Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier: EH+8eTfyEqayu2oB9rhTargvUMjnv50ouEXBhai6l1U=
Subject key identifier: A2:E9:D7:77:53:F9:AC:42:CF:86:CD:52:6A:81:4C:41:22:D4:AD:CE
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial: 0194BBCE39FF211E38EE3AAF18353500D1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: t2hwGtpJtCFrnMvtiIWpI4yLgQl9SQp5VChZHiIHZpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:39:ff:21:1e:38:ee:3a:af:18:35:35:00:d1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=a2e9d77753f9ac42cf86cd526a814c4122d4adce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:62:cb:b8:77:98:69:9d:9a:0f:76:47:50:
a0:de:58:f5:e2:6e:4f:bf:34:80:00:64:8d:21:c3:
d9:6f:e2:ae:f3:f1:37:8a:3f:db:39:cf:48:c4:3b:
99:2c:ea:32:10:ca:b6:9c:65:ed:c7:30:f3:66:c1:
f0:dd:b1:d7:78:7f:ee:32:6e:eb:74:e9:fc:f1:0f:
e5:cd:32:20:a4:33:b3:20:4c:80:94:6d:a8:1e:4d:
0d:cb:ee:22:d4:f4:31:02:b4:8c:f9:bb:4d:81:52:
ab:7d:bb:c6:38:89:c0:3d:0e:e1:87:db:fa:e0:5e:
15:f2:9c:c9:18:51:38:6d:b1:b5:b6:ae:39:25:d3:
9f:c9:2e:7c:50:02:5b:bb:e7:42:4c:29:bf:9d:62:
99:05:2d:b4:92:a1:f2:ba:d3:8b:85:68:f2:44:ff:
df:e5:32:42:4d:bf:8b:5a:5a:1a:63:06:23:d1:4e:
cf:82:48:7e:1a:db:32:3f:eb:a5:ab:fd:a0:11:4a:
51:97:8c:92:17:c7:34:3d:fa:c0:32:8e:0a:e8:9a:
e5:d4:47:42:ad:eb:ac:b4:a8:c7:e7:bb:2a:61:b1:
f4:75:dc:e6:2b:04:ff:cf:dc:18:b2:95:c3:e8:46:
c7:0b:62:62:b9:d4:8d:fe:3f:8c:fc:64:d7:fb:e9:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E9:D7:77:53:F9:AC:42:CF:86:CD:52:6A:81:4C:41:22:D4:AD:CE
X509v3 Authority Key Identifier:
keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:99:bc:a1:99:1a:21:01:52:8f:a9:a2:29:14:59:05:4e:34:
aa:cd:d8:a0:78:4a:46:70:72:2f:e4:c5:e3:be:5f:21:7f:21:
dd:8c:34:72:09:1c:57:46:7b:35:df:a0:4f:b4:5c:ac:92:95:
86:70:1c:20:4a:8e:9f:b5:96:2b:e1:0c:73:f7:32:9a:2b:59:
15:28:aa:a7:9c:81:04:7b:c8:7b:1f:b0:3c:ab:16:91:6e:5a:
97:95:aa:68:8c:64:f5:22:cb:da:9d:ab:08:8a:b5:f3:55:6b:
8f:8a:e9:a5:9d:7d:5b:e3:49:29:b6:d5:46:a0:67:6c:84:7e:
3b:6f:cb:6c:58:87:94:7e:e9:5d:72:5a:87:96:88:82:58:15:
77:32:94:b3:4a:f1:7d:ea:51:29:2e:3c:7b:13:a2:a5:7b:e1:
96:39:20:ff:6a:c7:f6:d7:36:a1:db:50:1c:92:ef:2d:f5:fd:
f6:11:9b:91:a7:fc:30:20:c8:5f:23:dc:4a:af:65:bd:59:1b:
d3:6c:3c:05:31:66:ae:f6:f9:b2:e9:66:69:67:4b:e9:61:f2:
b5:48:02:97:7f:cc:79:b6:6c:1c:ef:bc:71:10:71:4c:e1:d3:
b4:45:b5:c8:37:29:99:43:00:3a:10:95:75:b8:1b:0b:24:ea:
b0:9a:fc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:51 2025 by rpki-client