Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
File: R7cYcu1kXJZm1VEavHjwfE06uKw.mft (raw, json)
Hash identifier: 7sKij3WHS5oVXBwbSrZJhD79x95FyHYYOMu84zJCOns=
Subject key identifier: 52:40:07:F4:1D:A3:23:BF:F4:23:47:79:2A:62:C6:45:1B:17:18:34
Authority key identifier: 47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
Certificate issuer: /CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Certificate serial: 0194BD4E6115B6163451AF7EB1520B085078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
Manifest number: CF
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: R7cYcu1kXJZm1VEavHjwfE06uKw.crl (hash: 4SpNheq/c/ESKL6a8Q/lfVPy3hW+Qib6G07KaFNfaLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:61:15:b6:16:34:51:af:7e:b1:52:0b:08:50:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=524007f41da323bff42347792a62c6451b171834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:c2:6d:34:7f:3a:50:9b:1f:3f:33:4b:b3:
bb:80:32:e7:06:bc:dc:a4:72:fd:41:89:4f:04:35:
81:f1:5e:16:d3:35:3a:5d:fa:81:c4:38:41:11:26:
b3:80:8b:79:e3:43:b5:a1:b9:91:ba:b4:52:38:69:
7f:0e:a5:1a:35:fe:6d:03:1c:fb:25:11:55:b6:f6:
b6:a9:e8:18:71:dc:22:da:91:d9:2d:3e:3f:fe:8c:
79:15:c8:48:26:75:fd:19:7b:69:34:0a:45:4d:1b:
26:74:ef:db:f2:04:45:87:2f:b9:07:6a:ab:2f:9c:
92:73:70:25:33:a7:ff:c8:21:9c:94:f5:e9:e8:53:
43:e1:84:d0:74:10:2e:8b:56:4f:2c:52:84:62:b5:
3e:ba:0f:eb:5c:55:b5:55:49:dd:59:14:6a:91:3d:
64:30:84:9a:fb:9e:38:ba:ac:a3:26:e1:70:d0:76:
3d:79:c0:54:f1:47:dd:76:2b:8b:0e:c6:17:d6:c2:
b9:ce:1a:13:5d:7d:e3:61:0b:b7:15:20:cf:7b:dd:
cf:c1:81:ab:f8:5f:02:54:bc:b5:38:c6:76:ee:81:
0f:5c:25:07:3d:90:5d:56:60:21:9c:3a:2c:37:65:
4b:e6:14:81:3d:70:c6:06:52:3d:02:a0:cd:e2:c3:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:40:07:F4:1D:A3:23:BF:F4:23:47:79:2A:62:C6:45:1B:17:18:34
X509v3 Authority Key Identifier:
keyid:47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:79:ae:61:5f:11:02:36:44:80:8f:54:de:71:32:42:5e:1a:
f8:97:ed:dd:e0:25:16:0f:3d:a1:2c:53:11:a7:55:09:08:ec:
7e:cc:3b:df:aa:bc:b4:7c:4f:cc:45:7d:09:64:4c:24:14:77:
64:09:2f:86:d8:27:0e:f0:e5:f8:73:61:e0:eb:52:b6:c7:b2:
79:7e:10:db:59:d9:6b:af:16:63:c1:44:32:b4:f0:4f:59:96:
2d:24:c5:95:1d:d1:9d:04:0c:4a:42:06:be:1f:74:ae:3c:bf:
da:80:1b:32:b0:78:76:e9:c1:7e:bf:1d:b0:f0:5f:7a:53:7a:
80:bf:a6:48:3d:cd:25:1b:43:82:96:af:3c:ed:dc:9f:18:30:
bd:bd:e3:d2:16:c5:82:a8:06:06:63:3a:8f:18:34:6e:e2:ea:
c1:73:70:d8:9c:3e:08:3d:19:f2:a1:da:04:61:ec:f0:82:d9:
a5:60:34:91:6c:21:2e:93:72:fa:aa:68:6b:71:4a:53:c7:a4:
c0:a2:61:53:b6:49:96:23:5e:5d:dd:b0:da:f5:6c:85:60:70:
03:0e:34:20:cd:9e:43:bb:3c:c6:a7:17:b6:18:63:4b:be:f7:
0d:3b:52:aa:66:af:de:1a:60:db:19:62:09:b9:be:18:58:fd:
82:1b:c2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:24 2025 by rpki-client