Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: tzuULkFaw/pMEnHQfzBKwuL/3PF2s++SwViC+0gOYWc=
Subject key identifier: B3:26:55:3E:2A:D7:23:36:1D:C8:B0:91:83:88:C2:60:61:29:4D:6D
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 0194BD1806B53F9581A12CC51F909E4C1911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 1391
Signing time: Fri 31 Jan 2025 16:00:55 +0000
Manifest this update: Fri 31 Jan 2025 16:00:55 +0000
Manifest next update: Sat 01 Feb 2025 16:00:55 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: WAEEW/wVlB77trQ++sOvWcXEoWFzzXAe42ms5V32358=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:06:b5:3f:95:81:a1:2c:c5:1f:90:9e:4c:19:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Jan 31 16:00:55 2025 GMT
Not After : Feb 1 16:00:55 2025 GMT
Subject: CN=b326553e2ad723361dc8b0918388c26061294d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:66:9b:09:14:06:72:cb:a6:98:cb:b1:f7:
ef:3f:f4:d6:78:9f:76:2d:19:f6:f6:9b:77:b2:ea:
c8:73:53:89:93:b3:fa:0d:72:fe:56:93:8a:f3:5c:
60:ed:cf:a8:5d:11:e3:70:54:f9:92:1d:54:5b:c3:
28:64:46:ac:5c:85:69:45:58:06:42:da:98:33:eb:
01:24:24:40:dc:82:7c:7a:72:d7:ad:98:54:7c:34:
ac:4a:7c:f2:c2:4c:ef:74:fd:ac:d1:0d:42:b7:bb:
14:d6:21:07:f7:8c:4d:5a:9e:6d:93:a0:d2:d1:57:
54:b9:76:83:a0:fb:4c:0c:1a:54:89:35:69:fa:67:
dc:82:63:56:a0:3c:f6:2c:dd:94:04:32:f9:44:c8:
2f:0f:6d:99:c6:e5:f8:8f:2d:d4:fc:06:69:08:bd:
19:e9:2c:07:59:4e:72:dd:82:4b:f9:3e:4a:4f:53:
97:e5:47:b4:90:1e:53:1a:a5:1d:b7:4f:5a:e9:0e:
19:87:b3:a2:93:8b:a5:29:ef:ef:f0:0f:43:03:87:
d8:96:74:84:19:8c:4d:e8:d9:64:7d:bf:dc:da:ee:
62:9f:a8:e0:61:a4:8f:4b:0e:3d:0e:f0:9e:06:a0:
a4:7d:c6:a4:40:c2:e9:8a:e3:0e:7e:d0:b0:d6:64:
93:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:26:55:3E:2A:D7:23:36:1D:C8:B0:91:83:88:C2:60:61:29:4D:6D
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:aa:a1:bb:9e:7b:ad:ae:58:cf:aa:62:ff:ba:1e:a3:3f:45:
c9:62:b8:77:07:4a:1c:63:33:d9:49:62:52:82:bf:1c:f5:7c:
fe:81:25:56:a1:f6:a2:50:cc:d6:f8:02:3a:c1:4d:a9:19:80:
8d:05:aa:66:07:1b:df:ce:52:c0:fa:f5:2b:8f:eb:06:cb:57:
91:df:bb:1d:91:60:78:b4:b4:d1:ed:d6:d8:60:d1:80:0a:a4:
2a:4b:5f:95:1f:d2:73:71:9d:ac:57:7c:ec:fa:83:0b:e7:59:
e2:43:a3:db:f6:01:18:91:16:35:48:26:f7:e4:a8:f2:c3:c5:
93:2a:e0:05:54:e8:b3:d3:0e:c7:b6:6c:ab:ed:d0:4a:a8:3c:
e3:9d:86:6e:fd:88:df:f9:4a:2d:37:2a:1f:f1:0e:2b:b9:47:
25:9d:cd:23:2b:32:59:2e:bb:f6:2e:88:ec:40:f4:23:b9:64:
69:f4:fe:2a:89:3c:d2:30:cf:24:5c:87:71:24:2a:3c:2b:a5:
37:bb:04:8e:90:e6:67:32:02:b0:f7:9f:31:7e:29:30:04:18:
39:96:0a:04:29:6f:cf:d9:10:f8:01:be:be:16:8d:4a:dd:a0:
42:3f:04:0b:92:ea:ef:3d:6b:da:a1:15:9d:38:0e:7f:0e:d1:
63:bf:b4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:52 2025 by rpki-client