Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier: Sy7jQ1MCu+34616M3pGVbiYWaUhGAAErY0JTK6jGv2g=
Subject key identifier: CA:C0:47:49:36:91:C2:04:33:CB:D8:41:B9:15:2D:DE:C9:B0:2C:27
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial: 0194BC72FF326561B224B83475B9E6610F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number: 079B
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: KV8qNcMLT7kbeA+caMNdXC4ZwuTMixR8ZkfjhHmVrZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ff:32:65:61:b2:24:b8:34:75:b9:e6:61:0f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=cac047493691c20433cbd841b9152ddec9b02c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:a7:c4:42:d6:11:0b:f9:aa:93:66:38:cd:
cd:88:66:81:be:a1:c9:76:65:31:89:f8:2f:41:dd:
2a:57:49:10:c3:30:78:b5:69:10:46:84:ab:17:bf:
27:9a:a6:91:b4:a7:f4:23:63:de:f0:89:4d:31:97:
90:9c:5f:e6:73:ef:54:69:f1:53:3b:fd:6a:f1:bc:
3e:a0:cf:63:93:1c:24:6c:b1:de:0b:00:69:e6:b5:
2e:03:3c:fc:a5:db:63:c9:5d:22:8a:cc:6a:0c:46:
e3:c2:72:e6:d6:59:9e:10:00:d0:18:cd:04:b8:d9:
b4:5f:88:6c:71:ef:25:6a:44:cf:0c:72:e8:70:4d:
cc:85:17:7e:02:60:8d:91:cc:8f:e1:13:86:d0:13:
19:7e:4c:2c:1b:96:da:7c:33:52:32:e8:a9:12:f9:
78:a4:4d:d5:47:88:c9:f8:41:5c:ba:c6:80:f0:8a:
46:4c:03:90:61:bf:c5:f0:fb:b4:fa:e7:d4:0b:da:
0f:70:6a:ed:c6:d9:ff:5f:bf:bc:17:ca:5c:e4:aa:
1c:63:a0:96:bd:ef:5e:33:88:27:1c:28:18:ca:51:
f6:e3:3c:82:24:30:1e:46:c8:dd:30:38:23:67:5c:
2d:f6:a2:f9:ca:4c:d7:95:be:80:6a:7a:31:19:53:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C0:47:49:36:91:C2:04:33:CB:D8:41:B9:15:2D:DE:C9:B0:2C:27
X509v3 Authority Key Identifier:
keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fc:94:4b:61:79:bb:88:4c:6f:60:91:71:aa:13:94:74:c8:
79:e5:7b:33:1c:39:e6:f6:73:ce:11:ff:c2:ce:70:92:50:21:
e6:6e:34:78:ea:cf:71:ba:f7:13:0d:4d:22:16:5c:b0:00:1f:
21:04:91:9a:cd:67:56:2f:b7:1f:58:bf:15:d8:5f:95:60:92:
91:6a:b0:80:0d:49:3a:4a:d3:19:a9:c8:b1:97:66:8c:a7:ce:
40:0f:8e:c0:c1:76:88:e8:08:73:a7:15:5d:aa:f9:ae:e9:7b:
7b:96:9e:8c:f5:81:9a:b6:ab:20:31:0e:49:d2:3a:47:15:09:
5a:ac:c4:4a:de:56:53:52:12:95:ee:64:65:5a:a1:08:88:e2:
58:33:30:fe:66:78:6a:22:28:86:4f:56:08:13:ad:cf:ec:e1:
53:8a:9b:c8:a3:65:ee:8d:d9:0c:e4:38:f3:9d:e5:92:ac:ba:
11:a3:62:38:fa:0f:24:48:97:89:04:81:0a:0e:e4:2e:a6:6c:
c2:a5:58:b1:49:fd:ce:4e:5a:6e:ae:a8:75:8b:90:c2:95:48:
c6:67:c9:72:2e:bd:0e:6e:9e:72:b4:33:f9:29:39:4f:3e:ea:
3d:e0:55:45:0e:84:e7:89:de:32:86:4e:dc:bc:3d:ef:a2:12:
ef:2b:62:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:05:50 2025 by rpki-client