
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft
File: 7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft (raw, json)
Hash identifier: qTXrvBvAkW2MK6OYka+64CtdzyCd9kbC7AGOjgzlRLY=
Subject key identifier: 1A:97:70:F0:9C:62:8C:30:3D:01:3B:9C:B3:6C:7E:2C:E4:F1:AB:02
Authority key identifier: ED:FE:09:C9:CE:50:43:66:64:54:11:55:AC:FE:6D:5A:03:98:65:BA
Certificate issuer: /CN=edfe09c9ce50436664541155acfe6d5a039865ba
Certificate serial: 0194BD17A46463C9F6ED7F6FAD49C71A5173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft
Manifest number: 089B
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: 7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.crl (hash: dlyhWlBu5G8RHM0+jY48hPifjs4CVRN5emXSnWLOWYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a4:64:63:c9:f6:ed:7f:6f:ad:49:c7:1a:51:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfe09c9ce50436664541155acfe6d5a039865ba
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=1a9770f09c628c303d013b9cb36c7e2ce4f1ab02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:2c:8d:03:62:dd:53:b8:1a:23:4b:4a:5a:
ab:e8:16:2c:33:33:9e:9c:0b:25:fc:35:cc:aa:e2:
dc:67:74:16:73:b9:43:c2:ab:e5:8e:47:b7:98:8f:
d5:4d:2b:d7:6e:c9:ae:cf:54:7a:ae:ee:66:13:a4:
29:68:aa:99:a6:3c:66:e3:6f:be:29:51:86:7a:a1:
7b:ec:33:f5:9d:c5:ba:32:2c:8c:84:1a:ae:02:9f:
b0:be:1e:2d:61:46:88:77:1c:d7:57:da:38:48:b5:
e2:b9:86:d2:c5:fe:f7:06:e2:89:e0:af:1d:d2:c2:
45:90:33:cd:d7:a6:8a:c6:e2:c7:a8:ae:0d:8f:59:
af:5d:43:1d:5e:d3:b9:51:2c:7d:a2:bc:bb:6f:84:
c7:30:d2:fd:b3:86:61:ae:98:6a:8f:80:5f:7c:a9:
42:9e:04:d8:75:40:f2:42:c3:f5:cf:82:92:82:35:
82:89:4d:3a:d4:45:f9:f2:4b:94:6c:64:a9:d2:d2:
f1:76:31:fa:ee:8f:0f:2f:6b:66:bf:53:49:5d:ee:
6c:21:18:a5:03:bb:82:00:a1:48:61:23:4a:da:78:
22:91:40:bc:d3:af:b5:48:2d:99:53:e9:af:d0:37:
63:7a:65:c6:01:f2:b1:bb:58:f2:16:6d:05:83:7f:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:97:70:F0:9C:62:8C:30:3D:01:3B:9C:B3:6C:7E:2C:E4:F1:AB:02
X509v3 Authority Key Identifier:
keyid:ED:FE:09:C9:CE:50:43:66:64:54:11:55:AC:FE:6D:5A:03:98:65:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:96:ee:f9:f2:7c:06:97:32:d7:3d:a0:0a:c8:48:b5:16:5b:
d1:af:96:57:23:58:77:fe:97:42:db:cf:ff:61:bc:c4:a6:21:
09:37:26:ba:b9:26:0e:1d:bc:a4:1d:39:03:ca:66:20:db:3d:
e2:fe:02:64:77:f8:76:74:90:6a:3a:68:5c:91:90:54:1f:6a:
5d:e8:20:85:10:ef:2c:89:16:0e:c3:22:94:b0:69:4d:cc:dc:
5c:db:6b:31:24:af:42:3b:9c:83:f6:a2:8a:8d:fc:65:38:94:
1d:f8:9b:63:74:c5:c7:82:f2:e3:db:42:b0:13:c1:c9:d5:25:
34:f7:d0:3a:bf:55:b9:43:09:31:39:29:08:6f:bf:f7:71:ed:
88:bf:53:56:64:d4:e4:58:da:ea:96:27:c7:5f:fd:d4:91:fb:
05:83:26:d2:a7:e4:3d:84:6a:7c:2c:92:d7:41:ca:df:04:5a:
2a:69:a8:37:ca:d7:6e:23:b7:16:28:72:57:1f:4b:06:7d:5b:
37:ef:79:62:cb:d6:3a:ab:4c:82:78:e5:6e:3b:68:eb:c3:80:
ad:b7:c3:72:ba:41:aa:0e:5f:d2:a2:09:c6:4a:96:55:19:5b:
62:4c:77:b2:2b:ab:f1:49:33:96:5f:dd:21:2b:3d:25:9a:2b:
9d:47:2a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:05:07 2025 by rpki-client