Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
File: cfxj7vZnTya1A6gwpd-pU9L_qr4.mft (raw, json)
Hash identifier: /PtBPZU2/E21fKHR5uEBrqTViBGAvMMoV0Egt9LPOV0=
Subject key identifier: 60:38:F4:AA:28:49:92:A1:5B:F4:EA:2E:F5:AA:7F:B9:EB:48:57:FF
Authority key identifier: 71:FC:63:EE:F6:67:4F:26:B5:03:A8:30:A5:DF:A9:53:D2:FF:AA:BE
Certificate issuer: /CN=71fc63eef6674f26b503a830a5dfa953d2ffaabe
Certificate serial: 0194BC3C22427FFEB40F12FB684A9D69BCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
Manifest number: 1292
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: cfxj7vZnTya1A6gwpd-pU9L_qr4.crl (hash: 65GkpM2GCmT3+ICngwthkUcp/3HiLJSxPyZ/qgTX7dw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:22:42:7f:fe:b4:0f:12:fb:68:4a:9d:69:bc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71fc63eef6674f26b503a830a5dfa953d2ffaabe
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=6038f4aa284992a15bf4ea2ef5aa7fb9eb4857ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:5d:8d:5f:b1:07:6d:44:ca:bd:8f:49:8a:
2f:f1:9a:f4:d4:0f:d9:07:79:a0:57:2c:35:d3:59:
89:a4:39:e3:36:b0:45:5b:22:c9:9a:16:49:3e:bb:
92:63:56:72:da:2d:66:1a:48:e1:9e:55:f9:de:4b:
39:98:77:00:26:8f:05:05:81:9f:b7:5b:a6:88:40:
02:5d:98:6f:74:c3:7f:a8:0e:98:eb:5e:70:93:84:
1a:7e:59:12:b2:d9:41:69:08:e4:04:4e:62:69:a4:
66:70:5c:f3:12:0e:2d:a8:ee:4a:9f:af:6c:74:a1:
fe:f6:f8:af:69:e1:a5:a9:3b:8e:54:6d:fb:3e:d9:
09:b4:d8:23:b0:ef:87:8d:4d:30:89:2b:b6:2f:7b:
78:e2:5a:0f:e5:4c:c5:c2:20:17:cd:69:0c:08:33:
ee:f0:86:d8:98:62:9f:19:a2:5c:c4:10:af:af:53:
25:0f:e3:4d:8d:81:30:43:2a:75:5a:c7:f5:0d:9f:
32:0e:cc:77:f3:3a:90:43:89:fa:84:01:14:d4:6a:
7a:28:d9:59:7b:de:d4:dd:9f:4c:55:90:e9:ab:be:
ba:40:ba:0e:5c:e3:ee:78:b3:17:55:26:35:73:b5:
83:5a:c5:46:7b:4d:94:a8:7e:ed:6e:a7:11:62:8a:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:38:F4:AA:28:49:92:A1:5B:F4:EA:2E:F5:AA:7F:B9:EB:48:57:FF
X509v3 Authority Key Identifier:
keyid:71:FC:63:EE:F6:67:4F:26:B5:03:A8:30:A5:DF:A9:53:D2:FF:AA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfxj7vZnTya1A6gwpd-pU9L_qr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8010e-6a3f-4ff0-95e7-d418248e5728/1/cfxj7vZnTya1A6gwpd-pU9L_qr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c8:d5:ec:80:28:a4:0c:69:30:3a:29:ce:c6:a2:5b:3b:08:
20:99:83:83:78:52:f1:5c:12:9c:98:61:5a:69:56:2f:83:55:
97:aa:99:21:7c:7d:64:e2:e7:ed:cc:7a:fd:b8:ea:09:cd:2c:
ac:1a:eb:73:d4:aa:38:39:de:7a:c9:ab:d8:1a:fb:fd:40:fd:
3e:56:d3:ec:6a:09:f0:fd:a8:53:04:8d:a3:68:fc:37:e2:9b:
fc:b2:65:21:58:79:a3:41:9e:99:e2:f2:92:8b:9b:ef:73:ee:
eb:b6:e3:01:f0:88:f3:db:9b:ae:26:a3:f0:1d:36:61:d5:e6:
81:7a:d5:94:58:32:c8:03:cf:db:ad:91:fa:6e:91:31:c2:c7:
0a:b5:e8:08:ac:09:62:e4:be:01:22:bb:b9:b8:63:d0:bd:ba:
ae:fb:cb:aa:1b:0b:b9:38:82:8f:48:79:e7:7e:5a:c4:86:2e:
28:6f:da:f1:91:00:23:3a:cd:90:7d:13:97:da:7d:b4:0d:c6:
fb:9a:ac:62:42:29:3f:f7:7c:e4:be:83:37:00:d7:ca:25:06:
7d:42:5b:c6:7f:d3:23:21:9d:81:70:b2:2e:48:69:fd:b7:bb:
31:21:1b:18:32:77:19:55:7f:e1:0e:2f:67:b4:8c:35:4f:fd:
9b:97:9d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:44 2025 by rpki-client