Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.mft
File: fnHOoonCLKhp05CCVc1Op2Yhk7I.mft (raw, json)
Hash identifier: 7G0k8C1Mhf+qnHeR+wPD5LKKtwX6wZEitqojcYNMygw=
Subject key identifier: BA:2F:0F:AF:7E:CB:96:FB:7E:D6:9C:85:67:BB:EE:6B:57:B0:04:AA
Authority key identifier: 7E:71:CE:A2:89:C2:2C:A8:69:D3:90:82:55:CD:4E:A7:66:21:93:B2
Certificate issuer: /CN=7e71cea289c22ca869d3908255cd4ea7662193b2
Certificate serial: 0194BBCE829950DBF779DE8F2F33F07E0D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnHOoonCLKhp05CCVc1Op2Yhk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.mft
Manifest number: 0A11
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: fnHOoonCLKhp05CCVc1Op2Yhk7I.crl (hash: DAULM6kH19MrPt4LIZZZVuBCiXHaXnnUwdU4q6x44Jo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:82:99:50:db:f7:79:de:8f:2f:33:f0:7e:0d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e71cea289c22ca869d3908255cd4ea7662193b2
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=ba2f0faf7ecb96fb7ed69c8567bbee6b57b004aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:63:e4:ff:63:74:f0:ff:f7:93:12:e2:e1:
b0:09:10:7e:50:d6:67:d9:fe:43:5b:d8:32:43:b5:
de:3d:8c:bf:b1:b6:6b:2d:20:e3:2e:1e:ff:ef:ca:
7a:e0:4f:b1:b2:97:57:84:58:5a:a9:a4:0f:6a:73:
41:fd:94:cc:29:96:5a:cb:dc:03:b6:04:ce:72:e3:
a3:90:b3:36:8b:30:7c:e2:47:17:dc:4f:b8:9e:7c:
92:3e:e8:15:a0:43:bf:7f:3c:8f:14:56:9f:5f:6d:
6f:f6:ec:7d:9e:06:72:9c:bf:e3:36:3f:05:eb:eb:
f9:87:05:8a:45:75:ba:a5:4e:ed:58:dd:7c:0d:46:
03:ce:eb:dd:2a:4d:9b:3a:17:e7:96:f6:af:ae:74:
05:18:16:af:1e:11:39:bf:a9:4a:a4:68:23:a0:94:
e2:5b:9b:9b:eb:28:c2:af:00:0d:c3:cb:b5:69:45:
30:b7:f9:20:f5:12:9a:88:ec:bf:e1:53:e1:4a:e9:
a1:49:0c:a0:1f:97:49:e1:3b:89:01:54:03:8a:12:
20:95:aa:bb:26:f0:7a:62:48:d5:6d:cf:88:49:15:
27:2a:a5:c5:07:1c:08:35:8d:85:be:fa:69:6d:1b:
32:fc:b3:11:c7:cc:0f:a3:fb:09:d1:0a:f9:36:35:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2F:0F:AF:7E:CB:96:FB:7E:D6:9C:85:67:BB:EE:6B:57:B0:04:AA
X509v3 Authority Key Identifier:
keyid:7E:71:CE:A2:89:C2:2C:A8:69:D3:90:82:55:CD:4E:A7:66:21:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnHOoonCLKhp05CCVc1Op2Yhk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b82af7-4d2e-4b4a-a77c-1f09dcd3e648/1/fnHOoonCLKhp05CCVc1Op2Yhk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bd:5e:42:58:dc:8c:e5:d4:96:f7:7d:86:f0:49:5e:c0:25:
89:f9:d2:08:07:e2:44:7f:f4:fa:0f:b9:2e:70:8f:f2:9b:c6:
91:20:1c:ba:53:4f:59:4a:19:82:30:cd:22:16:ed:2a:07:56:
7f:14:d6:68:f0:b6:75:d7:e5:0a:43:eb:a2:f0:82:1f:d4:0e:
f5:cd:c3:58:f9:9c:b4:44:43:3e:f0:93:e2:8d:85:f1:30:ad:
41:e3:01:4f:94:27:a4:30:73:f1:dc:1c:a5:00:f4:21:e9:66:
89:9f:de:5d:6d:41:24:c7:f0:6b:ac:2c:bc:0f:59:8c:18:bf:
2d:e1:fb:96:3d:f5:e7:26:22:98:67:2c:ea:8d:52:5e:9a:94:
01:7d:77:43:71:a9:3e:b5:f1:cc:fc:b3:d8:e0:c3:e8:58:a7:
a1:1c:42:a9:e1:96:4e:86:1d:93:2c:91:04:9b:b8:55:77:45:
65:40:c7:16:41:ea:c9:f1:e3:b6:17:11:58:86:99:53:95:ba:
54:15:d5:c6:6b:fc:2a:cf:2d:91:21:54:cb:6d:40:e7:47:ef:
d7:56:b5:20:c4:ce:e7:ed:93:4b:48:87:98:0f:ea:b5:a9:56:
3d:a6:71:26:27:06:ea:48:2b:62:f1:f4:c7:ba:ec:af:8d:38:
3d:6e:70:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:11 2025 by rpki-client