Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json)
Hash identifier: 4tVohxHdoUU+/F0ZmuU7Yjyjz+yP6ebrj/ThWZVr8LM=
Subject key identifier: 1E:56:3F:A1:79:E0:A9:0F:4F:88:2D:53:0F:74:81:D4:FB:FF:F0:0E
Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Certificate serial: 0194BBCE7D62BD2DC2B16A656C071B9E4B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: Vc5rtnHzSuxP/lpyudsvlqqwWhHaOh0Y2mBi3Tj6fn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7d:62:bd:2d:c2:b1:6a:65:6c:07:1b:9e:4b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=1e563fa179e0a90f4f882d530f7481d4fbfff00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:e4:62:98:f1:54:16:82:ad:90:64:55:95:
ae:07:d1:c0:ac:77:15:20:ef:02:fb:d5:92:65:86:
c1:d7:7e:7e:e3:b5:f3:77:00:17:e3:2a:54:ac:17:
29:4d:0a:36:e1:44:84:c2:69:2a:eb:d4:bc:75:93:
1a:b0:b6:21:06:ec:90:62:39:7b:8e:c6:51:a1:c8:
37:a3:1d:45:35:d4:e1:50:14:66:1f:66:63:a6:51:
07:49:b0:bf:ae:aa:40:63:89:3c:f8:d4:90:87:7d:
98:e7:f1:1b:f2:41:e3:a4:9e:49:57:76:98:48:61:
c2:ea:e4:f2:1b:df:68:4b:28:c0:db:14:96:27:8f:
60:61:b4:d8:a4:e7:a8:d9:20:42:3e:92:59:66:6d:
d9:e2:86:2e:10:a3:af:db:2d:b2:c7:f9:7d:03:61:
28:b2:c9:c8:3e:55:d9:52:13:df:4e:79:e2:13:19:
aa:de:10:58:af:ff:14:b6:0d:fe:e9:31:4e:0c:10:
3c:70:06:d7:8a:6d:20:c6:29:3c:c2:b0:62:c6:34:
45:12:ab:f4:34:44:34:47:6a:ea:65:60:21:88:eb:
5a:6d:c0:80:20:e9:36:90:78:a7:a3:a6:35:d2:b7:
0d:dc:ab:fb:52:54:51:f1:7a:ac:46:ad:f1:56:09:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:56:3F:A1:79:E0:A9:0F:4F:88:2D:53:0F:74:81:D4:FB:FF:F0:0E
X509v3 Authority Key Identifier:
keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:78:07:9c:04:5a:0e:fd:48:49:05:cb:ea:76:f5:fd:bb:29:
df:2e:a3:71:5f:96:59:6d:fa:c1:56:de:1f:dc:74:6d:21:3b:
62:a2:f7:1a:e2:e9:a1:ad:aa:68:c2:41:26:79:41:30:a1:6e:
88:86:e5:75:d7:f6:64:e8:0d:5b:cf:7c:b0:0c:11:c6:d2:45:
dd:6f:35:b0:98:a6:13:e0:15:5c:ec:4c:17:a6:53:2b:6d:29:
82:ee:02:24:d7:31:54:e7:a1:36:45:5b:63:e4:d9:02:e4:b4:
c2:a0:85:e0:af:f1:9d:57:6a:b9:a6:2c:8f:1f:3c:c2:dd:d3:
43:a4:ec:14:0e:c8:d1:77:93:ab:c4:0a:f2:2f:37:8e:8e:79:
28:c4:22:41:e8:99:c7:aa:03:5c:b9:b0:ac:23:3d:1b:28:84:
0b:67:4e:ad:a1:cb:7f:58:e1:0a:9e:e6:e0:d3:77:85:e3:a3:
a8:a9:d8:f6:3d:3e:fb:d2:61:7a:68:24:77:f7:22:d5:5a:30:
7a:23:34:a6:13:17:27:57:69:97:ca:14:18:13:cf:07:85:2f:
15:3e:6f:ec:09:dc:c5:98:dc:b9:e4:70:16:16:34:76:65:47:
9a:cc:f6:07:94:50:9f:ef:93:48:ca:15:65:dc:9f:a2:f1:21:
3e:fd:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:19 2025 by rpki-client