Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
File: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft (raw, json)
Hash identifier: SjJ+HX5p9NqW3rqOGoZuIFah9Kt0w5A0qvIk05UOfr8=
Subject key identifier: 8A:9D:54:18:37:AD:56:E8:4A:11:BC:61:0C:9B:EE:93:73:18:CE:2E
Authority key identifier: EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
Certificate issuer: /CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Certificate serial: 0194BBCE3A48627AAD57E43E9C9DE9759071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl (hash: voSY/e88n8I/V2BGIK23BprHZMAumAWS26kFxbL40g0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3a:48:62:7a:ad:57:e4:3e:9c:9d:e9:75:90:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=8a9d541837ad56e84a11bc610c9bee937318ce2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5c:52:13:af:63:7f:8c:16:76:17:9b:aa:f9:
e2:9a:b4:24:38:46:71:32:c5:a9:6e:7a:60:2a:85:
c5:d9:21:bd:fe:0d:97:86:4a:a7:94:62:0c:b4:b9:
4b:73:5b:b4:11:3b:97:60:53:5f:2e:3c:a9:ab:e3:
cc:6f:39:3f:c3:66:d5:fa:a9:ad:fa:1d:6a:79:2c:
04:f9:fb:50:3e:96:3b:bc:89:41:9d:34:c5:05:c3:
ec:48:d6:e9:69:35:44:6d:aa:ca:6a:4a:05:e2:83:
c4:43:00:76:af:13:8b:cf:6e:90:52:e5:a8:e3:c8:
c4:7f:9e:99:91:09:7d:c6:9b:ed:43:0c:81:52:37:
44:99:2e:5f:a2:ed:3e:f8:22:32:85:6b:73:91:31:
f4:a7:15:e0:32:15:75:af:d4:9f:f9:ea:1a:63:27:
de:21:0d:7a:f0:b7:5c:c1:fe:82:17:29:06:1a:36:
85:70:39:b4:3d:8e:da:71:1a:02:7f:6b:b4:95:1d:
3d:88:bc:c6:6e:93:f3:30:e0:7b:94:91:d1:9c:1a:
a1:45:86:65:5b:0c:2c:2c:a6:e0:ab:c6:65:23:6d:
01:d2:74:28:f5:6b:f4:5e:db:34:39:05:14:da:d8:
60:de:b7:bd:d2:f3:ec:12:8c:30:1b:1a:38:42:08:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9D:54:18:37:AD:56:E8:4A:11:BC:61:0C:9B:EE:93:73:18:CE:2E
X509v3 Authority Key Identifier:
keyid:EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6b:2a:2a:f4:88:39:08:fb:70:2b:2c:44:d1:8e:71:6b:6d:
4e:5e:3b:ba:48:64:46:7e:2f:66:9c:48:94:cb:98:80:92:89:
c5:22:ff:16:78:e9:ed:84:d0:1d:15:4d:6e:f3:b9:09:ca:5e:
63:96:16:1c:2a:d1:70:ba:31:73:b3:45:72:ff:74:d3:50:95:
30:64:cb:eb:7d:02:64:7c:b7:0a:27:4f:bb:7e:b1:55:a3:8f:
2e:55:53:e4:46:ea:3c:6c:d2:a9:e5:e1:31:64:9a:5d:27:8f:
0b:54:11:08:8f:f5:38:d6:48:b5:5d:20:5e:14:e1:8e:9e:59:
c9:fc:eb:9e:a3:99:42:59:89:35:40:2f:78:17:18:96:b8:32:
b9:e7:61:22:15:40:0b:9b:ec:4f:22:59:3f:b8:17:9a:7b:13:
85:97:93:ea:6e:5e:d6:d9:f2:63:1f:ef:78:c9:73:6b:69:94:
d0:68:c2:da:8d:24:ca:b4:ba:5a:37:c9:ff:cc:6d:cd:0b:05:
d5:78:a6:a7:95:66:6a:24:8e:9f:67:7e:3e:23:2f:5b:10:cc:
42:06:a4:4b:51:ba:16:de:af:48:f4:95:91:e9:9c:36:ba:c3:
e0:b3:16:32:08:a7:c0:77:c5:b5:a7:eb:ea:89:a5:9f:a6:3f:
8e:27:9f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:27 2025 by rpki-client