Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
File: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft (raw, json)
Hash identifier: 2soi9DZmOcIgXPNpz7da+OmcgH1wEgVUZX3myrSTWkA=
Subject key identifier: FF:C1:0A:CB:B1:13:72:E9:06:E1:D9:5F:C1:97:89:A8:E6:8C:3D:3D
Authority key identifier: E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
Certificate issuer: /CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Certificate serial: 0194BD85A0DED5C16E26B3BDEA88561D616C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
Manifest number: 018C
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl (hash: XHJTKL/m7iaPNwx8hBAZn6+VnpPVf7R3g2djSol8omM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a0:de:d5:c1:6e:26:b3:bd:ea:88:56:1d:61:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=ffc10acbb11372e906e1d95fc19789a8e68c3d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:22:a4:f7:c0:26:05:71:60:9b:84:0d:5b:
e7:63:a0:55:03:34:a5:4a:2f:32:48:e1:f5:54:4b:
1d:08:82:6f:5f:66:88:22:19:89:d6:95:db:ca:97:
db:bb:70:1a:d8:5a:b7:ed:21:33:6d:29:f8:47:cd:
52:1a:a7:31:1d:f6:59:22:9f:7a:52:2c:bf:c1:42:
ef:13:47:ed:df:6a:f8:d7:20:f7:e7:e5:52:ba:7b:
95:7c:b2:07:c3:1a:7e:b7:e8:e6:ef:4d:72:84:08:
e7:46:1d:d2:51:ba:ed:15:60:a0:f7:fd:e5:77:6e:
22:36:2a:ae:fa:4c:22:77:18:0e:b4:3f:42:24:cb:
ed:68:7c:ab:f1:20:6d:fe:3a:fe:4e:80:cb:a2:59:
bb:16:65:f6:7a:0b:d4:4d:d5:ab:a1:9c:43:74:a9:
6e:42:da:7a:93:5f:de:c3:52:7d:31:09:48:b4:b1:
c1:6c:41:92:48:e5:55:5a:39:bb:65:50:a9:ba:6c:
a5:0e:52:d6:bd:e1:99:1c:64:f4:e1:b7:99:e6:60:
f9:60:40:f3:80:f9:82:aa:e5:67:eb:ac:16:b1:40:
69:31:f2:35:fc:cf:e5:91:4c:0d:0d:57:06:ec:3a:
94:10:32:d0:5e:8c:52:e6:01:ef:22:e3:d4:f4:6b:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C1:0A:CB:B1:13:72:E9:06:E1:D9:5F:C1:97:89:A8:E6:8C:3D:3D
X509v3 Authority Key Identifier:
keyid:E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c8:a9:7c:78:68:7e:46:a2:20:aa:20:c8:4e:00:d0:f1:23:
b5:b1:95:7f:08:6a:b6:e8:a5:0a:95:72:05:63:74:5b:b7:cb:
9b:9b:dd:58:15:72:ce:54:94:ac:d6:b2:76:e2:64:b4:7f:ca:
fc:ad:47:32:8c:ab:bb:aa:9e:95:4c:66:11:6f:aa:44:93:ed:
a4:04:14:3b:37:1e:bb:e8:a3:87:09:8a:c7:4c:ec:a2:2f:3f:
42:e6:05:8c:8b:4f:e1:30:d6:51:3a:5d:ad:4e:7e:0f:8b:47:
a2:aa:ec:e4:e9:4c:60:5b:d9:2a:ec:04:60:5e:8c:0e:8b:53:
15:22:f6:cd:97:87:84:47:bd:86:51:03:95:db:5c:fe:18:31:
bb:06:e1:61:b0:ec:ef:9a:d0:d6:9e:34:c4:a1:10:0c:93:96:
88:ba:c4:de:f8:5e:d2:da:10:8a:cb:ff:48:1a:e6:53:75:4b:
8a:63:a4:ec:d1:98:d6:90:43:20:42:ae:07:1f:a3:75:38:cc:
01:19:72:b1:86:75:fc:df:53:21:10:3d:22:64:07:a7:23:33:
79:f8:0f:1b:85:ac:02:54:bb:a0:1e:d3:a6:7a:a6:4e:28:b0:
19:c6:e9:23:7a:f9:41:60:2c:79:cf:d4:d8:2a:02:f6:07:c0:
7e:91:d6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:45 2025 by rpki-client