
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
File: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft (raw, json)
Hash identifier: KVdPifg2xDhtnNGhJy5NrrfDJDuXFmcSfG+3VxLE4zI=
Subject key identifier: CD:E4:0E:0A:C8:8E:23:86:89:90:36:6C:92:37:88:7D:19:DD:85:D0
Authority key identifier: F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
Certificate issuer: /CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Certificate serial: 0194BC3BE8D2C422CF9E7D2833B8673D0ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
Manifest number: 13B6
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl (hash: xwuVFi2Qkmh67NiHJFkjch2pZFUlU+crs3WfNKrjIcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e8:d2:c4:22:cf:9e:7d:28:33:b8:67:3d:0a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=cde40e0ac88e23868990366c9237887d19dd85d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:ff:39:23:7b:d5:2c:5d:83:b5:f4:3c:97:
f6:50:5c:06:63:8c:54:c7:21:52:4d:78:85:6f:86:
ad:b4:a4:c8:94:f1:0c:b7:4d:89:f1:37:4f:8e:ea:
2c:03:00:45:b4:67:d8:a0:91:5e:9c:0e:e2:22:33:
88:36:d0:ec:24:e7:c1:da:7b:2b:a2:db:08:33:3c:
30:eb:c9:74:3e:80:4e:9c:b0:fb:54:4c:33:58:9c:
9b:6e:4b:02:a9:75:94:61:b1:98:be:8a:4e:e3:17:
21:46:8c:87:b4:61:3a:d9:69:a2:6c:e8:fd:4a:41:
36:22:68:fd:0f:40:be:a6:d8:95:9b:e3:09:fc:40:
20:b5:b5:6c:93:b2:7a:98:a4:f2:dc:d9:b7:0a:c9:
e9:26:7c:96:22:5b:08:4b:2d:02:e2:63:76:de:86:
3d:23:1b:f9:89:b1:1d:6c:7f:ff:9c:69:73:2d:92:
38:8c:ae:97:26:2d:1f:fb:1e:c9:82:5d:aa:31:16:
03:48:ac:c2:90:6a:42:18:f3:f3:02:c6:4e:30:28:
7b:7d:71:56:4b:c7:cc:26:30:6e:1e:dc:24:d3:90:
07:31:9c:9a:16:a7:6b:e7:28:e8:00:ee:c6:1b:e9:
01:79:2f:0f:7c:7d:e6:f2:b5:81:dd:e7:b6:01:f3:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E4:0E:0A:C8:8E:23:86:89:90:36:6C:92:37:88:7D:19:DD:85:D0
X509v3 Authority Key Identifier:
keyid:F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2c:73:50:38:cd:ef:ab:44:5f:83:64:1f:ba:44:a3:72:9c:
8a:39:08:0d:02:46:32:a2:bf:c4:91:68:e7:41:0b:2f:b0:99:
3d:10:e8:41:83:b2:dc:f2:20:f1:46:22:a9:cb:2f:ba:75:47:
0e:01:8e:12:48:50:1f:e3:44:7f:49:b7:8f:1c:fc:e6:dd:a0:
4f:0d:bd:be:23:4f:af:c9:17:6a:6f:03:ed:07:85:a0:af:ad:
43:4d:60:e2:10:a6:16:3c:31:e4:01:cb:27:60:4e:be:cf:3c:
62:35:44:d3:01:6c:b5:32:53:fa:3d:b9:6f:49:3e:68:c2:c5:
c4:2a:c8:22:9d:9d:73:2b:5f:6f:c3:93:41:cb:43:f9:a3:92:
b7:b3:7b:2f:8f:6d:20:37:55:d5:84:dd:1f:cd:c1:5e:da:1c:
3a:d8:b3:06:77:be:6f:af:e0:de:63:51:69:f4:b6:b0:b2:88:
64:e6:b9:10:66:1a:d1:5a:b6:75:d7:1b:fa:4f:4a:cd:41:ba:
33:ed:85:af:ef:bd:6b:28:f4:3a:2d:c2:ec:d3:50:25:d9:4d:
3c:0b:f3:91:57:61:29:e8:bf:35:cf:e8:58:17:87:74:9e:82:
68:ba:94:aa:62:29:4e:80:dc:59:6a:6a:af:96:55:37:16:d2:
b6:f5:01:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:04:55 2025 by rpki-client