Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d426ef-b81c-4d1e-8d0a-2b76adf6b62c/1/1-LqMOKifgRWEb4zgGgOGPD_ulBc.mft
File: 1-LqMOKifgRWEb4zgGgOGPD_ulBc.mft (raw, json)
Hash identifier: bDPSExabsXVcsIHP7g37uMkdwYybCSjgyLfpL4iCZKY=
Subject key identifier: 41:C2:8A:E1:3A:39:2A:4F:E9:9D:0C:C8:66:58:50:E0:64:8E:33:10
Authority key identifier: F8:BA:8C:38:A8:9F:81:15:84:6F:8C:E0:1A:03:86:3C:3F:EE:94:17
Certificate issuer: /CN=f8ba8c38a89f8115846f8ce01a03863c3fee9417
Certificate serial: 0194BC3BC39F0CA2A0A88C90622D641F5929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LqMOKifgRWEb4zgGgOGPD_ulBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d426ef-b81c-4d1e-8d0a-2b76adf6b62c/1/1-LqMOKifgRWEb4zgGgOGPD_ulBc.mft
Manifest number: 0324
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: 1-LqMOKifgRWEb4zgGgOGPD_ulBc.crl (hash: KuaVnqPqsAfWLlREoU/kCwz1675YbuXsNh1WgJGeBa0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c3:9f:0c:a2:a0:a8:8c:90:62:2d:64:1f:59:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ba8c38a89f8115846f8ce01a03863c3fee9417
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=41c28ae13a392a4fe99d0cc8665850e0648e3310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:24:42:6d:aa:7f:32:50:d2:9e:34:3c:62:
eb:41:13:80:fb:ad:43:c5:c3:7e:b8:bb:5f:54:f5:
f3:62:5d:24:fb:cb:d2:07:16:95:16:d2:da:92:fa:
9d:96:a6:cf:98:a5:50:a1:4e:a4:4a:a4:8a:76:2f:
81:67:90:92:af:3d:89:5e:d5:95:e5:57:2c:77:70:
1c:be:e6:23:f3:3c:2a:6a:9c:fe:f4:08:f2:8b:6a:
01:9e:1b:b4:ea:9a:59:46:24:b0:2c:5a:79:d4:db:
f9:47:eb:60:80:1d:d8:92:d8:01:d9:c8:68:c3:59:
9d:a2:0b:39:e1:40:c0:d0:bd:54:b2:9f:f1:eb:69:
80:19:c0:78:fb:db:b1:50:0b:cd:01:9d:a3:c1:12:
06:0f:ad:31:a8:37:ce:39:e5:e6:04:27:2d:91:f3:
cc:24:09:33:e8:91:ec:c2:fd:03:ad:ed:9f:b8:a6:
9c:6e:c2:a0:d9:af:df:ed:8d:46:91:b6:9e:5d:27:
d1:68:3e:8e:96:bc:8b:ec:39:f9:d6:61:59:88:45:
f6:c4:1e:f1:64:c0:4d:7a:09:3e:be:d3:e0:26:89:
21:9b:8e:8b:ca:9b:c8:b4:72:ac:c1:75:af:cf:f0:
19:a3:5e:44:38:24:aa:97:ee:48:3e:e2:36:b2:3b:
a5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:8A:E1:3A:39:2A:4F:E9:9D:0C:C8:66:58:50:E0:64:8E:33:10
X509v3 Authority Key Identifier:
keyid:F8:BA:8C:38:A8:9F:81:15:84:6F:8C:E0:1A:03:86:3C:3F:EE:94:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LqMOKifgRWEb4zgGgOGPD_ulBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d426ef-b81c-4d1e-8d0a-2b76adf6b62c/1/1-LqMOKifgRWEb4zgGgOGPD_ulBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d426ef-b81c-4d1e-8d0a-2b76adf6b62c/1/1-LqMOKifgRWEb4zgGgOGPD_ulBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:99:ac:c1:87:66:14:87:27:4a:04:3b:4b:c3:69:c8:8f:6e:
20:82:65:ec:08:3d:6b:48:ce:53:54:ec:a4:0c:cf:c9:95:79:
f7:50:9c:62:d9:5f:bb:9a:d4:b7:2e:3c:f8:19:72:81:c9:89:
68:f4:79:0d:1a:c5:7c:48:76:11:3c:19:ea:75:3e:ca:c7:31:
64:d9:79:6d:d6:6e:f3:e9:31:37:66:59:11:c5:58:91:5b:00:
0a:2c:60:aa:44:1d:79:9c:af:00:40:40:60:9d:91:80:a6:95:
1e:ee:2a:86:4f:44:16:89:54:4c:19:80:50:8c:67:a5:84:71:
b3:1c:3d:2b:0f:50:b8:1d:e4:63:ed:e9:65:aa:55:c6:9a:cb:
84:64:27:dc:09:b6:7e:a6:55:a0:ef:4d:dd:f7:bf:c7:ee:d5:
40:4f:97:a3:ca:c8:e1:8d:38:5c:02:28:7b:37:81:37:f5:d5:
66:34:b6:af:26:99:f4:af:e4:1d:bd:fb:83:2f:db:da:f8:eb:
20:71:98:69:f5:59:61:ca:77:d4:f7:46:bd:f2:36:6c:50:49:
ba:32:69:31:f1:df:8c:77:99:08:6b:dc:1a:fe:b3:1b:45:be:
7f:52:07:2a:d2:74:88:ec:22:79:11:bf:bd:8f:5c:08:3f:82:
b7:c4:91:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:50:33 2025 by rpki-client