Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
File: 1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft (raw, json)
Hash identifier: A/dWyAvh8gwdxChPQxAHtR7hZhyPu9ciR/w8XvgY7Rs=
Subject key identifier: 2D:91:21:24:86:31:6D:D9:E3:74:40:DC:5A:E2:D6:FC:28:D1:60:5A
Authority key identifier: F9:F7:C7:7B:CE:45:48:7D:EE:7F:AC:03:89:A6:F7:4D:BC:3C:3C:01
Certificate issuer: /CN=f9f7c77bce45487dee7fac0389a6f74dbc3c3c01
Certificate serial: 0194BBCDE56D8F1B88D2033FA88ED011A48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
Manifest number: 09EB
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: 1-ffHe85FSH3uf6wDiab3Tbw8PAE.crl (hash: 8+GjTW061lEF+B8XvBOoQE6zZuqfjU6IrJJHyeR2tns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e5:6d:8f:1b:88:d2:03:3f:a8:8e:d0:11:a4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f7c77bce45487dee7fac0389a6f74dbc3c3c01
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=2d91212486316dd9e37440dc5ae2d6fc28d1605a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:7c:7e:fa:2b:cf:f7:7d:cd:e3:63:7d:38:
81:bd:2a:43:86:a9:57:e2:81:5e:b3:4a:c2:02:2f:
e0:8d:4c:a6:47:b4:b0:b5:9a:79:4a:5d:1a:b9:d8:
99:e2:80:2c:22:2c:00:ab:f9:aa:32:b5:11:0a:30:
6a:00:6d:db:c7:69:ea:68:21:dd:de:7d:5f:e2:32:
8c:9c:04:bc:4a:3e:26:9d:a8:97:63:51:70:a5:45:
bc:97:ae:b6:5f:3b:4a:79:91:5c:e4:51:25:78:09:
c7:c4:d8:64:c6:08:51:72:6e:34:57:78:eb:b7:18:
87:cb:07:b7:d1:7f:29:04:83:6d:94:d1:08:13:13:
92:73:52:c1:2c:75:42:75:7a:38:26:45:18:18:d2:
b5:10:2b:d4:29:90:b1:40:2d:46:54:67:b3:54:69:
f8:a5:17:18:cd:f6:64:22:c9:00:98:06:a8:2d:2d:
08:77:dc:5e:a4:b5:2b:96:f6:10:6c:d4:30:25:f6:
85:f5:85:b1:5b:f4:2b:20:78:73:2e:83:6b:9d:f4:
97:9a:2d:fe:06:10:00:3a:c1:07:c9:0c:66:ba:7e:
e1:41:83:f0:55:6a:49:78:66:90:5f:15:b0:69:0b:
e1:98:c8:8f:63:f7:54:13:ad:f8:5f:6f:f9:ea:4d:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:91:21:24:86:31:6D:D9:E3:74:40:DC:5A:E2:D6:FC:28:D1:60:5A
X509v3 Authority Key Identifier:
keyid:F9:F7:C7:7B:CE:45:48:7D:EE:7F:AC:03:89:A6:F7:4D:BC:3C:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:df:0f:38:8d:64:7f:b4:a0:41:52:d6:ca:95:dc:ba:13:0c:
5b:7a:26:dc:e0:60:f0:0d:1d:71:5e:b8:7b:f5:8d:5d:64:cc:
48:50:59:be:cd:44:89:20:8f:0f:59:be:35:15:8b:f7:2e:3b:
34:c9:ab:71:19:99:15:61:a0:97:81:fa:57:02:a1:4e:fd:5a:
37:c6:a1:db:88:35:0f:10:0b:bd:7a:12:b4:e1:c9:fb:f1:f8:
0a:fe:32:05:85:8d:74:e3:64:14:8c:54:42:fe:ea:a7:b2:5f:
c0:b6:6b:4c:9a:02:70:aa:6c:72:70:bd:bc:95:eb:a6:e2:71:
a7:66:74:42:0d:5d:0e:72:22:bb:cd:5f:87:9d:2e:e6:d7:d8:
a8:74:60:08:a7:f7:d9:48:7b:1b:24:a4:fa:31:9f:08:4c:ee:
17:0c:bb:25:27:90:2d:40:68:49:25:0c:ed:03:e2:32:37:c3:
64:97:19:e3:8e:5a:6e:c9:72:5e:f2:62:b7:fd:c5:37:b7:a6:
6e:27:59:ad:81:93:8f:65:6d:18:46:a3:a0:27:88:10:68:75:
fd:dc:73:f7:54:0e:29:0c:98:07:ea:e4:1f:53:15:32:a1:ee:
f9:6f:ad:46:c0:50:2a:3c:33:64:a0:86:90:be:cf:f0:d3:b6:
c3:65:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:25 2025 by rpki-client