Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
File: rh967y8S0HaqitWli8uNyvPwvUw.mft (raw, json)
Hash identifier: 7tZlWzakRSNi7XR/qhHzgYNYMkdZELePHh90+z8Iu3A=
Subject key identifier: E4:11:E3:F4:2E:78:76:F2:0F:A8:C3:85:3B:52:FE:B3:98:62:8C:C1
Authority key identifier: AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
Certificate issuer: /CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Certificate serial: 0194BC72A63188823C1D3B10CE3C20D8D53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
Manifest number: 0F79
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: rh967y8S0HaqitWli8uNyvPwvUw.crl (hash: 4hWVe3u4keH/1wvJRxTsWxE5ayctCW4zsR3ryq2M1/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a6:31:88:82:3c:1d:3b:10:ce:3c:20:d8:d5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=e411e3f42e7876f20fa8c3853b52feb398628cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c2:09:a9:dc:8f:c6:75:6f:83:0d:8e:75:1d:
5a:6a:68:dd:99:fe:96:60:c7:da:96:bc:b6:10:d1:
9f:6c:cb:41:fc:a7:21:c6:65:68:a5:9c:51:de:64:
ab:f7:02:80:df:e9:c4:d5:8f:08:d3:02:2f:af:2d:
d5:b6:b7:8c:8c:dd:59:2e:6f:22:2a:49:f3:ed:f7:
cd:94:2d:03:6b:e2:4d:e7:72:9b:08:39:3c:99:8a:
8e:29:48:36:40:b3:fe:82:b7:aa:e6:89:43:0b:cf:
5e:e4:76:c5:3a:f2:b1:92:ff:4e:48:a6:89:85:e7:
73:85:50:ad:c6:2e:6b:fb:d4:1b:b9:e9:2f:1c:c7:
59:79:bf:0f:4e:42:59:d4:34:c1:9f:b8:c1:9e:fe:
15:8e:fc:b7:4a:c8:c5:88:1e:24:02:2d:fe:83:75:
96:59:48:44:d5:5c:75:8f:e4:35:c0:76:f4:06:03:
81:04:f2:a3:79:c3:c9:21:37:39:16:04:b4:f4:ca:
59:53:8b:87:4a:12:9c:3c:a1:ea:25:ad:65:c2:0c:
7a:3c:af:6f:d3:b2:24:53:84:84:9d:ba:f0:a1:78:
65:44:54:20:9e:9f:82:e3:6b:dc:75:10:db:be:6b:
bb:34:97:1d:90:39:2e:13:f1:40:55:f5:70:e4:3c:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:11:E3:F4:2E:78:76:F2:0F:A8:C3:85:3B:52:FE:B3:98:62:8C:C1
X509v3 Authority Key Identifier:
keyid:AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:31:4b:96:33:f3:9a:c0:7b:0e:07:e5:40:37:4d:63:5a:5e:
b0:2a:0e:db:26:4f:a7:aa:28:1c:8e:82:af:35:23:6c:e2:d8:
ee:3c:52:93:7f:37:18:ea:e5:4b:e1:f9:63:4b:f9:fd:3f:76:
6e:b1:0d:bd:ab:f7:5e:e1:32:fd:32:bb:ff:12:13:cf:dd:7d:
c7:b1:8f:29:6e:98:b5:55:1f:ab:24:a0:09:77:79:84:b0:b7:
b2:af:43:b3:48:47:aa:32:22:76:5d:8b:00:83:33:46:2c:27:
10:29:09:c6:2a:77:a4:32:9e:f2:0b:5d:6b:c7:c9:36:7c:50:
6e:3c:c8:f4:85:07:1b:01:02:07:25:77:4f:96:01:86:74:0d:
a1:66:c5:a9:b6:35:94:67:70:d8:92:a2:5d:55:72:f7:df:87:
cf:a5:09:6c:de:f3:ea:d6:96:7f:9d:f6:1d:1a:3c:07:dc:a7:
b4:98:8c:6d:dc:f5:8b:2b:e2:8a:3a:ec:8a:18:26:7f:57:3b:
7d:7a:05:42:04:9f:b8:63:af:b1:06:39:4b:66:a1:74:93:9c:
8f:d9:d2:3f:1a:53:20:41:25:47:88:09:9f:a5:62:7e:fe:76:
c7:15:aa:ee:af:8f:00:42:e4:84:74:74:01:01:9f:90:b2:3c:
d2:fc:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:26 2025 by rpki-client