Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: ktczV02IptpDWLXFYtEr5vC3eaqGQUPpI+7XEDfIPeA=
Subject key identifier: 83:40:84:01:BB:96:18:BF:4D:9D:34:3B:14:57:16:07:A3:04:3E:A8
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 0194BBCECD3F0FF825533B5B2824F8B4C817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: hAx7ltgdtzP7y1fPa+G+ZDyPwgbP5xbJPlghZ+KymNY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cd:3f:0f:f8:25:53:3b:5b:28:24:f8:b4:c8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=83408401bb9618bf4d9d343b14571607a3043ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:47:46:ef:76:2e:ec:60:7a:e9:15:24:bb:d3:
96:00:9c:c4:28:31:0a:5d:08:b9:a0:c4:f0:ec:51:
04:82:c9:5c:7f:da:21:24:b7:e1:28:aa:5a:5b:f4:
c1:9c:12:88:e8:f6:66:3c:ab:7f:cf:13:c3:59:92:
93:22:e8:46:25:c3:07:24:04:2d:b8:91:bb:76:80:
c1:8d:08:b4:28:8a:9b:d8:ef:a8:a0:0f:b7:14:85:
b4:3b:04:63:a8:76:2c:45:c8:76:00:62:83:9d:42:
d9:cb:a3:71:ff:07:a9:72:48:56:61:f5:d4:38:f1:
42:39:6f:51:3f:f5:27:6f:01:27:54:62:99:37:f2:
76:46:24:74:47:57:b5:fd:32:74:a7:e3:73:e4:6f:
56:6f:eb:74:ef:c6:ba:f1:ca:89:a1:c8:01:ab:17:
3f:3a:f4:04:c0:52:79:18:23:0c:48:91:82:53:be:
8b:ce:cf:b3:2e:96:00:04:52:7b:b3:5f:fe:b5:f5:
a1:86:3a:ae:51:ce:96:78:df:b3:77:7b:37:c2:b1:
37:3a:55:0d:ed:95:66:db:1c:4e:32:8d:56:62:ac:
91:95:5f:27:ea:f8:e6:aa:bf:d7:5e:f9:95:3c:30:
b4:69:d5:58:e1:fe:5a:22:9b:18:18:d1:84:cf:09:
19:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:40:84:01:BB:96:18:BF:4D:9D:34:3B:14:57:16:07:A3:04:3E:A8
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f0:20:bd:88:75:d9:56:68:6a:b4:ec:97:df:bf:c0:2d:25:
2f:85:65:17:c3:4c:49:4c:00:06:61:8f:a2:b9:b4:a5:ce:79:
7c:e2:dd:4b:d4:2b:e5:1f:b4:21:5d:09:a2:ff:bf:19:4c:e6:
ec:fc:88:f2:76:2a:f1:21:76:d0:71:5b:da:59:f1:ce:ed:9f:
7c:f5:36:89:ac:f2:e1:36:fe:32:d0:df:3d:c9:97:eb:b3:5a:
ab:5b:4c:dc:71:96:83:26:73:ac:f6:7a:da:9f:ad:68:1d:4c:
0e:86:cf:1b:fb:91:67:84:b0:1f:7d:da:f6:14:3f:bc:e3:ad:
e7:6b:3f:57:3c:e0:35:b9:3c:c2:65:22:d4:cb:8a:69:49:28:
04:03:17:16:34:5f:15:e5:cb:12:fd:8f:16:b3:85:32:98:b3:
be:24:34:56:a5:54:6c:05:91:20:d0:a5:03:0b:e3:13:b2:cd:
e2:8a:07:09:33:c6:c1:15:99:cb:ec:70:cc:f7:ac:8b:df:a1:
0f:58:f5:d6:a1:ba:bd:eb:d3:fc:5a:74:63:dd:05:4f:56:9b:
86:6c:25:64:e3:2c:59:f9:69:28:65:17:cf:3f:7f:80:7b:66:
17:90:fa:ab:11:2a:bc:d1:21:f0:83:08:bc:c7:07:f1:66:b0:
76:13:9b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:24:47 2025 by rpki-client