Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier: mtkFY32ghz8ItPGR4msB7GJNM8mTUg9koYYfWn4bgGE=
Subject key identifier: 9C:82:6D:47:0B:7F:53:9B:1B:7B:51:E7:1C:F7:26:6D:45:04:34:E3
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial: 0194BBCE9FFD8DC43FB745AF9C86219AAB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: hKdkgI+uSbF+skELmVpQmxoHD1u906tMF4nYm5QPX28=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9f:fd:8d:c4:3f:b7:45:af:9c:86:21:9a:ab:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=9c826d470b7f539b1b7b51e71cf7266d450434e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:09:8b:e7:63:5c:5c:2f:5b:61:39:75:a4:
89:bf:37:1d:6b:88:17:91:cb:93:5e:53:d2:f3:18:
33:df:bd:1c:3e:c1:49:40:5c:ae:91:6a:d7:93:28:
6d:aa:1b:ca:ed:8e:2c:51:2c:2a:b1:4f:e3:ac:a8:
8d:80:62:2b:70:c6:28:5c:2d:da:6f:7c:47:c8:95:
cb:69:9a:bf:fa:88:37:68:1e:64:61:24:19:70:c5:
b9:68:7a:b2:8d:9c:48:bc:1f:a5:52:03:d5:43:f1:
06:f8:40:84:db:a4:45:d6:5c:54:fe:7d:e8:2d:b2:
0c:1a:23:73:08:a5:1a:b6:93:07:f8:bd:8f:c6:8b:
7c:13:2c:6a:b4:32:0e:d9:b5:32:ac:84:67:05:f0:
a5:d7:9a:0f:e3:2d:8a:4f:22:e9:3f:65:02:40:a8:
ef:80:86:8e:40:0d:0b:a7:29:8a:77:58:5b:1e:02:
64:7c:58:33:d5:26:a7:56:55:14:c5:5f:b9:3a:94:
41:1d:23:b7:ab:8d:f2:c4:ef:45:7c:8d:da:f7:62:
f2:70:88:44:e1:bd:66:af:22:57:68:56:19:83:a3:
ea:55:ab:3e:db:58:c2:08:e9:4d:5f:65:08:a0:4e:
34:14:ce:ac:22:dc:73:d8:34:48:fb:9e:5d:89:82:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:82:6D:47:0B:7F:53:9B:1B:7B:51:E7:1C:F7:26:6D:45:04:34:E3
X509v3 Authority Key Identifier:
keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:d6:f3:49:74:43:3a:2e:42:7e:7e:9d:d0:40:be:b9:b8:65:
f1:fa:c5:5c:d9:75:2a:c5:f6:d8:14:8d:aa:09:05:ef:8f:34:
81:6b:5a:65:67:d0:aa:00:75:36:51:72:cc:2a:d6:95:2f:22:
66:7f:b4:74:42:0f:76:b2:2a:ad:24:61:0e:8c:4d:f4:c0:92:
eb:48:7f:c1:ac:e2:d2:35:47:b4:a3:a7:4f:f7:2d:a5:84:fb:
5c:d4:6c:10:89:ac:cf:e9:d5:e5:50:aa:6e:3f:45:4c:4d:30:
e0:5a:6f:09:34:c1:d8:a7:87:33:34:73:06:c0:7c:a6:1c:f7:
cf:e5:59:04:7b:5f:23:bf:48:c0:db:7d:13:de:f4:b5:ef:da:
8a:d7:3a:2c:ef:50:9e:f7:76:de:36:76:c6:31:40:46:5b:83:
2d:c5:16:bf:e6:94:71:dc:0b:28:99:ca:eb:8b:3f:2b:70:14:
fa:45:0f:6b:c0:5e:0a:24:d9:a4:fb:19:cb:ee:b6:a5:5f:82:
7c:b4:91:cc:b6:6d:31:57:c5:71:78:20:37:9b:39:f8:96:93:
3d:6b:65:b4:83:f1:21:c9:1a:87:dc:ea:67:dd:55:4b:25:c8:
81:af:55:b7:8b:a3:b7:1e:40:e1:f3:f6:ad:e8:87:11:20:52:
f8:f7:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:21:03 2025 by rpki-client