Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
File: APfVbNN-MeClJfW7GluvX0meQG0.mft (raw, json)
Hash identifier: neeGqZq21/MUgmMZZe+Pr9WF9zzeIHrKyDFIqQZG4/I=
Subject key identifier: 7D:35:C3:4A:C7:87:A6:B0:10:02:92:FC:33:81:6B:EC:78:D7:F0:91
Authority key identifier: 00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
Certificate issuer: /CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Certificate serial: 0194BC7288E1F1931129D63E25AB61413F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
Manifest number: 137F
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: APfVbNN-MeClJfW7GluvX0meQG0.crl (hash: u5AYcj7Mp10zHjZHP6/s9lSyzd/ml88q5IbjPPQD2og=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:88:e1:f1:93:11:29:d6:3e:25:ab:61:41:3f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=7d35c34ac787a6b0100292fc33816bec78d7f091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:80:2f:23:85:8c:3d:0b:af:eb:8d:b6:58:e4:
ec:ba:07:a3:1b:e5:98:7e:d6:80:f7:3f:09:b3:15:
78:ee:5e:b3:74:c6:9d:25:98:95:ee:36:e6:0a:a9:
e8:6b:e9:77:a3:98:56:ef:d9:d0:92:3d:f1:74:32:
a0:d7:c5:37:49:4d:09:0d:07:ee:9f:6e:56:e5:32:
a9:99:28:b3:6c:21:89:a8:cf:c9:34:b5:94:a4:3c:
fc:48:8f:df:f2:f3:f6:1f:bc:8c:e3:5a:5e:c3:a6:
b5:db:43:f7:75:7f:aa:16:75:78:09:ea:7e:f5:9a:
da:a7:f2:10:63:ed:ef:5a:d9:0b:93:bf:97:0e:9a:
a5:d9:29:2f:8d:57:62:c1:0c:a1:de:04:e0:97:fd:
fc:83:58:46:ad:bb:b5:32:84:32:70:21:47:29:0a:
51:8d:93:1d:06:33:c2:95:fe:7a:2e:eb:08:8f:b3:
8f:73:71:30:01:ef:d4:ba:af:4e:5d:bf:3f:7d:b6:
7c:ae:e4:96:89:fa:50:da:e3:d6:de:7e:12:09:ed:
eb:72:c8:77:24:bf:6b:e2:0c:06:a1:54:95:6b:6e:
db:a4:da:10:83:1b:b4:da:37:86:1b:4d:b3:0b:7c:
29:df:07:63:3f:45:d0:03:6d:a6:a7:3f:fa:ca:1e:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:35:C3:4A:C7:87:A6:B0:10:02:92:FC:33:81:6B:EC:78:D7:F0:91
X509v3 Authority Key Identifier:
keyid:00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e0:dc:da:f2:76:34:c1:6b:d2:3e:34:fa:c9:f5:fc:3b:7c:
c4:79:b9:e7:02:c9:e6:bb:28:74:7e:b5:71:f7:2a:93:3b:a7:
9a:5e:ad:06:dd:57:7c:30:a0:b0:89:87:71:96:58:bd:21:ad:
b6:59:ba:3e:09:da:9b:8c:d3:64:d5:51:e7:1d:05:1c:dc:3f:
e2:b8:8f:ee:73:a4:16:43:8f:8a:5b:c3:9f:c5:7e:55:2b:c8:
b2:bd:8f:ba:ce:ae:b6:cf:28:74:99:84:6b:ce:60:2f:da:62:
7f:9e:f4:12:c3:e6:5a:19:32:f2:01:89:8b:5f:e1:09:a0:b5:
b0:d1:a5:f1:e5:99:02:d3:e9:ad:fe:a5:c0:76:41:15:44:90:
62:72:80:96:5d:29:b2:95:c4:3b:42:db:48:77:d6:62:24:e4:
7e:b0:6f:d0:7f:3f:93:78:dd:42:01:a0:a7:98:81:59:81:fa:
46:e7:24:65:62:a4:3b:40:ad:5f:09:af:ca:65:95:26:2b:ab:
2f:57:d9:10:5c:f4:7b:e9:22:2b:1b:4a:24:ce:fa:85:33:65:
7f:50:4f:d0:d3:af:2c:43:92:3e:68:55:b8:ed:57:6f:50:53:
27:9f:a4:a8:a6:15:4f:71:a7:6b:31:3b:53:f3:16:22:4e:a5:
d6:0f:c9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:51 2025 by rpki-client