Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier: iS98z/3Dbs+jm99l+aHf8EWjS5BWbCP44Q14GA8Ocpk=
Subject key identifier: D1:7C:78:C1:5B:DC:AE:70:C7:69:DE:12:27:A3:13:73:8C:B9:86:6E
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial: 0194BCA9E951495033CB6B0FD84133B7629A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number: 07A9
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: igg4NM9op+TfpZq3UTZRhNo7lnJLH9/AfFki1w+OOFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e9:51:49:50:33:cb:6b:0f:d8:41:33:b7:62:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=d17c78c15bdcae70c769de1227a313738cb9866e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:b5:98:d7:4d:b3:ed:c0:53:f4:cc:d3:7d:
1e:ee:f7:9c:b7:37:09:99:05:0f:59:6b:e4:88:dd:
64:49:cc:61:21:6b:ba:a1:8b:3b:27:23:be:7d:a5:
af:d7:0f:44:49:e0:a3:b2:45:f4:11:a7:d6:b0:ff:
59:e7:7a:e1:db:b7:bf:c6:57:f6:cc:f2:b1:49:d9:
11:52:b0:8f:0e:91:f7:ad:1a:3d:73:c8:a7:ee:d0:
0f:3a:a1:65:c1:2c:90:e1:bd:1a:ee:35:e6:99:60:
7b:fe:79:e2:2d:c2:90:d1:c6:8b:ff:4f:24:7e:74:
c8:62:73:42:ad:83:7a:b4:94:e1:c1:75:b9:6e:d7:
d2:ff:98:a8:63:a6:37:1c:d8:93:4e:0b:c8:40:02:
23:27:80:d6:b7:d7:65:8d:c1:4e:ec:24:2c:96:22:
84:f2:db:c7:4a:06:d8:17:d5:d2:cc:4b:f6:e4:c4:
a8:c7:14:87:ce:e4:4b:92:ba:06:b3:52:43:f2:9e:
9d:f5:0d:06:ac:f9:94:72:36:a3:09:9a:a1:c2:38:
d9:62:89:b8:34:2e:8e:99:46:2b:ea:07:d2:7b:ab:
59:b2:cb:05:9a:51:0c:05:8f:fc:10:23:0b:d2:b9:
95:44:26:20:fc:6c:41:79:b2:e7:26:32:fe:80:8f:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:78:C1:5B:DC:AE:70:C7:69:DE:12:27:A3:13:73:8C:B9:86:6E
X509v3 Authority Key Identifier:
keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:72:2e:fe:4b:1f:70:95:47:61:13:7a:e8:69:ef:c1:c6:aa:
63:26:82:3e:60:bc:ca:4b:66:95:af:40:74:53:dd:4c:82:49:
19:2d:ec:fe:9a:cc:8c:45:8d:1e:16:0c:b3:67:fe:b0:11:f2:
78:33:e9:b1:79:08:16:e0:60:73:5e:e6:c4:09:6f:89:70:92:
9e:09:36:04:a5:c7:ad:25:78:36:a4:29:01:53:e2:8b:15:4a:
91:ad:1c:4a:69:d0:d2:6b:29:10:8e:04:88:a9:0d:12:01:0a:
26:f2:cb:02:91:d1:57:1a:28:09:c7:8e:08:5e:fb:52:c2:8b:
c9:37:f5:fe:2e:85:01:1a:71:38:df:6c:57:84:3e:d6:86:5c:
c0:7d:78:e7:80:d8:f4:4c:1b:a1:94:00:3a:fe:47:89:34:7f:
63:28:5a:c0:ab:6e:18:c6:df:35:d1:b2:10:32:ad:c4:a9:7b:
98:34:1b:70:8e:69:17:5d:92:34:f9:ad:d5:73:ce:76:a9:3a:
6e:1a:65:c1:3e:98:c4:9b:4e:56:3f:21:81:c4:7b:09:d8:ec:
f4:71:ea:57:c6:19:1b:5a:7b:ab:dd:30:96:84:ae:92:9d:a9:
fb:60:d3:be:19:8c:dd:52:89:51:3e:fe:35:c2:69:e5:50:a4:
00:5f:ed:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:48 2025 by rpki-client