Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
File: 1peKb6yHM4CG9TacW0AhsIBhHlc.mft (raw, json)
Hash identifier: Z8Mp0OJ8++SWrsZuvk2I4F6sjrcudM8YcL5g7QWXErU=
Subject key identifier: FA:8E:87:C9:7C:FB:B8:F2:9A:62:DD:E7:9E:11:52:6A:E8:2E:C0:94
Authority key identifier: D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
Certificate issuer: /CN=d6978a6fac87338086f5369c5b4021b080611e57
Certificate serial: 0194BC72EE7D629619174E8D0EF90B28BE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
Manifest number: 62
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: 1peKb6yHM4CG9TacW0AhsIBhHlc.crl (hash: NmRPJMETvfr2XqPV90HvK8Zn/6DNF3TYztBoC4U75OQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ee:7d:62:96:19:17:4e:8d:0e:f9:0b:28:be:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6978a6fac87338086f5369c5b4021b080611e57
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=fa8e87c97cfbb8f29a62dde79e11526ae82ec094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:39:49:59:6b:83:e9:7d:8a:2d:81:a3:7b:
84:cd:54:4b:0e:31:96:18:47:fa:f6:26:ee:0c:a6:
42:fa:e0:61:70:79:30:41:ee:84:7f:04:61:19:b5:
f8:32:42:5b:f0:5c:14:ab:e0:c3:80:d2:79:1c:a8:
e2:0a:a4:98:5b:13:db:1c:36:ba:be:46:c3:25:01:
71:5b:32:95:1c:88:aa:6e:d9:03:86:a7:b9:17:62:
ba:4b:69:fe:11:08:39:13:22:f2:c7:8a:dd:20:4f:
21:df:49:99:c3:1f:b0:a3:cc:42:35:2c:70:77:ac:
83:c2:f5:69:b5:53:9f:28:04:b0:60:3a:04:8a:2a:
8d:5f:7a:64:4e:7a:92:7a:69:fd:60:9d:34:0b:37:
e3:4b:f9:a6:32:53:86:8d:8b:a8:9a:89:c5:73:aa:
74:4f:bb:ba:33:0c:76:4a:b9:f2:41:de:53:37:6a:
84:a6:93:fb:75:17:45:72:52:28:62:01:b4:f5:2a:
66:c1:6d:c3:a8:a9:ee:06:87:14:34:bb:00:8f:00:
b2:70:d2:64:c1:30:d7:9a:84:ab:e9:da:76:5d:58:
ed:45:7a:ff:ca:be:f5:6f:9b:fb:09:5e:1b:63:dc:
ef:e4:a5:5b:65:d4:6c:18:91:51:64:60:f9:5e:15:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8E:87:C9:7C:FB:B8:F2:9A:62:DD:E7:9E:11:52:6A:E8:2E:C0:94
X509v3 Authority Key Identifier:
keyid:D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e2:f7:8b:4c:d8:41:63:1e:22:9c:5e:8b:ca:23:52:86:8c:
b0:c4:59:5c:f9:e6:65:4e:e4:a5:95:7b:a1:8c:f2:ac:a3:69:
b3:ea:56:fa:7c:56:5b:7d:07:f0:7d:3f:2c:45:be:3b:06:1a:
2d:7e:f1:7b:b0:e8:ca:4f:b0:71:f0:5a:4c:81:2b:09:22:d0:
b4:7e:fa:c2:57:95:51:f3:45:88:cd:99:d5:14:8e:36:65:8f:
af:b8:3b:0f:3b:97:44:c7:61:01:0d:35:ce:23:14:92:b2:ae:
80:34:ae:39:3e:94:02:31:6d:a5:77:02:d0:ac:a5:b8:31:39:
b5:57:ba:c9:7b:31:b4:0c:95:fc:b8:7c:43:ac:68:21:72:4d:
fb:a8:cd:c7:0d:7d:a5:41:6c:ec:50:5a:f2:b7:fb:69:09:4d:
f0:2f:cf:f4:6a:8a:1d:a8:d2:30:a7:4f:6a:f6:1b:27:0b:55:
c0:b3:75:71:0f:8b:1c:e3:db:66:2b:c0:5c:a8:7c:e8:c5:f7:
33:eb:18:7c:88:99:b9:1b:c6:64:58:2a:22:47:cb:fc:3f:34:
be:e4:58:b0:68:52:e6:42:13:48:ff:21:9b:dc:08:f3:c3:7e:
1f:a4:29:7d:41:be:d3:17:19:8d:ae:35:64:ac:82:0d:2e:0e:
27:da:71:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:36 2025 by rpki-client