Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: EwSINGwO77jXo4BzOdUg7l4qi/I0NYz+PJs6TproLZk=
Subject key identifier: 9A:13:60:EE:22:75:C1:F4:E2:F0:2B:02:87:51:D7:B1:83:0D:D2:98
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 0194BBCEC50AD64FC51573EB787F70CD852E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: zAiEm69rCvGVHl2EPTk5p2Dqg/UZPQEb7BuyCw5tM/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c5:0a:d6:4f:c5:15:73:eb:78:7f:70:cd:85:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=9a1360ee2275c1f4e2f02b028751d7b1830dd298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:69:12:f8:2d:be:dd:3a:76:14:30:c0:93:e5:
69:72:89:16:2a:c1:cb:a5:9f:11:51:f3:e4:25:09:
02:53:55:39:78:5d:1b:fb:15:4a:58:3a:2d:8b:1b:
e1:5c:3e:9f:79:83:b6:0e:a9:1e:b2:48:39:5e:aa:
70:60:36:ed:8b:f4:05:b7:57:f4:47:6b:46:54:db:
6a:75:c9:9a:b7:35:c8:c0:61:c9:bc:9f:fd:17:c9:
53:18:0a:98:87:bb:ca:a5:d8:c2:b0:38:50:1f:8d:
4e:f0:5e:35:e2:e0:a6:3c:aa:cc:db:e2:6e:c5:7d:
e6:1f:8f:ea:73:22:fc:c1:64:d3:bf:1e:a9:7d:67:
79:c3:1c:83:fc:b7:81:25:8e:cb:b1:1b:b7:38:bd:
b3:e1:21:de:ac:b3:c9:fe:52:57:97:2c:49:eb:7d:
b2:a5:54:a1:2e:b4:69:c9:68:d4:c2:64:6d:c9:ee:
6f:cb:2d:ee:09:78:98:b4:cc:d7:06:46:56:4a:94:
5b:47:9d:cb:ff:1c:fc:1d:a8:7f:99:94:37:5b:f2:
75:3d:91:ef:d6:44:08:e0:e8:5b:a8:12:9f:3d:43:
0d:91:f8:07:20:f8:6b:35:fb:1e:f4:52:df:4c:98:
2b:ec:b4:2f:64:b0:80:fd:55:b7:d5:3d:b9:db:08:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:13:60:EE:22:75:C1:F4:E2:F0:2B:02:87:51:D7:B1:83:0D:D2:98
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ae:cf:1f:d5:04:2a:6b:b3:9d:80:d1:cb:1e:d8:ba:5c:fb:
e6:95:8a:eb:db:4e:d2:14:9f:4a:2b:ed:05:7b:3b:45:79:9c:
71:d1:67:67:5e:98:4e:c7:c5:fd:80:90:e9:e7:22:d9:65:09:
29:89:b1:4b:d6:9a:8b:c1:1d:ea:2f:8c:1b:fd:e6:99:30:7d:
da:d5:8b:a8:7b:49:af:c3:dd:42:b1:f1:29:cd:41:80:2f:b3:
88:39:cc:e7:1b:79:0d:03:1d:27:df:e6:50:2c:10:15:62:79:
bb:1b:b3:2f:51:71:e0:07:b1:6d:fb:6a:1f:91:1c:53:1a:7d:
88:0e:81:0b:09:74:9c:49:2d:21:6a:1e:4a:52:00:b6:6d:79:
36:24:46:25:46:44:ac:09:9c:91:3e:12:c5:fd:75:df:4b:b5:
4e:d2:98:a8:2e:f8:79:01:b4:5b:44:54:29:0c:6e:89:9a:ae:
59:09:62:23:9e:9d:e9:7a:d5:43:d3:b4:fd:95:31:40:fb:28:
0d:d5:76:c8:57:c0:75:a1:c1:04:46:36:cb:36:d9:6d:2f:fe:
d7:bc:a5:c7:d3:b4:3e:e6:7a:f4:64:34:c0:e1:82:e5:e9:84:
6d:9a:75:e2:25:97:19:4e:f1:c0:cd:2f:26:1b:6c:57:09:f6:
e7:54:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:40 2025 by rpki-client