Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
File: D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft (raw, json)
Hash identifier: OF5+YAAQbrnRagDMNKMC6BuDlB7xOgYtRe7V4Pxl01M=
Subject key identifier: C0:47:7A:6A:AD:53:8D:90:47:BF:1C:59:6C:C1:8E:97:B9:43:E5:3D
Authority key identifier: 0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
Certificate issuer: /CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Certificate serial: 0194BCA9CB8C665EFF568B838963D11B514C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
Manifest number: 0585
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl (hash: 7Prhai58jKecbx9rtroqdfeOKGk39XKynZ5FPNUPQS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cb:8c:66:5e:ff:56:8b:83:89:63:d1:1b:51:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=c0477a6aad538d9047bf1c596cc18e97b943e53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:0f:d8:08:b1:85:af:8b:71:1e:12:83:37:
79:8d:07:a9:79:e7:c1:94:c3:28:78:16:ab:da:93:
9e:4b:bd:1c:f9:b8:0d:ea:fc:4e:db:44:e6:bd:ce:
6a:d8:fa:de:e3:6a:1c:9d:69:c4:b5:e7:a3:d7:90:
87:2e:8d:91:7e:3f:72:07:9f:5c:21:06:f3:3a:c8:
8d:5b:8d:c5:93:19:58:47:ab:cf:a2:64:5a:bb:0c:
10:c9:c0:5e:cd:00:90:6c:c1:89:58:17:40:44:09:
e1:7c:59:cf:87:3a:b2:d5:5e:ee:97:35:1e:c6:14:
3b:47:54:5d:9e:fd:6a:e9:1f:82:0a:ba:a0:e6:07:
fd:23:0e:dc:67:45:b8:44:5d:c5:f7:7c:99:c9:e2:
4b:94:6c:06:50:09:b9:17:4b:0d:50:5e:4b:5e:f5:
63:17:54:94:2c:cd:e3:88:a2:a0:ae:e9:78:10:de:
a3:9a:9e:ed:5f:54:6a:0b:00:70:d0:4a:83:db:e4:
b6:e2:d2:6a:88:ab:36:b5:27:8b:1c:94:0f:37:94:
29:df:20:3b:1f:8d:fe:ae:26:88:3f:f2:0f:5e:b3:
ff:58:24:ba:53:5c:a6:a9:45:20:59:c8:27:4c:a1:
20:2e:77:1c:c7:c7:f6:91:50:69:9e:98:b2:c3:19:
1d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:47:7A:6A:AD:53:8D:90:47:BF:1C:59:6C:C1:8E:97:B9:43:E5:3D
X509v3 Authority Key Identifier:
keyid:0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:28:19:36:30:72:cd:b4:5d:fa:1b:05:34:52:40:43:6a:09:
88:8c:0b:bf:57:f1:54:24:7d:0b:f3:ea:64:73:b0:79:4e:71:
35:08:59:ce:3a:1e:ea:e0:a4:74:f7:7e:3c:80:1c:c7:37:8c:
15:81:71:05:64:55:e5:2b:f5:9e:eb:6c:20:00:fc:bb:8a:04:
e7:fd:5a:60:79:83:c0:71:4a:0a:cf:34:ac:49:f3:c7:ca:d0:
7d:bb:92:21:4a:d0:0e:a4:ef:0e:91:e8:69:d9:86:dd:60:af:
25:7d:87:b4:f5:3b:12:d9:01:77:6b:37:28:6a:62:a8:d3:23:
90:6f:06:61:64:6d:44:a3:f2:74:57:9a:2a:b9:ae:06:53:ba:
d7:c9:39:e1:05:8b:02:3a:9b:47:f5:5a:b5:52:1e:c6:10:6a:
99:9c:4a:ed:9c:18:29:20:d9:1a:a8:ce:ca:d5:9c:5d:57:be:
47:2c:af:bd:ac:d2:b9:2c:46:78:0b:e6:fe:a1:29:5d:fc:73:
74:ac:e8:c8:8f:05:0c:c8:b2:78:05:3c:72:25:ba:6d:d8:86:
8b:84:26:61:8c:01:3c:5b:b4:e7:ec:ce:95:ec:b5:5e:21:f5:
35:1e:4b:1f:80:8f:7e:c8:40:0b:0f:86:17:61:2b:af:59:ef:
fd:74:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:34 2025 by rpki-client