Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
File: 12TH8_eLh21rBDwWzdvd6x55W5w.mft (raw, json)
Hash identifier: D11wC5siT77k+SHPbjuTUkkp6XEI+S8ycD/ogdTjQN8=
Subject key identifier: 6F:63:DA:7F:6A:1A:C4:E5:F4:9E:45:88:37:B9:FC:59:EC:BE:9A:1D
Authority key identifier: D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
Certificate issuer: /CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Certificate serial: 0194BCAA3C5F59336DC52339B4C0161A7826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
Manifest number: 042A
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: 12TH8_eLh21rBDwWzdvd6x55W5w.crl (hash: taQZ6+TdqZswufy0gRLNZBq+/MgLCU++GH17MXj56dU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3c:5f:59:33:6d:c5:23:39:b4:c0:16:1a:78:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=6f63da7f6a1ac4e5f49e458837b9fc59ecbe9a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:f1:be:81:1f:d7:ca:c1:cc:d5:a1:e7:d5:
ea:14:3b:37:86:84:03:11:e5:8d:12:5e:04:72:13:
10:96:2a:d0:cc:61:ba:e3:97:0c:7e:06:99:32:b0:
c9:24:3a:fd:92:7a:5d:d4:69:dc:97:61:d2:7d:d8:
27:e6:95:0b:26:41:22:d7:1f:36:7c:ba:c4:45:4b:
eb:ad:13:c9:e7:2f:fe:58:51:87:80:6e:74:c0:30:
a7:d1:a2:1a:60:5e:08:83:c2:98:f0:39:2b:79:37:
53:c7:28:08:25:e6:82:7e:4b:cd:49:be:19:c4:63:
49:5b:6c:33:29:61:2c:a2:04:ee:da:a5:5d:e1:c9:
a6:eb:85:21:8d:cd:ca:e0:4d:1f:5b:4a:23:ca:86:
05:f1:d0:ab:f0:20:d2:de:b5:95:45:e4:2c:5b:0e:
39:4f:e0:9b:a2:05:1b:12:5d:f8:cc:1d:93:3a:38:
50:86:cb:76:4c:6f:f8:75:eb:74:2c:72:dd:64:63:
2d:f1:71:41:a4:46:a5:b8:f9:0e:a4:f7:d8:5e:d4:
43:94:2c:ec:50:bc:a6:38:7f:07:5d:e4:33:62:74:
9c:cd:50:46:c5:ad:f5:14:65:ba:7e:ef:37:05:38:
65:41:56:9f:5e:b4:06:f9:56:2e:88:16:fc:c1:bc:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:63:DA:7F:6A:1A:C4:E5:F4:9E:45:88:37:B9:FC:59:EC:BE:9A:1D
X509v3 Authority Key Identifier:
keyid:D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:cb:dd:02:46:f3:37:80:4e:4a:9e:9d:ca:45:da:55:e2:51:
6e:0a:c9:43:24:e1:e4:d5:a0:5d:d5:19:ea:3b:59:68:5b:6e:
ee:ed:5f:bc:5e:19:96:15:1f:4d:b2:d9:fd:d8:65:1c:b6:ed:
39:06:db:d3:21:69:78:ee:8a:07:eb:9a:47:77:f6:2d:84:f6:
fc:1c:79:f0:c0:59:d7:c4:1e:06:23:3d:b1:51:a2:77:30:f3:
17:87:f5:36:d9:e0:23:62:04:35:65:50:c0:8e:28:d3:44:17:
41:6a:fb:c3:4f:03:9a:55:93:cf:34:55:1b:dc:68:d9:8b:1e:
31:a6:8d:51:a6:de:cc:20:28:c3:08:57:34:17:d8:20:61:1b:
74:fc:79:89:43:c9:ce:84:e7:99:a9:01:aa:37:e7:f0:66:b8:
d8:c3:83:bb:64:b1:b2:24:31:06:f5:dc:45:f0:b5:f7:5d:52:
95:e0:05:32:27:24:fa:00:3f:d2:49:4e:f1:ff:c7:5b:7d:61:
d9:89:7a:10:24:d7:33:97:de:1b:02:57:30:2c:03:42:35:23:
15:d1:a8:1d:74:d8:e5:c1:00:13:9f:88:e8:28:7c:6e:82:87:
fb:ef:f5:e4:26:c4:73:e0:d5:3a:28:33:86:9e:6c:ad:b6:cb:
c1:a4:89:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:26 2025 by rpki-client