Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.mft
File: SHcGwrHYON95a_g_qn176rxcdvg.mft (raw, json)
Hash identifier: liTk0pdSwtFs73JJuhL/Da0UTL6P5JKhoeMXzgV3Ah8=
Subject key identifier: 63:CD:98:32:28:31:BD:89:EF:29:60:C5:F0:92:1F:A5:7B:6E:4E:5A
Authority key identifier: 48:77:06:C2:B1:D8:38:DF:79:6B:F8:3F:AA:7D:7B:EA:BC:5C:76:F8
Certificate issuer: /CN=487706c2b1d838df796bf83faa7d7beabc5c76f8
Certificate serial: 0194BC72A28EF99801DDEF29DC2187947535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHcGwrHYON95a_g_qn176rxcdvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.mft
Manifest number: 0C12
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: SHcGwrHYON95a_g_qn176rxcdvg.crl (hash: e1iGq1TYMaBUUe4aK/7ijErRmGksa8Jrhr079kkeUeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a2:8e:f9:98:01:dd:ef:29:dc:21:87:94:75:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487706c2b1d838df796bf83faa7d7beabc5c76f8
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=63cd98322831bd89ef2960c5f0921fa57b6e4e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:d2:22:f7:22:0f:fb:db:1d:3d:6d:e0:a3:
a8:fb:fd:9e:28:9d:7b:f9:b4:e9:3e:43:5c:ab:6f:
eb:74:8c:5c:24:99:92:a8:3a:7b:fa:f6:cb:b3:1d:
82:80:3f:db:60:ee:53:0c:34:9d:34:ea:c9:fd:c5:
d4:0f:ba:73:8a:1c:91:92:b5:41:31:c1:09:b1:3b:
00:24:92:a2:b6:da:be:88:c1:70:05:9c:97:48:39:
47:02:0a:e1:c5:ff:1f:23:bb:bf:24:1e:c8:40:69:
9f:04:5d:08:9e:c9:6d:76:30:21:8b:f2:06:81:cd:
f2:ab:7c:24:8e:d0:40:19:21:9b:1e:c1:7c:86:e1:
35:f9:c2:83:17:6f:c4:5a:19:50:ab:74:97:65:09:
1a:1f:62:a1:f0:e8:dd:27:ac:06:e9:f5:88:98:f3:
a6:fc:1c:64:bc:b7:ae:e9:09:33:4a:74:dd:ee:0b:
eb:ad:26:66:ff:0c:a1:85:32:fd:f3:1e:2f:03:c9:
f4:70:ef:27:71:7f:3d:30:7c:fb:48:0f:15:6c:63:
62:50:5d:65:2c:92:c2:66:00:00:2f:96:d5:f9:25:
c2:c7:fd:1b:9f:ed:34:09:64:e1:03:4b:11:75:35:
f4:26:98:57:8c:95:ab:e0:37:33:b4:5b:36:7d:24:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:98:32:28:31:BD:89:EF:29:60:C5:F0:92:1F:A5:7B:6E:4E:5A
X509v3 Authority Key Identifier:
keyid:48:77:06:C2:B1:D8:38:DF:79:6B:F8:3F:AA:7D:7B:EA:BC:5C:76:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHcGwrHYON95a_g_qn176rxcdvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:06:cf:7c:2d:24:e3:7b:b9:bd:d3:04:dd:55:e6:8f:0b:cb:
db:a2:96:3c:60:6e:c0:47:bb:71:26:21:a0:ff:e7:23:de:9b:
c3:81:93:cb:2a:5d:23:b0:2c:e0:e6:cc:e1:47:1a:c8:02:d9:
33:dc:6a:e3:b0:74:ac:d9:4e:dd:9e:8e:98:bb:96:6d:f2:9f:
93:9c:34:e5:97:33:b5:44:f3:b2:57:f3:5f:09:42:b2:a7:e1:
7f:35:56:db:47:96:5d:4e:9e:f2:cf:da:a6:ca:fa:79:43:82:
ff:d4:83:e0:01:18:90:f3:ef:97:53:2e:7e:97:e1:8f:b3:02:
af:b0:fe:99:3b:34:1f:b2:17:59:bd:05:3a:f1:e0:75:58:6a:
6c:72:9d:2e:c3:4b:45:8d:cd:10:ea:1f:d4:f6:ef:76:b0:cc:
fe:2c:d8:7c:66:c8:8b:92:de:6f:0b:43:89:99:1c:ad:3f:23:
da:3c:04:b6:c3:72:b5:38:ed:86:36:33:a8:af:44:a3:5f:ad:
b0:3b:a2:5e:74:5e:2c:c6:76:71:3a:ee:34:44:5b:49:24:89:
eb:76:6d:18:40:9f:8b:57:d5:ed:4b:e1:85:51:bc:e8:30:cf:
a2:5d:ed:5c:cf:f7:c3:60:9f:c3:e3:d2:b3:17:75:89:88:f2:
f7:87:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:29 2025 by rpki-client