Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
File: 97LAktArE86qejP_BXqECmjXFSE.mft (raw, json)
Hash identifier: pO1oBv3txApuoFtVk8zJsuCOYp/00Bl0MQjD+NHKSSQ=
Subject key identifier: 66:C8:F7:82:47:62:E5:D4:02:78:AF:52:51:E5:61:0A:D8:BA:4E:14
Authority key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
Certificate issuer: /CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Certificate serial: 0194BBCE855D049845FFE0DE14785AD4F1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
Manifest number: 0E4B
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: 97LAktArE86qejP_BXqECmjXFSE.crl (hash: Vg7SdJEZrLjSfP/ZRBO9ufchIYK+cCczRR3DiOS5haQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:85:5d:04:98:45:ff:e0:de:14:78:5a:d4:f1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=66c8f7824762e5d40278af5251e5610ad8ba4e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:d0:55:61:f7:2b:28:dc:01:96:16:45:0b:
14:24:13:c8:31:f2:d4:64:13:13:9b:f8:5f:26:f9:
74:6b:4e:5b:2e:d5:b7:f5:d0:68:53:92:4b:f3:da:
4d:47:d4:3d:fe:5c:ff:29:d0:17:91:44:6a:0f:61:
a3:6c:23:41:2e:49:fa:53:fd:e3:ab:3c:05:9f:7d:
02:64:ab:99:53:13:58:2f:f4:c9:69:31:69:f1:14:
e7:f3:60:61:16:f0:4b:6c:e3:88:f4:e2:80:5b:80:
55:0c:fa:b0:8e:c5:be:7c:6b:f4:e4:c3:2f:53:89:
44:3e:fb:6d:ef:1a:a2:13:f4:0f:58:98:c2:78:aa:
a1:56:bd:c2:07:80:b9:e1:8d:6a:ec:c9:30:6a:b1:
00:b4:46:56:96:fe:d7:4a:83:fe:76:84:77:38:b5:
59:17:21:71:5d:5c:a2:e2:07:77:40:14:6f:bb:ed:
ea:cd:be:ac:00:98:d4:bc:70:93:fa:45:86:9a:cf:
65:8b:ee:29:28:b2:88:2f:38:9f:8a:c8:74:68:5c:
f0:73:de:b5:39:b0:db:1b:de:aa:c7:8e:8d:eb:c0:
5c:75:d8:cb:83:75:64:38:2d:34:d8:03:2e:e9:c6:
a7:63:fc:21:74:21:3f:21:45:3d:81:65:02:b3:7f:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C8:F7:82:47:62:E5:D4:02:78:AF:52:51:E5:61:0A:D8:BA:4E:14
X509v3 Authority Key Identifier:
keyid:F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f9:36:b8:f8:ea:63:fd:5c:52:30:82:fe:f9:9e:31:19:aa:
8b:b6:af:e5:af:3d:8c:7c:95:bf:1a:f5:e3:1d:a2:2b:a4:f7:
9a:05:80:73:38:9c:01:e1:42:31:e8:f3:13:11:4b:1e:59:d5:
cb:f6:0e:8a:5f:90:8e:69:7d:bd:43:6d:f4:38:8e:d1:e4:6b:
fb:aa:e5:a9:c5:99:98:23:12:b6:14:8b:f6:a1:91:9a:b7:e9:
20:fc:60:60:6c:dd:44:bc:2d:fe:bc:0a:41:81:9b:df:3b:36:
f0:ec:a2:76:61:c0:8b:f0:c9:0f:9a:e5:6b:40:22:3e:70:e6:
8c:1a:2b:96:55:74:9b:2e:cf:b8:01:42:00:e4:b5:29:2c:5c:
71:a1:ed:1d:ff:c8:6d:13:35:07:61:94:75:38:be:a8:ec:5f:
43:de:0e:12:25:a2:c3:1b:15:fd:a5:34:30:98:e8:f1:f8:92:
0a:b4:54:50:d4:f0:cb:9a:b6:d5:7d:dc:10:ae:fd:d7:fb:90:
b0:18:31:2b:9b:df:82:f2:5c:3b:ae:a9:42:59:c9:96:0e:d6:
2c:98:df:59:e7:ee:3f:b7:0b:72:78:5a:bf:da:7f:c7:8b:57:
3e:5d:ee:8a:40:32:75:63:d2:d7:e2:6c:83:93:0e:68:35:ce:
67:c9:47:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:57 2025 by rpki-client