Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
File: cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft (raw, json)
Hash identifier: N+uaQayZaV0v7y5kL9SoZa+NbMlmiEV47ZhpyVG41CE=
Subject key identifier: C7:CF:0F:C9:A3:63:B1:DD:B1:E0:B9:98:60:17:54:D6:DC:50:14:4E
Authority key identifier: 70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97
Certificate issuer: /CN=70cee62b79472dcae51ead4d8ea06923870f5197
Certificate serial: 0194BC3C871F1EB2E29F1AB75A3D7D73CAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl (hash: o/I614N2R/2l2hZ7Scx5r9CRk/0VmaIybe1L/+kWfms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:87:1f:1e:b2:e2:9f:1a:b7:5a:3d:7d:73:ca:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cee62b79472dcae51ead4d8ea06923870f5197
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=c7cf0fc9a363b1ddb1e0b998601754d6dc50144e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:cb:8b:0f:4c:fd:ad:3a:4c:35:63:d7:c4:
20:bf:48:a5:0a:2b:26:f2:28:5e:c2:e9:7a:96:ae:
32:2c:46:09:02:37:6d:02:db:4d:40:05:22:ee:ea:
2b:28:c4:50:3e:3e:ad:06:ae:5c:0d:7e:47:3f:d4:
86:bf:d8:ba:b4:6e:86:f5:72:5c:e9:28:53:e1:c6:
aa:93:77:6d:82:72:24:14:81:e4:39:09:44:d1:3d:
33:f9:13:8b:80:22:06:28:18:44:e0:27:0b:1e:74:
bb:5e:a6:2f:f9:0c:d4:97:15:8e:aa:3c:76:1e:7e:
a2:d8:b9:22:c1:0b:f7:ba:29:26:97:f3:2b:56:38:
c9:a8:98:c4:64:a1:5e:c3:39:51:d2:07:74:2c:01:
48:ff:b8:09:29:7a:06:3a:41:7b:67:30:05:18:31:
3b:0c:8f:c6:32:9a:c6:be:b9:8e:0d:b7:f8:17:fb:
fa:58:c3:6d:df:5e:bb:d6:7e:21:54:dc:c2:43:b6:
d5:c9:1c:7b:47:01:a0:8e:3c:2f:d7:ee:b9:84:47:
e5:f3:36:37:5f:f1:16:23:39:c3:bf:e6:f9:ae:8f:
f2:64:2d:f4:d5:e4:e9:32:62:e6:eb:7d:ca:59:1d:
58:e6:6c:c4:a7:32:a2:9d:8a:30:1f:db:9e:48:7c:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CF:0F:C9:A3:63:B1:DD:B1:E0:B9:98:60:17:54:D6:DC:50:14:4E
X509v3 Authority Key Identifier:
keyid:70:CE:E6:2B:79:47:2D:CA:E5:1E:AD:4D:8E:A0:69:23:87:0F:51:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM7mK3lHLcrlHq1NjqBpI4cPUZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ba81b6-1282-455f-8c59-d0e24f017088/1/cM7mK3lHLcrlHq1NjqBpI4cPUZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fd:4e:91:cd:44:e6:d2:db:51:a1:76:f0:9c:25:e2:d9:b6:
1d:2f:36:48:2c:af:fa:81:33:3d:3a:72:0e:be:05:3d:38:f9:
8f:32:78:66:a4:d2:f9:dc:e1:52:23:89:06:8e:d2:b8:91:12:
72:9f:8a:53:86:3d:1c:2e:85:85:b1:9d:cd:be:82:91:cb:cb:
a2:d1:86:60:c9:46:d0:b5:1c:90:09:68:7f:86:d9:86:b1:a8:
b7:c9:5e:cc:3b:53:25:19:90:89:bb:7a:50:16:17:34:1d:c6:
c2:a6:b8:6d:95:26:42:25:e1:d8:2d:fe:f2:bf:93:70:5f:39:
11:34:ef:96:61:91:88:e2:b7:1d:1e:18:fb:27:19:90:dc:e9:
c6:87:ff:75:06:10:4f:c4:da:5f:83:15:59:ca:8b:69:69:e6:
66:a4:37:7b:30:01:63:2e:68:64:26:11:2f:e5:a6:24:dc:dc:
d0:d3:5d:ce:53:94:24:d5:b8:af:07:6c:6d:02:3d:05:9a:0c:
24:83:ae:ab:26:5a:8d:c3:13:6d:60:8e:2c:27:f4:4d:45:af:
02:d0:d3:55:c8:ea:a0:ae:e2:73:aa:31:f4:2d:7b:c2:9c:79:
41:eb:1b:aa:4c:b1:5d:fe:5c:b5:b1:cf:0c:60:81:da:80:0f:
38:c8:42:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:08 2025 by rpki-client