Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File: 8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier: i1ycxQMoEgVo6bLT38X+iiC5/oJdf1nsJOy/89fsyaM=
Subject key identifier: 88:1B:CD:93:C6:36:FC:71:A0:02:56:CD:1C:67:14:90:F5:0D:B8:DB
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer: /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial: 0194BCA9A20957FB945692977B5A6EF58381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number: 0BCF
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: GajhsS1UEztjIo32sEhxqgChvYtBLFYFiiPIr6s2XA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a2:09:57:fb:94:56:92:97:7b:5a:6e:f5:83:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=881bcd93c636fc71a00256cd1c671490f50db8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:b1:63:bf:e7:37:de:50:b9:d1:4d:2c:3a:
9e:c7:aa:9f:ef:5e:20:16:45:0e:b9:01:d4:ed:ef:
4d:74:dd:d9:be:7c:23:cb:c0:86:3c:09:88:93:2f:
91:16:20:3c:dd:02:f2:3f:5e:2c:bb:b4:68:0b:5d:
68:b3:54:33:91:45:24:17:20:7f:6d:0d:89:61:c0:
08:f3:72:54:53:b0:ee:d1:fc:ca:c1:cb:98:3b:42:
f7:10:a4:5b:8e:7b:bd:e8:da:7e:0f:4b:05:c3:61:
98:5b:fc:b5:b7:16:7d:d1:9f:72:c0:84:e5:a3:93:
2f:d4:bb:e4:bd:05:73:df:ff:ae:eb:62:56:09:5c:
42:6b:b7:87:73:e4:01:8f:99:70:5e:dc:c5:c7:9b:
dd:56:93:bb:f4:44:7e:f4:84:6f:03:73:56:0f:cc:
06:53:c6:94:ad:5b:e1:97:0b:3f:33:24:1d:01:a1:
4a:02:33:2e:06:1d:c2:0f:e0:f8:82:65:ed:bb:a1:
b7:48:67:4f:04:22:ad:3a:c4:0c:96:a5:2e:4e:c9:
14:ee:2f:c5:ed:0e:16:08:ba:d6:03:4a:c9:15:dc:
bf:cd:81:5f:80:ab:8a:5d:67:7a:c5:78:b8:ef:33:
8d:ff:a7:43:a5:e5:8b:0c:0f:02:8d:9e:69:db:61:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1B:CD:93:C6:36:FC:71:A0:02:56:CD:1C:67:14:90:F5:0D:B8:DB
X509v3 Authority Key Identifier:
keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d1:87:4d:d4:27:c6:31:d8:e2:f8:83:59:40:5a:b5:09:ee:
cf:2f:8e:6d:f8:72:5e:b9:ed:7d:8c:03:b7:59:05:73:bf:d8:
d7:c5:ac:e7:7c:3e:1e:6e:38:f6:2e:83:2a:c2:b5:1d:28:aa:
95:6b:7d:ee:ae:1d:5d:bb:5c:9c:05:27:76:d3:5c:71:3b:55:
d5:0e:65:66:62:fc:32:b9:9f:a8:be:e3:b6:1e:9d:50:86:d7:
20:cf:ff:f4:7d:41:69:6b:43:0e:23:4c:24:45:9e:41:56:8e:
04:c6:c2:b7:d8:31:0b:4b:4e:0b:63:60:5a:c2:fa:22:b7:7b:
24:05:ef:b9:96:2b:56:67:a3:35:84:4b:00:90:f9:ec:1d:c8:
4a:b3:8b:e0:68:88:8b:a8:48:15:70:c8:f1:58:d6:79:d7:f4:
ba:26:82:13:41:ab:6a:77:7a:3d:4a:e2:d2:1c:8a:6f:78:4a:
5b:d3:7c:6f:fb:9b:02:7b:76:72:5a:19:59:13:12:64:a7:c5:
23:c3:8b:ee:d1:7b:02:4c:ba:4f:37:20:52:ed:cd:03:b2:f6:
9b:a4:12:56:30:fa:ae:57:16:90:c4:54:40:1b:9f:12:72:06:
16:45:6a:fb:0f:ec:03:ee:c0:97:b3:c7:d2:98:59:d4:ef:96:
cd:53:e4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:57 2025 by rpki-client