Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
File: Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft (raw, json)
Hash identifier: hc+QhLsLIMUvXcWqt9zNUjRQyQ2o9BRBDojjR9STFy8=
Subject key identifier: 40:CC:1B:49:FD:8D:37:E8:63:AB:D8:39:14:E4:17:AF:05:F1:E4:95
Authority key identifier: 16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
Certificate issuer: /CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Certificate serial: 0194BC3C6DD3B0383A6BDF901228F4F2B851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl (hash: EKM/+nNaWAiEhPNUpF+r0kMV2VuINZrPezeokIFgmxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6d:d3:b0:38:3a:6b:df:90:12:28:f4:f2:b8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=40cc1b49fd8d37e863abd83914e417af05f1e495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:5a:91:fa:68:0f:b3:4d:e0:6f:e0:60:73:
c2:69:e1:28:bb:0f:72:c5:3f:26:aa:02:96:d5:9f:
f8:4a:74:cc:76:13:c6:3c:8a:0f:06:9c:cd:fe:b4:
2c:74:f9:d6:fc:1d:d5:08:f9:87:04:ee:79:4c:67:
cf:f6:ee:5a:0e:94:a8:cc:45:6d:3c:64:4b:7c:8a:
9e:72:8c:6c:9c:61:28:4a:82:49:21:03:13:cc:b8:
f4:8e:e9:0c:e2:1d:5d:2f:7b:32:c5:4d:4f:d4:64:
68:63:b8:75:ca:af:42:f1:e7:55:37:d1:df:a2:31:
43:2c:9b:95:c2:2a:78:91:b8:98:26:89:34:8f:e0:
b5:71:2a:93:b2:34:2f:4c:ce:8f:9b:a9:85:90:25:
5d:9e:49:49:6e:f6:65:69:27:e2:b9:4a:4f:9f:3d:
28:6c:48:59:86:7a:ca:59:46:a6:96:d2:e5:51:50:
58:08:8c:d9:bb:40:c9:a6:ca:a8:63:2b:f3:88:8a:
80:8f:10:dd:ac:92:d1:59:77:e6:61:31:20:d9:7c:
60:56:b9:c8:43:c5:1a:4a:4c:5e:d5:4b:64:15:50:
08:e3:e0:c4:08:2b:e0:b9:0a:07:93:2d:6a:9b:86:
fc:c4:df:9d:07:7e:ba:02:13:f1:01:65:a2:e4:a1:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CC:1B:49:FD:8D:37:E8:63:AB:D8:39:14:E4:17:AF:05:F1:E4:95
X509v3 Authority Key Identifier:
keyid:16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d9:9c:e0:45:dc:70:0f:ba:6f:b6:e3:3f:db:75:5b:3c:06:
36:7d:e9:e9:16:5b:04:14:ee:e6:df:74:a1:8f:38:2b:fc:ed:
52:b8:60:29:19:0a:28:bf:b7:ee:4b:56:38:43:43:d7:bf:7c:
0e:b4:dd:32:f0:15:ee:05:60:19:38:c9:69:f8:39:70:61:82:
52:4a:bc:46:6b:64:01:d7:77:1b:68:91:91:aa:46:b4:bb:8b:
b6:d4:91:dd:fb:60:13:21:42:92:33:c9:61:4d:f6:3a:4c:99:
c0:aa:c8:31:c9:ba:13:ef:07:3f:ca:62:b6:41:60:2a:0e:6e:
52:54:ab:3a:52:56:53:45:71:3d:d3:f7:ac:36:6b:bd:35:6a:
24:7e:49:ad:91:ba:80:ae:91:80:8f:15:1e:c8:4a:f7:e7:da:
68:d3:dc:46:3b:79:ad:cc:fb:ae:12:8b:ee:0b:7c:ad:7a:c0:
f9:32:d2:82:16:6a:54:c9:cb:c1:49:28:3c:8e:2f:5b:d7:36:
f0:2c:4e:0c:eb:02:fd:d6:9f:02:15:ed:cc:ad:8b:66:d9:27:
0c:26:08:ce:01:be:cc:63:8f:31:c2:ae:33:a6:37:45:f4:a3:
66:77:09:04:15:b2:02:ec:a0:08:6d:12:64:46:9e:bf:d9:8b:
10:92:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:15:36 2025 by rpki-client