Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier: vaS5GejSLN+5y9B5DOuTeaah1+JoMABoa6uwpH7odxE=
Subject key identifier: 4A:69:E9:FC:30:BD:69:27:47:1D:20:38:59:53:B9:90:F8:2B:9F:DB
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial: 0194BC72F17297E24CC44FDD020528FAF0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number: 0409
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: Ya49kapmwhVCLJIGYRe1g4p+OZixDBJ9Zj0FOCh8kUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f1:72:97:e2:4c:c4:4f:dd:02:05:28:fa:f0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=4a69e9fc30bd6927471d20385953b990f82b9fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:4c:d2:b9:00:33:73:ed:e1:0e:06:ce:c8:
f1:69:92:fd:4d:de:20:ad:43:37:2f:ca:fc:dc:c5:
48:07:b6:e9:69:42:77:fb:27:a6:f6:8a:57:21:f4:
b0:5e:1b:aa:ba:6b:82:1f:ad:43:52:01:4c:9e:fe:
62:09:85:37:27:6c:99:bc:1a:02:0e:89:5a:c8:27:
7d:21:bc:ec:2e:67:73:1a:38:ae:33:5f:9c:24:d1:
5c:35:d2:20:26:16:88:32:10:48:c8:08:05:fa:d1:
df:b3:ce:50:45:7a:ea:ec:d5:5f:b8:47:c7:22:e9:
32:df:d1:bd:0b:b7:8c:42:21:3a:0c:7e:02:c2:5d:
02:b2:c3:be:88:82:6a:ed:f4:16:b2:19:13:49:47:
7e:9d:99:f0:d7:a6:0e:31:de:47:6d:0e:e4:fa:dd:
0b:b2:39:d8:63:d2:0e:3c:19:e6:d6:e4:b5:3d:11:
02:01:4c:6a:93:9a:ea:00:5a:67:ef:9e:46:5d:11:
66:74:ef:c2:58:f5:16:09:09:5d:77:1e:96:fc:c1:
02:d3:c9:d1:79:77:88:e0:b1:8e:71:e0:02:ed:75:
d8:03:e5:3f:91:0c:f1:74:eb:b0:be:6a:20:cd:d3:
e7:21:0d:82:26:b3:a8:01:e9:de:ec:fe:bc:75:a2:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:69:E9:FC:30:BD:69:27:47:1D:20:38:59:53:B9:90:F8:2B:9F:DB
X509v3 Authority Key Identifier:
keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fa:c2:8d:34:6d:e3:61:66:b6:3d:25:29:c9:d4:98:d9:49:
53:d2:06:09:36:0d:20:df:ff:5b:9f:d6:a4:e9:1a:e8:a4:ac:
bc:d8:9b:3b:0e:13:de:55:3d:52:c3:04:fa:59:91:96:b7:32:
59:12:23:18:bb:a2:cf:3b:01:ab:0f:49:11:47:76:d8:99:4b:
b6:31:78:04:3e:d2:d0:66:62:c6:62:33:a2:60:8b:b5:aa:56:
60:70:6c:ec:3b:b8:89:18:c7:a3:9a:a8:c6:46:00:fb:11:62:
0e:e3:80:e7:53:2d:1e:12:0b:e0:50:7d:fa:ee:73:1c:13:f1:
fa:27:f9:0d:83:ac:2f:5b:16:bf:6d:42:5c:32:d9:94:56:9c:
84:f8:13:18:7a:d9:6e:59:b0:f2:01:24:68:93:ed:b5:40:4b:
85:bd:3b:79:45:71:7a:5e:dc:65:d0:4e:09:09:53:e3:f7:af:
97:9d:dd:1f:b1:e2:42:fd:a0:b8:5b:e5:df:da:c3:6a:c3:41:
67:45:6e:e4:92:97:23:58:70:6a:68:2f:1a:48:9d:84:ec:a0:
13:d8:40:47:b9:97:1f:57:02:5d:59:5a:11:35:5f:d9:e6:95:
ba:fc:2c:8b:97:ad:66:03:9e:8b:cc:10:bb:28:10:8b:4e:67:
15:4b:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:33 2025 by rpki-client