Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier: OFfhYuo1ADKoWaJgTCYxZwZhPlxky5Co+ERrDrrypKM=
Subject key identifier: 5F:4E:C6:60:83:11:CA:41:A4:6D:E0:81:59:52:FA:58:08:50:08:9B
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 0194BC3C09C13AAD66ABF43720EC6E2D2EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: fGPxi6GSPvjhh9BPUu0fa8ES93lSmV1rIbgtEBlf7nQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:09:c1:3a:ad:66:ab:f4:37:20:ec:6e:2d:2e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=5f4ec6608311ca41a46de0815952fa580850089b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:3d:97:f3:58:cf:81:42:96:73:89:1e:75:
5b:b4:a8:dd:fe:0c:35:65:d7:8e:a8:2e:5a:36:7b:
4f:b6:53:f4:0a:c8:69:16:0c:26:1d:c3:9d:d4:9d:
90:e8:c0:30:12:3d:a3:37:8f:27:fa:11:82:e5:83:
98:75:ac:8f:ba:ed:99:dc:3d:f9:e6:2b:c7:a1:4d:
9d:51:9d:47:82:06:51:e2:96:2e:48:ee:bd:cb:fc:
e9:9c:db:7d:9b:eb:b4:a6:e6:4d:03:7b:24:c8:0c:
a3:f1:6b:58:8c:09:bd:43:33:09:d7:c8:c9:c3:56:
e6:60:45:1a:75:e8:ae:0a:a9:c6:91:53:1b:8e:fb:
a9:e9:d3:84:67:37:8b:91:7f:d7:13:44:e9:65:a0:
86:72:35:e9:cf:c5:9c:42:e3:1a:e8:ee:2c:33:7b:
e4:e1:72:0c:dc:7b:17:d0:04:49:0d:69:f8:4b:dc:
1b:88:60:00:2d:b6:f6:2c:21:60:9b:cc:2c:8f:f8:
db:91:04:4f:36:3c:af:56:f4:5c:11:c1:f4:f1:49:
a2:08:ed:bb:02:fa:c2:e9:61:c2:d4:8b:d5:04:f4:
65:42:f7:29:eb:8a:88:64:c3:36:41:43:01:b1:b2:
d0:c0:9e:c3:85:9d:2b:34:6c:c3:ee:23:61:e6:84:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:C6:60:83:11:CA:41:A4:6D:E0:81:59:52:FA:58:08:50:08:9B
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b4:67:69:4c:03:48:af:d2:45:99:19:c2:c4:d7:e0:63:63:
77:bf:93:42:16:0c:25:a0:e5:52:a5:e1:64:26:41:97:6b:be:
f2:a3:30:e3:99:25:ad:23:81:86:2a:6d:b6:eb:97:b2:ed:39:
56:2d:d2:a3:48:c5:9e:ed:86:f8:0f:41:dc:ff:c9:60:25:4a:
cc:37:97:d7:40:d1:f6:a0:c2:b7:fd:6e:44:dd:66:97:78:5b:
c9:69:e8:10:10:bf:cb:a9:ca:4e:14:d4:72:00:5d:78:bf:1e:
3b:8f:9d:d6:3a:ca:9a:cd:7a:4b:85:6a:bf:80:be:d9:ab:6c:
97:49:94:45:41:2c:51:b5:15:44:b0:ee:d3:06:d1:f2:ca:e1:
4d:67:2b:2c:dc:95:7a:e9:8a:9f:20:4f:0f:97:da:36:7d:59:
bb:8e:b6:6a:ba:ea:87:31:54:72:98:f7:66:80:3a:eb:63:c0:
1a:f7:8e:09:53:4e:a6:fe:38:c7:29:ef:89:66:28:c5:52:27:
78:72:cb:6d:10:33:da:07:52:1d:5b:74:ca:6d:e9:2d:79:8c:
2f:cb:a5:00:eb:4d:5d:0e:91:96:5d:fb:2e:da:34:b6:d7:82:
78:a4:3a:23:1a:e9:62:69:57:92:68:b7:60:44:bf:70:bf:ad:
3f:93:da:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:06 2025 by rpki-client