Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
File: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft (raw, json)
Hash identifier: OacSn7lRKgS6BaxkLQp+yQ9UGxOr77K+VDBVdOf7yuI=
Subject key identifier: 04:B7:90:35:47:33:9D:7F:74:2F:1A:C3:C1:39:55:28:BA:74:E7:6D
Authority key identifier: 98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
Certificate issuer: /CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Certificate serial: 0194BD1766728AB37ECEEBF1E8E95AA11764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
Manifest number: 0B5F
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl (hash: PkWu9Bn1ym7yVN9cbwCdHQjsqTZm6mXyfjyYsdIQ57g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:66:72:8a:b3:7e:ce:eb:f1:e8:e9:5a:a1:17:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=04b7903547339d7f742f1ac3c1395528ba74e76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:7f:c8:f6:2b:64:8c:32:f6:1d:f5:f3:ff:
f9:bd:b7:5f:8f:1b:c1:12:b0:7d:98:cd:40:30:9d:
d0:dd:18:86:db:22:77:fc:a8:d3:33:85:38:89:09:
67:ac:9a:2a:6a:7c:f5:b9:19:51:99:45:7b:55:4d:
99:ee:ce:a3:4d:5b:f9:ca:c9:a9:03:1d:30:86:13:
54:16:2e:07:55:db:3d:b9:85:c6:3f:93:01:79:ab:
e5:ca:4a:b7:1b:af:d2:ca:5f:61:e5:20:c0:36:b6:
3c:64:37:ce:c4:90:00:cd:f1:b2:70:e6:ac:dc:ba:
f0:1c:a1:cd:45:54:45:4c:77:a7:5d:b6:dc:4d:48:
96:8a:af:2c:a6:df:2f:db:9c:f1:3e:cb:1e:f7:5d:
32:33:3e:cd:fe:e2:cd:06:0b:ff:db:9f:0e:ba:1b:
03:eb:49:65:26:72:d7:44:32:95:c9:19:86:d5:a8:
a5:4b:f6:1f:c1:6a:e9:75:ef:cc:c4:02:80:c9:d7:
aa:ef:c2:0f:c6:7f:ed:33:bd:ba:12:e9:39:64:c7:
27:cf:a7:24:5a:64:25:93:f0:2e:45:c4:87:61:0a:
f9:8b:08:11:3c:f9:75:b2:87:74:9b:81:20:57:e0:
f4:19:21:85:7c:51:d4:2a:c9:9a:8d:a4:95:ff:2f:
eb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B7:90:35:47:33:9D:7F:74:2F:1A:C3:C1:39:55:28:BA:74:E7:6D
X509v3 Authority Key Identifier:
keyid:98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2a:24:8a:e6:89:85:2c:a8:68:c7:86:55:f1:74:2e:ca:84:
2b:c1:73:06:83:b3:33:53:a7:ca:07:33:5b:0d:36:94:4b:3c:
41:4b:63:f8:79:6b:8a:09:ad:97:ab:c8:46:ca:2c:95:34:b3:
28:0c:01:b3:23:cf:72:32:c1:df:7b:28:a1:3d:53:6e:f9:4b:
73:f3:f6:21:ef:17:15:0f:c2:10:88:27:93:6d:b1:f5:b7:c4:
b1:61:20:2b:b9:ed:ca:8e:77:2d:a4:2a:cd:73:a7:da:62:f9:
c3:aa:5f:2a:ba:7f:0b:ea:1c:26:6a:04:3e:ac:d7:1c:36:ea:
19:8b:3f:f1:9b:46:27:cb:d9:b7:d1:de:07:a5:4d:e5:25:e2:
bd:0a:17:d6:bb:76:1a:14:fe:71:25:52:6c:8d:14:ed:be:17:
00:65:78:11:27:b9:fc:8f:55:34:18:67:9d:2e:31:47:d9:ff:
2a:54:51:8c:b1:d2:4a:09:90:ce:00:89:65:c7:81:7a:5f:cf:
1d:88:85:5e:ed:fe:6f:c4:a8:a2:de:9b:fb:2f:12:df:82:df:
d9:29:4c:e5:60:c5:56:ab:59:18:26:49:03:21:62:bb:12:d8:
0b:72:c6:90:77:bb:f0:34:f8:84:ba:2a:a9:5f:7b:30:ab:a9:
56:a4:04:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:28 2025 by rpki-client