:d3:
72:fa:4e:1e:1c:67:16:06:66:9c:0a:fe:11:5a:14:
62:63:f0:c4:a5:09:1b:5e:65:97:0a:7a:12:62:ca:
5e:33:a1:3f:c7:ca:44:c8:6d:de:8c:b1:2b:80:fe:
9e:c8:01:a8:92:84:4f:b2:71:a5:d0:bf:14:83:bc:
cb:95:db:c6:9f:5d:84:3c:c4:00:ba:26:d9:0a:11:
f0:e5:39:68:35:49:77:02:a8:fb:be:d3:18:60:91:
fb:8f:ae:a4:cf:d0:e1:9f:ae:e6:2a:60:0c:ae:b8:
f4:68:2c:19:72:34:67:29:04:61:31:51:7b:1b:77:
de:50:f6:b6:23:0a:a4:8c:34:b1:93:ab:8a:21:03:
99:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E6:9E:9F:B9:CE:5F:B7:70:19:FB:62:2A:FF:21:6E:35:BD:F7:9B
X509v3 Authority Key Identifier:
keyid:46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:80:68:e2:7e:7f:bd:56:b7:d3:2d:fd:20:25:d7:12:17:87:
25:5f:71:3b:22:df:56:5b:c3:f8:76:2c:7d:47:92:d2:94:c1:
7a:bf:3e:7d:32:c8:0d:aa:7c:e8:6a:29:63:b6:5d:45:26:2f:
e2:a0:0b:98:5d:9b:59:6f:18:b4:b1:4d:ed:7d:d0:97:f9:8f:
8f:a9:36:90:70:4f:90:ce:d9:1d:39:f7:97:e7:53:0e:51:1c:
43:8a:4e:d0:e0:a3:b7:3e:33:83:2d:1f:75:c6:a2:b2:4e:36:
a8:2e:8b:c9:8c:1d:f3:fa:4d:72:95:bd:f7:34:a0:ab:ca:8a:
3e:7d:6b:c9:e1:c7:83:ea:63:e4:b6:e1:e2:d6:ac:be:d8:26:
21:95:f8:04:ee:d2:e4:cc:ae:8b:49:21:4d:89:b0:49:72:57:
f4:96:17:18:f5:6a:7a:f4:ef:d3:aa:37:6b:6e:54:3f:6f:56:
1b:46:01:6b:9a:7c:73:02:ee:3d:69:11:81:5a:95:21:78:d0:
b8:57:ed:dd:b8:fd:f5:66:eb:5c:fb:2f:bd:0d:2d:71:bf:9d:
86:84:04:1f:27:76:b5:42:8e:90:97:6c:7c:22:c0:4d:6d:7d:
e6:8d:7a:94:aa:f7:bc:92:d9:bb:d3:bb:fb:c3:02:04:56:c4:
84:38:74:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:16:48 2025 by rpki-client