Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
File: 83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json)
Hash identifier: 8n4+Dnbc8f3aH/NFV2xvyZy87t4w25pIdLMGx7yAaLg=
Subject key identifier: DF:8F:E1:35:C2:57:34:8C:1C:D5:57:3B:F7:8E:12:F7:50:AF:F9:69
Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
Certificate issuer: /CN=f3730086a14f31b25640c142edfd17bc93320c5a
Certificate serial: 0194BCA9AF0401BFEE418D3932B1E37AFE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
Manifest number: 0CD1
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: 7bsfat+/O/bnGApYXJbxxC/8in3GlCb9cPHH3fP+H7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:af:04:01:bf:ee:41:8d:39:32:b1:e3:7a:fe:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=df8fe135c257348c1cd5573bf78e12f750aff969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:4c:0b:ac:27:ff:44:bc:c3:12:3f:bc:b5:
0c:34:f7:1f:45:44:51:29:3a:f6:a3:f9:52:56:15:
77:f6:8a:38:5a:10:87:05:10:f5:37:6b:f9:be:51:
30:5a:9c:06:d4:41:68:9c:ae:b4:93:c2:90:57:ac:
d1:c7:a6:cd:e0:ed:58:1c:e2:fd:57:b7:8a:66:2e:
b8:d9:09:a7:3a:f6:a2:9d:10:51:2d:e3:b1:e0:3c:
f1:45:63:2f:13:80:f3:1e:df:54:de:5c:c7:1c:2b:
6c:e7:14:b6:98:86:a8:52:37:5f:12:34:d1:3e:d5:
c0:2e:df:0b:3d:7c:bc:f4:23:1a:d0:d3:54:03:3d:
bb:13:8c:14:05:f7:19:01:51:a2:03:ee:04:25:34:
f8:03:6b:3f:fb:4e:de:fc:0a:34:80:8d:d7:39:b1:
75:f3:3b:06:b5:f3:7f:cb:f6:e5:62:73:0f:aa:f8:
64:72:b7:5c:77:a1:f2:2a:5e:7a:1f:c9:d3:4d:03:
f8:07:65:2e:42:97:21:8d:51:e1:fd:5f:51:97:51:
ff:94:b1:f7:6d:e9:0c:f7:0a:1b:e8:6b:70:a1:64:
66:46:1b:46:e4:3a:90:4c:95:a5:4d:b8:7d:de:aa:
21:ab:68:88:40:9c:22:dd:ba:0d:ac:f0:19:51:d1:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8F:E1:35:C2:57:34:8C:1C:D5:57:3B:F7:8E:12:F7:50:AF:F9:69
X509v3 Authority Key Identifier:
keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3d:53:8e:7f:54:3b:89:f0:7d:04:b1:b5:15:a3:b0:d3:b0:
76:92:ab:1d:c8:1a:aa:cb:68:cf:e3:31:63:75:44:80:70:b2:
49:d2:47:a2:be:99:70:e5:82:c2:8c:55:53:f2:81:09:bb:3b:
aa:ed:bf:c3:cb:40:43:f5:93:7d:7c:ea:26:bd:41:59:0b:2c:
fc:72:d9:79:17:10:0a:5b:9e:c0:a4:1c:ed:25:86:1e:56:12:
1e:85:4a:c5:be:6e:61:94:3f:f6:e6:04:70:da:36:e9:43:77:
50:a7:b5:c6:29:79:1e:1f:ce:da:00:0b:81:0e:48:8d:0f:6d:
31:f3:62:8a:09:02:e2:5e:ad:42:fa:5a:c5:40:c1:9b:89:ef:
d1:0b:09:b3:73:41:fb:81:57:13:25:c2:58:0f:50:74:2a:6f:
a3:22:3e:b0:10:ff:7a:4c:2c:86:6e:57:bb:13:e3:4f:ff:54:
9f:22:ce:1c:7c:96:ac:1f:4e:5c:eb:8b:60:9c:7c:9a:0c:b2:
e2:b8:fe:65:17:51:e1:dc:e8:6f:6a:40:e5:35:8b:f4:e2:f3:
96:cc:17:1c:81:d3:86:c4:7e:d8:ad:18:d2:a9:b5:da:60:09:
57:ff:b9:6e:1f:5a:d0:92:ee:8c:88:59:c7:98:3b:d3:85:76:
30:48:36:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:09:33 2025 by rpki-client