Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
File: 8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json)
Hash identifier: Q0KfxBsk+U1b7xNibyUivC0lIf6t8o9r2Um3TioYzuM=
Subject key identifier: B0:B1:57:EF:32:16:B3:E6:3E:00:82:94:C6:76:81:23:A6:89:D1:7D
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Certificate issuer: /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial: 0194BD17F12FD349E082B019072F3EFC3B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
Manifest number: 1151
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: 7BYiAX55YCqsVo7DFAqkLn6LQv7878j0mEVU6wXH+fo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f1:2f:d3:49:e0:82:b0:19:07:2f:3e:fc:3b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=b0b157ef3216b3e63e008294c6768123a689d17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:c9:0c:8a:c1:f3:82:7c:3b:dd:98:40:ab:
44:9e:e9:fa:f5:4e:84:d3:e5:6e:78:f4:37:70:bc:
64:70:fc:8a:f3:64:4d:cb:58:91:37:70:87:56:2a:
bc:61:43:85:a0:a8:df:77:29:92:07:bf:35:28:ec:
05:8d:cd:de:ec:51:29:f4:29:ca:15:5a:33:53:1a:
c6:e9:ff:8e:2a:11:0c:50:61:c1:1e:64:f9:48:c1:
e1:53:3e:5f:44:3d:3c:f2:39:bb:ba:14:36:f7:cb:
99:ee:19:51:77:5f:38:fd:ed:b7:6e:07:96:69:68:
03:72:5d:9a:79:31:31:97:b5:c0:b3:e9:b5:c6:38:
3f:ff:c2:25:d9:d2:d5:d2:d4:53:2d:e0:7a:73:2c:
ea:b6:fe:b6:8c:6c:5d:ab:68:6e:13:75:d2:a7:db:
36:2a:c2:6c:61:8d:42:f7:de:a4:b5:b7:eb:fa:90:
c9:56:73:6c:9e:b6:a7:d1:4a:3e:ad:d8:c2:b0:0e:
87:49:2a:29:df:36:53:f5:4f:22:c5:7e:33:de:67:
c2:d3:71:e1:e1:fb:95:8b:71:5f:62:38:70:13:db:
a7:bf:0a:22:1b:8f:6a:18:6b:f2:e4:10:fd:0f:38:
68:eb:48:3a:ca:97:fc:06:0e:21:7e:94:ba:c6:36:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B1:57:EF:32:16:B3:E6:3E:00:82:94:C6:76:81:23:A6:89:D1:7D
X509v3 Authority Key Identifier:
keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2d:4f:c7:1f:25:c0:11:dc:ad:6c:2a:ab:56:80:88:4c:b7:
94:5d:b7:c3:79:b4:df:38:f7:34:79:1b:44:54:bb:13:33:f8:
93:6b:06:70:50:a2:1c:64:3c:48:cd:ff:86:19:4b:55:b6:36:
e6:1e:74:d9:71:08:36:f3:02:c4:c2:3e:40:a7:e4:fc:44:56:
2c:f8:ed:2f:99:4d:12:1a:34:13:73:9d:81:41:2f:93:28:11:
89:82:e8:cd:3a:8b:71:c8:66:e4:f1:04:a3:9d:7a:1e:17:1f:
b4:ad:2a:2c:a2:a4:d5:63:82:a0:b5:cd:fe:9e:69:6f:31:9d:
fe:0b:e8:bd:4a:67:2a:90:16:3d:06:67:e1:09:c4:f1:f8:45:
ba:99:d6:7f:eb:29:23:93:39:e2:da:d5:9e:16:c3:3b:01:f1:
d1:81:a7:b8:17:b6:33:44:68:88:17:48:ed:20:a0:c1:c2:70:
1d:cd:f5:70:8a:cf:a6:9d:fd:8b:e2:90:03:3c:d6:86:8a:1d:
43:40:87:dc:61:ec:a0:20:fe:7e:f5:02:bc:99:1d:c7:cf:a3:
dc:a8:2b:c4:aa:8a:a8:df:03:8e:eb:b9:10:80:f3:06:8f:56:
b9:cb:89:39:12:c7:8f:b7:3b:b5:b3:00:cb:6b:19:35:e9:ae:
04:fa:15:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:24 2025 by rpki-client