Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: i3nM10kFYseKxgDime+03Wb8HcmqRcieRawlw3wT1G0=
Subject key identifier: 98:06:F9:65:B5:69:86:9A:3F:1B:B0:9B:8C:54:4E:9E:E7:1B:F0:3A
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 0194BC7302E4C9068EED06576412D399AB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 0537
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: Abm9hkMCuwZE2asXPVAH/VyZb5Yk7a9TOqzTdTDZmWA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:02:e4:c9:06:8e:ed:06:57:64:12:d3:99:ab:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=9806f965b569869a3f1bb09b8c544e9ee71bf03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:d0:2a:63:c2:af:e1:2f:89:de:1d:f7:14:
d7:94:c5:b8:75:79:90:bf:70:ee:55:fd:1c:37:78:
87:75:86:c7:a3:10:16:d6:a1:07:1c:42:6d:0e:83:
5a:46:48:b2:f5:3b:37:a6:4a:cf:f5:6e:83:18:fe:
72:3c:e4:f6:f1:87:a3:22:43:b0:8c:07:b1:d6:7f:
33:84:c1:b7:28:55:54:b5:8a:f2:2c:6f:11:a5:4a:
b6:c9:af:d6:5b:94:16:8b:5c:80:83:f4:91:e0:fc:
53:12:d1:5d:ce:8e:d1:a3:91:48:b1:29:77:f3:3a:
ce:41:8a:5e:62:9b:31:08:7e:49:d9:96:a2:9d:a0:
b6:30:30:72:5c:59:33:aa:fa:be:4e:47:b7:53:95:
b8:fb:0b:79:5f:62:bd:a2:ce:c8:93:60:f0:b8:b0:
df:d7:e4:58:8b:16:a4:d0:9a:1b:63:28:17:14:c9:
04:8e:89:13:9c:a5:46:d6:f8:39:94:f3:7e:f8:13:
7c:b3:cb:c0:b0:b2:af:48:58:9b:d9:ee:03:f5:d8:
d5:5d:2f:31:bf:2b:b7:c0:df:ba:e7:0b:6a:a2:89:
d4:24:6c:8c:17:22:3c:21:8b:3f:8c:3a:86:ca:9e:
7a:49:1e:88:35:64:8a:ce:4c:7c:70:38:33:cf:2f:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:06:F9:65:B5:69:86:9A:3F:1B:B0:9B:8C:54:4E:9E:E7:1B:F0:3A
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:30:9d:b8:e4:e3:7a:89:18:bb:14:7f:e4:44:ca:c9:d0:65:
b9:7c:37:99:6f:89:28:80:2a:4f:e3:c8:a2:5b:ee:6f:1b:39:
e3:a1:50:96:3d:e8:36:c3:39:7c:42:2a:ee:ba:66:3c:7c:76:
e6:21:f8:08:4c:19:30:c5:8e:dc:80:85:d4:37:7f:d5:4b:dc:
f3:a6:ff:7e:0e:60:a6:bb:b1:9f:32:17:3a:a2:db:b4:13:79:
25:9b:57:ef:1d:d8:03:e6:39:6b:47:36:62:26:3a:48:11:a4:
c7:a5:c4:a1:e1:11:ff:d3:ef:e3:f2:09:9f:8b:04:ad:66:dd:
b6:95:24:4e:db:55:df:27:6c:6a:04:08:37:74:a9:cf:1e:c7:
a5:62:ef:08:2a:be:ce:6b:73:d4:bc:84:0c:dd:3a:1c:26:2f:
31:9e:08:8c:60:ce:2c:d6:7e:5b:dc:2d:c0:f0:65:33:56:91:
16:b2:27:0a:30:29:4b:a2:c0:b3:3a:d8:cb:51:79:9a:9d:78:
de:ac:02:3b:32:a9:04:1f:00:92:c7:c0:13:10:22:3a:ab:f1:
13:0c:a2:eb:e7:a7:c6:97:b2:3e:c1:c4:e7:3a:d9:68:18:8c:
98:53:a3:db:ce:3e:45:11:6b:4f:18:4c:cc:a4:b7:bb:ac:43:
97:f4:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:09 2025 by rpki-client