Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
File: h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft (raw, json)
Hash identifier: wg2ukB5npOTdVzguYDKLi5ssw44bDteBicXNXQYRcnc=
Subject key identifier: F8:74:CB:34:0E:89:A8:5B:FB:7A:8C:4A:1A:4A:BC:D5:05:3D:A6:EC
Authority key identifier: 87:C0:A7:B4:3D:42:92:49:17:A5:90:59:8B:44:32:5E:4C:C9:2E:E4
Certificate issuer: /CN=87c0a7b43d42924917a590598b44325e4cc92ee4
Certificate serial: 0194BCAA14D1C7ECB71F34D24C4F5DE0C9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8CntD1CkkkXpZBZi0QyXkzJLuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
Manifest number: 07FE
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: h8CntD1CkkkXpZBZi0QyXkzJLuQ.crl (hash: +FsJ5LwoN/VtR5fl1I+G5LlBAUSkVwR0vna2Er4lvRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:14:d1:c7:ec:b7:1f:34:d2:4c:4f:5d:e0:c9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c0a7b43d42924917a590598b44325e4cc92ee4
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=f874cb340e89a85bfb7a8c4a1a4abcd5053da6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:3e:7b:49:78:27:6d:2c:e2:a1:92:b0:47:
2d:44:c4:db:98:1e:1e:cb:02:1b:41:ee:3f:6a:92:
b3:f2:4c:98:6b:6a:5a:44:8b:34:74:89:15:8b:52:
0f:75:5f:3b:23:0a:b0:b9:a8:0b:95:c9:2f:12:67:
36:a4:e3:dc:cd:1d:b0:7a:53:cb:6e:01:73:8c:26:
93:cc:0d:44:c1:ac:f9:76:c5:3b:0b:a1:3c:ec:3f:
b6:54:bd:00:2c:28:86:66:7b:34:d1:5c:eb:d7:d4:
1f:e8:7d:97:ee:15:5d:59:51:fb:39:82:d6:f0:25:
2e:81:3e:1d:cc:14:fc:b7:b6:33:11:98:40:69:0b:
02:05:d5:44:e8:26:72:2c:97:c8:39:f3:37:99:37:
30:a1:ca:a9:5e:63:07:09:94:cb:67:58:ff:ba:60:
45:5f:cc:3a:36:0b:98:52:04:89:00:c2:8f:90:7e:
c3:54:9f:b8:cf:c7:14:c7:c1:d1:6b:b2:3f:23:1e:
3a:f1:ef:c5:0e:ce:38:2d:d2:bf:97:ad:e1:d4:99:
09:b5:bd:af:aa:65:ab:32:d5:5a:82:be:bd:2e:ea:
23:61:58:ac:c5:00:31:a0:aa:ed:ba:b3:27:a8:a2:
25:fa:d8:2f:b1:23:78:26:75:6b:b4:79:9c:46:f0:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:74:CB:34:0E:89:A8:5B:FB:7A:8C:4A:1A:4A:BC:D5:05:3D:A6:EC
X509v3 Authority Key Identifier:
keyid:87:C0:A7:B4:3D:42:92:49:17:A5:90:59:8B:44:32:5E:4C:C9:2E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8CntD1CkkkXpZBZi0QyXkzJLuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c9:c9:73:0a:ff:34:4c:1b:e1:e2:4a:19:b5:f4:97:dd:ee:
ac:b0:1a:62:aa:37:98:3d:bc:90:df:a4:33:12:e9:fa:d5:22:
76:13:48:ce:a9:b5:6e:66:03:be:1b:4e:f2:0c:d8:28:81:4a:
a2:f8:d6:61:14:4c:5e:2a:3d:6c:e0:14:b3:99:90:fe:86:05:
55:22:97:ef:f8:e7:1d:8c:82:0a:1d:37:ef:f7:0c:a0:6b:89:
c4:a2:b4:9a:04:1e:e8:b9:65:a2:0b:54:4b:2a:f7:a7:b4:c0:
7e:06:cd:d3:5e:f7:2c:cc:05:96:39:e1:10:41:93:d6:99:5c:
de:fc:00:42:c5:a4:e6:96:ab:2e:3f:74:7b:ed:f7:8e:33:d5:
96:f4:74:df:35:47:90:38:fb:12:a7:bb:78:89:6c:21:01:66:
ab:7a:44:b8:83:55:9e:37:6c:29:44:bb:f9:c3:d5:d2:a4:04:
48:37:7a:87:3c:b0:d0:0c:99:f3:ed:ea:ec:0f:64:1d:1f:81:
8d:a1:ee:9c:17:66:64:a7:0d:0d:94:c4:79:9b:77:ff:67:25:
47:bb:ba:c6:ae:f5:1b:e8:4f:87:82:aa:4c:e7:f6:66:d2:cb:
87:f2:2c:78:e4:8f:8e:82:fc:b0:b5:84:86:82:a2:b7:2d:84:
32:1e:4b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:19 2025 by rpki-client