Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
File: R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json)
Hash identifier: 2xwObMCkGz6yYGRcrkHa1aBVXW/g24HNaezj0Pgj4nw=
Subject key identifier: 8E:E8:9E:8B:11:A0:9F:E7:93:AE:A8:3A:B2:A2:CE:51:AF:71:7A:8A
Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
Certificate issuer: /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Certificate serial: 0194BBCDFC8A0242930076E4676730575BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: Z0TbB6EkhZGpNvwRr+1CQB9b00iEOn292JEMTZsB994=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fc:8a:02:42:93:00:76:e4:67:67:30:57:5b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=8ee89e8b11a09fe793aea83ab2a2ce51af717a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:a7:b8:ad:f6:6a:b1:d2:7e:c7:96:f3:6e:
c7:29:a6:50:f4:e8:d4:65:1d:0e:ca:17:9f:d5:1d:
c5:73:79:a5:16:e6:19:6c:63:22:f7:3c:c1:c3:37:
b0:a0:b9:52:0f:ba:bd:26:f4:43:98:da:67:d1:1a:
73:38:e6:ca:2f:58:f9:fb:37:79:df:9d:70:1e:ab:
0c:3b:cd:6a:cf:65:1f:a7:7f:b6:28:57:96:c4:1f:
89:84:e1:02:4c:12:ea:e8:1b:8f:a7:ca:a7:51:a0:
eb:3f:c4:ad:be:c6:9b:9c:32:61:38:6d:46:10:f0:
40:6d:ac:24:58:6d:44:33:9d:0d:44:54:5b:90:a3:
07:a1:50:ec:26:71:36:c1:e3:39:b9:a6:b7:fc:c4:
88:a5:06:52:f6:82:bc:1a:1c:3b:88:e3:ae:d6:e8:
c2:70:c7:ac:bc:b1:83:51:5e:5c:91:d6:47:23:61:
a9:63:79:bf:55:0d:9b:03:78:de:41:d9:36:c4:66:
a3:06:15:a2:b4:80:21:48:e4:57:4e:6e:78:53:ba:
da:8b:0d:1f:26:fe:d5:b4:2b:66:15:61:57:74:eb:
f3:45:80:9b:b4:29:2e:cb:2a:16:cc:71:c1:0b:64:
11:a8:a0:87:12:aa:8e:ec:3e:48:c8:e3:67:49:06:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E8:9E:8B:11:A0:9F:E7:93:AE:A8:3A:B2:A2:CE:51:AF:71:7A:8A
X509v3 Authority Key Identifier:
keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2b:41:a8:f2:79:66:67:f3:24:79:2a:f2:a7:70:9d:97:f4:
20:4f:1c:e3:7c:5a:30:c1:62:5f:34:ab:0c:79:83:78:0f:09:
08:20:1a:4e:66:82:48:5f:0d:42:21:fd:3a:5a:b3:c5:5a:74:
94:6d:82:7b:0b:92:ea:50:9c:0f:02:ef:11:25:56:30:fe:25:
bf:84:44:73:e0:2d:c8:da:5e:67:f5:24:21:c8:75:97:92:cf:
ad:eb:2d:70:98:74:6e:8b:16:ee:de:cb:c3:a0:5d:48:46:a5:
c3:1d:d2:b0:19:97:e8:03:48:c1:ac:91:e2:fe:30:37:d4:dd:
bc:89:d5:32:c1:c7:29:61:3e:c4:84:f3:6c:11:1f:c5:ca:e6:
fb:34:1a:dd:ef:49:08:04:13:06:bb:70:94:00:e6:24:fb:be:
77:ad:94:8d:c8:e9:df:0b:c2:60:ad:16:1a:4c:17:8d:43:6d:
31:5b:c8:9a:d9:bf:d0:a0:c4:bf:d5:f8:4d:f5:93:0f:e1:aa:
e7:b4:62:b3:b4:c7:31:6d:af:f2:65:6e:c0:35:ed:f4:2d:33:
4e:2a:a6:63:63:f8:a5:e0:08:47:a8:13:9e:b3:8e:cd:63:d6:
d7:56:eb:7f:32:ba:21:a8:64:52:e6:3c:12:3a:5e:93:85:d4:
80:57:d7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:45 2025 by rpki-client