Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier: kJDKUl/OEjZampkttTFVCKOoqHa0dIk5vnU3YsF7LcU=
Subject key identifier: 9D:E0:A8:F9:9B:D0:9D:19:45:38:B5:33:30:BD:3E:50:31:23:C6:D2
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial: 0194BC3C9790B5718053A66DE4F876219960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number: 0782
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: PgWVgId8TCmbvVDgSGjSWbr7R9hwe9NH7ZBTtiOLJm8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:97:90:b5:71:80:53:a6:6d:e4:f8:76:21:99:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=9de0a8f99bd09d194538b53330bd3e503123c6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:63:44:24:6d:30:6a:1a:fd:3d:76:f9:eb:
c7:cf:86:33:14:1c:de:33:8d:b0:ff:9c:47:9a:13:
ff:a2:e2:6a:b8:56:c8:95:72:e5:09:a3:85:70:50:
a0:40:24:cf:55:f9:72:11:cb:db:83:f6:8a:70:7c:
e9:0b:2a:bd:89:34:a6:67:0a:85:83:28:62:75:49:
17:ac:37:7d:65:75:d6:27:40:eb:09:f7:62:76:47:
84:0f:6b:c6:8a:32:67:66:5c:8d:0c:0f:d8:88:7d:
c3:1a:02:56:9f:6d:ee:4a:a3:de:12:54:d7:2a:fe:
47:f6:1d:b2:86:e8:71:33:e5:7e:05:f6:1e:b2:06:
dd:fb:db:6b:13:1b:0e:7a:56:f1:2c:c6:03:34:cf:
ea:98:a7:56:e8:58:b5:b5:37:8e:d2:a9:52:ef:3a:
0c:24:1a:f5:7b:b7:6f:86:10:d3:51:12:77:11:71:
d7:39:dd:3b:e1:b5:e4:d9:e3:5f:8a:f2:95:4a:15:
69:da:6d:e9:2d:ef:2a:a5:92:7e:d6:7b:1a:36:82:
8b:70:fb:94:fc:4f:ba:41:84:63:a9:a4:dd:6e:bc:
0c:9b:34:6f:08:58:08:04:91:d1:82:ea:a2:43:48:
ad:b0:fb:07:cf:70:dd:4b:7e:20:8c:12:ee:7e:59:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E0:A8:F9:9B:D0:9D:19:45:38:B5:33:30:BD:3E:50:31:23:C6:D2
X509v3 Authority Key Identifier:
keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0d:fe:58:fe:0e:bd:1f:ac:9d:2c:cd:a4:33:76:b1:ad:47:
68:a8:f1:c0:aa:64:b4:65:e2:91:97:0e:fd:03:d0:48:86:69:
f0:3b:86:c8:7c:d3:2f:ef:68:a1:ae:fd:06:e5:70:76:cf:39:
92:5c:a7:98:11:05:7d:96:32:bf:4d:1e:a0:47:62:23:0a:0f:
80:25:3d:fb:98:90:93:ed:3b:d3:c4:17:bc:4e:9e:ff:bc:fa:
56:2a:f7:26:e6:ba:13:7b:e9:44:ef:35:cc:bb:ce:b7:27:43:
ba:d2:44:bf:6e:44:0a:f8:74:a1:03:d3:d9:bf:00:74:22:16:
a7:55:85:b6:f5:46:b9:78:56:38:9b:ad:ac:83:3d:9f:96:3d:
f8:1a:7d:e6:13:6d:43:50:93:90:cd:ef:25:a2:7c:85:8a:71:
73:c6:6b:39:aa:eb:9e:cd:d5:d7:33:5c:66:e5:35:aa:2e:62:
bf:72:e9:00:0f:fb:41:15:eb:e8:8e:94:eb:3d:75:28:e2:76:
22:4f:4e:ec:c3:97:00:46:ba:fa:c4:ec:a5:16:06:43:e9:e4:
48:b2:ef:0a:0b:d1:df:24:7f:ed:84:c5:3d:ec:41:82:86:eb:
15:c7:cc:cb:59:99:14:ce:eb:d6:a5:00:6d:74:8d:4d:71:96:
86:1f:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:15 2025 by rpki-client