Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft
File: 7DY9SPPeihkcuHZyYDLyWF-gZw8.mft (raw, json)
Hash identifier: ymjNJLSCofkjUx4KqxuUfPW62d8Wqc7ydzjnSmu/v/E=
Subject key identifier: 04:D3:45:5E:3A:EA:34:05:FD:BD:00:17:8A:F8:E9:E3:E3:C4:63:E7
Authority key identifier: EC:36:3D:48:F3:DE:8A:19:1C:B8:76:72:60:32:F2:58:5F:A0:67:0F
Certificate issuer: /CN=ec363d48f3de8a191cb876726032f2585fa0670f
Certificate serial: 0194BBCEC675B4DF6C91DAEB537E2A665F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DY9SPPeihkcuHZyYDLyWF-gZw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft
Manifest number: 09E6
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: 7DY9SPPeihkcuHZyYDLyWF-gZw8.crl (hash: WKv/I3zfbRELUTcozELH7yIZB33dz6PA+7o+FVl/w+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c6:75:b4:df:6c:91:da:eb:53:7e:2a:66:5f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec363d48f3de8a191cb876726032f2585fa0670f
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=04d3455e3aea3405fdbd00178af8e9e3e3c463e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:eb:83:ce:92:5c:c4:1b:fd:a0:a3:78:83:c1:
2d:14:92:3c:7c:bb:c8:da:b7:a0:f5:2b:09:41:d1:
5a:7e:7c:68:51:70:53:5a:7f:4e:d5:70:13:47:e1:
63:f8:0a:6c:ef:e5:c7:2d:ee:25:c6:10:d1:70:13:
d8:8a:73:d0:65:ee:33:84:00:aa:22:b3:b6:9c:04:
1e:95:ab:ee:23:0a:01:95:04:49:35:e9:e1:5e:6b:
f5:bd:80:09:cf:6f:73:fe:46:4b:49:fe:e4:5f:2f:
f9:68:58:69:04:90:4e:3e:b8:8c:d4:15:97:d2:c3:
ae:ac:06:31:5e:b4:ce:ae:fc:25:4e:c5:db:8d:05:
63:4f:cb:42:81:03:7d:2f:be:49:0d:4b:54:ca:9e:
41:b1:69:7a:bf:df:7b:03:3a:aa:00:1f:f0:06:b4:
7b:66:2f:85:0b:91:af:c2:ec:2d:4e:3c:49:49:8e:
98:10:40:b4:0e:47:98:cf:cd:d6:aa:b6:65:e6:94:
03:b1:18:24:1b:26:cc:c0:9b:bf:ac:cb:00:87:cc:
6e:6f:2e:e0:7c:dd:55:1e:b8:c7:88:5a:f4:42:0a:
5b:0c:f2:75:ab:78:28:10:00:03:8c:88:a6:73:72:
a3:a3:6b:7b:56:a9:d0:4f:2a:38:31:f7:7d:3f:fd:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D3:45:5E:3A:EA:34:05:FD:BD:00:17:8A:F8:E9:E3:E3:C4:63:E7
X509v3 Authority Key Identifier:
keyid:EC:36:3D:48:F3:DE:8A:19:1C:B8:76:72:60:32:F2:58:5F:A0:67:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DY9SPPeihkcuHZyYDLyWF-gZw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0c:e1:2d:a0:8e:60:fe:6b:13:68:a0:a7:05:82:4d:9c:26:
49:dc:13:0c:64:49:57:6e:ca:b7:22:fd:b0:31:9d:ae:8a:96:
30:26:15:27:5f:45:89:80:36:4c:86:49:a0:8f:cb:05:3a:f2:
b1:09:74:72:4f:8f:2e:b6:6f:62:18:71:58:c0:c3:0c:81:5e:
24:4b:d5:55:b7:47:09:98:bf:41:ed:89:00:d8:5d:7e:3b:cd:
db:8e:e1:31:12:85:bb:70:cd:b9:fa:23:60:d0:93:b6:6a:b5:
f4:87:20:b3:50:4a:d3:4f:64:cd:2a:48:a3:fb:e2:92:a7:80:
89:6d:f8:c3:e0:b9:5a:e2:0b:6f:7c:4d:eb:65:78:07:77:ba:
1e:c1:a3:3b:47:53:20:c2:f9:0f:ac:c9:fa:65:80:3f:17:58:
f7:21:cc:97:59:9f:9d:a6:c6:79:88:98:56:0e:78:fd:f5:c6:
7f:40:92:84:d1:82:52:15:35:ea:75:1f:3c:8c:c7:b5:c7:e2:
ed:94:0a:99:88:26:de:70:35:51:6e:6c:83:ae:48:e4:54:5d:
e5:a9:30:87:53:25:bc:f6:44:74:a9:f5:b8:be:f2:d3:a8:aa:
29:3a:61:12:3f:03:ed:f3:d0:5d:e7:2f:a9:55:d7:71:2b:c6:
e4:57:1b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:56 2025 by rpki-client