
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: wt6dET2UVAvBvbIG5o13l1/r0M1GxFvJE2dgNhKRqHs=
Subject key identifier: FE:67:02:C3:BF:9A:3A:D6:7B:69:47:3E:8F:53:EC:2B:4F:57:D1:B7
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 0194BBCE56FE8B01E0D807512D52CB1ECABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: 3iO+vl4uxSjR8EAcr2eW+5nAFGvYQ5cFzHYt3U0Xwuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:56:fe:8b:01:e0:d8:07:51:2d:52:cb:1e:ca:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=fe6702c3bf9a3ad67b69473e8f53ec2b4f57d1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:69:01:99:a6:0b:6b:a5:98:55:21:85:77:
59:e5:e6:80:0c:d0:64:7d:f9:25:57:e5:56:7d:c4:
0a:af:8b:e2:cc:8b:33:bd:2b:db:18:5f:be:9b:65:
a2:c0:b0:5c:c3:0c:07:a1:c3:97:52:c8:ec:57:b7:
c1:ce:41:5f:25:50:1d:9e:3f:3b:08:19:b4:2f:f9:
ad:aa:0a:34:9c:34:b5:2e:5b:d5:8c:a5:71:e8:cc:
60:e4:b3:ae:4b:9b:ef:87:d8:7f:28:65:34:7a:cf:
2d:d1:71:c6:74:57:ba:75:e8:66:26:81:1f:63:3c:
4d:89:42:93:9d:13:bf:55:71:1b:03:a0:b0:bc:fe:
50:b4:79:95:b6:de:0d:0b:4e:f6:25:43:6f:53:87:
b9:fe:d2:a0:a3:f5:df:11:19:41:d9:2b:0c:30:3a:
3a:b0:f6:b9:46:50:1c:a4:bc:98:35:be:79:da:c1:
86:4f:0a:c9:e7:59:95:5a:9c:ae:ba:99:28:7e:86:
b5:c4:6f:9f:80:6c:97:f4:46:c7:11:c8:66:c9:87:
11:9b:de:af:c2:fe:2e:e8:a3:fc:40:e8:f7:62:1d:
43:02:3a:42:66:06:32:b0:81:b4:1b:32:82:40:32:
b7:ef:1b:0a:09:f9:fe:ed:0e:bc:7a:c7:31:9e:27:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:67:02:C3:BF:9A:3A:D6:7B:69:47:3E:8F:53:EC:2B:4F:57:D1:B7
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:dd:06:ad:5a:ee:dc:e1:44:46:a5:41:6d:89:79:3f:f2:9d:
ad:eb:f2:8e:36:5a:29:0f:c2:3c:1b:8f:82:a6:3a:93:a9:54:
6f:8d:29:47:9c:c0:f4:c3:91:67:13:5b:4d:1f:8b:12:f8:dc:
98:b4:15:77:d6:c5:e0:06:71:9d:c3:01:21:ea:ed:99:32:7e:
71:48:dc:8d:78:66:86:58:81:0d:c9:d7:5c:c6:9a:57:ed:0a:
ea:50:7c:20:fc:ee:0e:d9:a5:cd:85:14:29:a7:0c:08:7f:c2:
8c:25:1d:a0:0e:2c:ed:3b:8b:c0:d6:e6:da:ab:10:bb:b0:82:
9b:6a:d9:92:d2:87:ed:f5:7a:4b:cd:2f:a5:1a:ed:89:98:53:
ca:d9:bb:a4:ce:cc:8a:1a:3f:58:83:7c:2c:a8:0e:1a:ed:83:
a2:6c:4e:e4:83:f8:ba:de:ea:e7:bb:5b:cc:e9:64:a2:47:0b:
8f:5e:a4:4e:b5:d6:9b:19:5c:27:39:44:24:67:2b:40:d1:cd:
ec:23:9f:db:0e:7a:d6:46:8b:1c:be:9e:2c:33:9c:21:6b:d2:
d8:b9:ac:73:f7:10:f0:41:f7:f0:b4:c4:cb:5e:7a:97:7f:de:
96:9b:1c:a1:fa:db:94:f1:a9:e6:63:89:60:c1:9f:5d:e4:5b:
14:7c:83:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:00 2025 by rpki-client