Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
File: 7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json)
Hash identifier: X5uyNoosK2YCrtDNUG1klz/kX+TFcMTTyg1kALU+2Q8=
Subject key identifier: B8:F1:74:7A:74:A9:19:1B:6E:F8:3F:F1:BD:EB:A0:97:26:57:D0:DB
Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Certificate issuer: /CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Certificate serial: 0194BC7288DDFE2B35EF2F682E762C81D50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
Manifest number: 042F
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: NITG3Tn9+zV2U0Om+0Wi5tbL8Aro0BytxKwf79AtAbg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:88:dd:fe:2b:35:ef:2f:68:2e:76:2c:81:d5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=b8f1747a74a9191b6ef83ff1bdeba0972657d0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:d1:44:c7:b7:61:82:81:51:05:29:c0:9b:
b2:da:73:51:07:6b:69:1d:03:32:da:dc:3d:29:8a:
f1:25:28:80:a0:65:27:9b:1e:32:91:89:10:42:f9:
82:5c:62:3c:22:a0:c0:61:85:3f:1e:24:f9:ae:17:
f8:ce:39:c8:c8:e1:85:de:87:c2:4c:30:f6:8c:d6:
06:a6:35:8b:74:b2:f9:4b:e1:2f:fc:df:79:61:58:
72:a5:0a:04:d9:95:b2:60:77:1a:ef:b0:94:34:93:
0c:ce:8c:85:8f:ad:82:33:bb:38:9c:89:e6:9e:b1:
c8:e8:55:ef:58:a2:d4:c2:94:4c:78:12:37:8f:26:
8d:a4:e5:39:4a:10:a1:fc:e1:ca:73:10:bd:99:bf:
08:6d:45:88:9d:23:55:9a:9b:26:0c:b9:9a:a7:b9:
0b:f8:9e:75:2b:79:dc:b3:a3:d5:12:bf:b6:96:3f:
f2:79:9e:7d:aa:26:43:4a:c1:4e:d1:25:20:2b:97:
48:1e:6c:f0:2d:9c:e7:66:5a:8f:96:b9:89:3c:c9:
6c:42:44:0b:aa:6e:d1:b9:4e:0b:e0:4a:a3:e4:c4:
d4:d3:2e:9f:82:02:d1:f9:6a:c9:e1:7e:92:85:29:
c0:0d:b8:73:62:b6:07:a8:d8:5e:55:1a:5d:ad:d8:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F1:74:7A:74:A9:19:1B:6E:F8:3F:F1:BD:EB:A0:97:26:57:D0:DB
X509v3 Authority Key Identifier:
keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:60:68:ac:8e:4f:8e:dc:80:7c:7d:46:5c:84:73:1a:21:54:
7b:60:5a:29:0c:fa:d2:bd:3f:1a:d8:24:a4:e1:f5:07:db:4e:
00:bd:83:96:01:64:9e:bc:94:48:57:c1:ff:bb:27:d7:e7:5c:
56:80:54:05:cc:7d:2a:09:4e:b3:09:43:3f:07:02:3f:30:f0:
1a:22:50:63:cd:39:9c:8e:71:a1:d3:57:d5:f4:e2:0d:65:e3:
e7:a0:24:66:26:f1:fd:89:ba:88:ed:14:c9:59:87:a9:db:91:
5a:4c:2d:23:65:ef:ba:f1:08:ac:11:3a:f7:9d:c9:c3:ca:30:
2e:45:4a:14:42:15:24:d8:d1:96:95:f1:d4:d7:bf:fb:ce:6c:
ed:3b:4a:55:56:b8:7d:89:ec:9a:85:ee:b5:1a:8f:66:6e:7b:
67:3e:14:63:8d:6e:09:99:94:98:45:ac:bc:c9:ea:55:f6:f7:
5e:61:4f:42:a1:58:2a:36:98:89:39:0a:87:c5:76:fa:4e:26:
1f:56:43:76:18:64:4d:2e:1f:af:1c:41:ce:63:9e:ed:7c:2f:
ca:ac:e9:ab:c3:b6:a8:d0:ea:77:5b:dd:69:c1:9a:db:df:22:
c1:60:4e:02:0d:8e:6c:17:ec:8f:b9:99:93:bb:2c:62:da:dd:
49:db:80:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:28 2025 by rpki-client