Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: g/RWNOH2uYt1sqJYt1QJlD6UUqRtiogd/YOrWWszHJE=
Subject key identifier: 6A:0A:CB:BA:2C:C4:40:FA:09:F3:EB:1A:9D:7C:26:F0:94:4E:DC:C8
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 0194BC3BDDFCAD9739913AFDD6EC82500762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: 0nqXHo8cDsL5jiGilModuCJpBS1yVp5w4QVvfFrKydY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dd:fc:ad:97:39:91:3a:fd:d6:ec:82:50:07:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=6a0acbba2cc440fa09f3eb1a9d7c26f0944edcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:db:78:2b:b4:41:d8:2b:81:af:2e:1d:44:
82:3f:0b:76:36:02:4c:a9:36:a2:9c:b7:b9:3d:cb:
e4:27:b3:fb:f7:c1:7d:35:8c:1f:87:cc:eb:6b:b2:
88:41:03:bc:b9:54:c8:5a:3c:c0:e7:ae:c4:ae:c7:
31:c6:2b:6b:8a:cf:16:58:6b:77:2e:90:32:17:7d:
83:63:e1:9d:0d:25:65:13:b9:ec:25:5c:99:77:29:
69:3c:52:7b:b3:16:43:53:80:d0:20:22:5d:b9:50:
63:54:fe:f5:60:5e:d7:be:6a:45:de:6f:94:bb:9e:
0b:f8:14:db:bd:8f:79:9a:ee:be:63:50:54:e8:52:
25:d2:58:c2:40:73:40:b4:21:3b:94:65:9f:e4:b2:
bb:4b:ea:a6:ea:20:59:9d:b8:6f:2c:9f:84:0b:77:
f6:4d:7d:5c:5b:43:70:26:44:98:93:fe:55:86:06:
78:66:cd:5c:c3:41:64:77:3c:b9:93:77:7d:f7:e1:
21:10:1c:62:98:2a:5f:91:f1:17:20:20:59:b6:10:
42:01:cf:82:03:80:eb:52:bd:f1:d2:73:f6:25:01:
e1:e3:aa:06:59:5a:3d:eb:82:63:cc:2c:eb:93:d7:
99:52:d7:df:b4:08:6b:29:f5:4f:d6:4b:c7:3f:78:
ed:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:CB:BA:2C:C4:40:FA:09:F3:EB:1A:9D:7C:26:F0:94:4E:DC:C8
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:84:cb:36:ab:69:87:10:cb:27:c8:08:f0:79:4b:7c:aa:72:
f7:d8:42:de:6c:ce:8f:d9:ef:ef:4c:15:fe:e2:b1:05:48:5f:
8c:d2:4b:df:52:02:53:4e:15:85:94:ca:f0:29:67:04:60:b0:
1d:3b:80:42:cf:d8:dc:df:5a:1a:cb:08:4a:07:7d:2e:0a:d2:
d1:1d:09:ef:25:35:42:2b:18:d4:ae:50:d9:a9:45:01:68:61:
b1:96:d8:ca:ff:bd:8f:0e:9e:60:d5:40:c7:ea:29:71:99:59:
bc:cb:eb:a1:f8:c2:d8:f0:8a:32:cb:af:d6:60:8a:b3:5b:50:
45:69:22:1f:f2:ac:e3:a2:fd:8f:32:7c:be:01:54:83:71:06:
f7:f7:64:91:ed:2c:cb:12:8b:c2:b6:9c:13:34:ea:9f:60:72:
d5:bb:e6:3a:a0:ca:5a:16:a9:44:ad:43:3d:9e:4a:9a:3b:29:
90:e3:0b:7b:16:60:bc:9d:bd:82:f7:e5:a7:b4:4e:25:da:93:
83:03:88:8d:76:fb:b4:a4:b3:aa:12:04:36:3d:74:84:d4:75:
10:dc:54:f2:af:6e:31:df:a4:41:86:03:b8:1b:eb:21:3f:a6:
07:a2:45:5b:a8:61:4b:21:0f:bb:14:a1:76:38:95:84:e5:17:
a7:58:67:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:31 2025 by rpki-client