Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: yK1dhbjaijqPQQjIKyDjMdK/5Dtm7xaH0u5wosdkTMA=
Subject key identifier: AB:F6:E6:AC:01:4A:13:1D:EF:A2:02:43:6A:41:FD:67:28:16:48:D1
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 0194BD17740E507FF1880F3F99378CF255C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 5F
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: oMWn4NQaT7gxdmxBihxwOB19P9bszOe6+4hY8S8LmuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:74:0e:50:7f:f1:88:0f:3f:99:37:8c:f2:55:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=abf6e6ac014a131defa202436a41fd67281648d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:14:fe:65:b5:c4:79:66:a7:28:e2:26:40:
9e:53:49:69:6b:0d:f8:bb:f3:4a:82:d5:2d:97:60:
2d:9d:05:30:ae:50:6a:54:3e:09:a2:ba:99:e1:71:
5b:90:ea:22:9c:98:c1:36:17:72:3c:78:d4:44:66:
e6:dc:bc:5d:22:d1:b1:12:89:67:e0:75:49:ac:8c:
00:c4:1e:ce:9b:7c:c7:0e:e2:1d:2a:c7:d9:87:d2:
4d:53:86:77:71:e4:d0:ed:d4:fe:43:0f:a2:15:82:
bc:c1:d1:03:b3:2f:10:32:88:1d:92:e5:8a:4c:5a:
2a:8b:c1:2f:b5:94:33:a2:52:83:81:95:5f:e5:7f:
fe:99:41:e7:39:1f:da:76:5e:7b:9f:10:24:ec:b2:
84:b6:4b:1c:f2:e8:dd:f7:d7:6d:cf:40:da:d3:82:
95:fb:e7:b4:fb:bd:fd:8e:87:63:22:50:3e:0d:be:
f3:3f:48:32:13:21:cb:fb:66:11:5b:ab:ce:2f:5d:
50:40:69:13:ed:fd:ab:07:14:21:eb:2a:78:84:0f:
51:eb:e1:35:83:2f:11:8a:68:ff:4e:7e:ec:7a:78:
61:2e:3d:5d:bc:f7:f3:46:ce:25:c2:a1:b8:19:35:
51:bb:ef:7f:a3:09:c8:85:48:9b:79:bb:02:bb:84:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F6:E6:AC:01:4A:13:1D:EF:A2:02:43:6A:41:FD:67:28:16:48:D1
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:50:fa:ed:55:de:b9:96:cc:9a:37:ff:92:26:e9:79:c1:4e:
fa:9f:5e:35:ed:fb:fc:9f:22:a5:fa:1a:c3:a2:8a:b6:45:b4:
45:a0:83:28:47:55:aa:88:16:88:20:ea:de:5c:90:b8:1c:cb:
30:e0:dd:18:4f:9f:a4:98:92:5f:c6:c3:ee:b8:e5:77:e7:ae:
d6:da:b9:b5:a2:e9:79:1d:c2:12:ba:a2:96:df:31:54:37:61:
fc:08:9a:b0:a3:11:a0:dd:60:9f:74:1e:65:aa:9b:79:b3:a0:
ce:b3:4d:e0:3e:54:56:07:ae:6c:bd:08:e6:a4:0c:d6:e4:31:
fa:9a:0c:c2:e0:c4:e3:4d:33:aa:f7:9b:60:df:8b:f5:0f:99:
5b:2e:4a:35:63:84:e6:83:c4:d9:13:82:8c:04:ff:82:e3:3f:
6a:6d:36:69:72:10:e0:ea:8f:10:4b:ba:dd:a0:bb:96:6b:a5:
6c:d2:51:79:5d:78:fc:de:ab:d9:10:d0:ff:c2:74:38:5d:e4:
16:34:ee:54:1d:cf:81:5e:48:61:86:dd:ed:95:f6:44:f3:c2:
34:af:c7:59:0c:7e:06:6f:cd:96:a9:e9:1a:72:b9:2d:20:3f:
59:08:ed:9e:75:dd:4b:fb:7d:df:b3:60:c6:4f:33:3b:1f:2a:
5d:21:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:34 2025 by rpki-client