Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft
File: _mHZDno6nbbaJtAfLNuiI1G0eXg.mft (raw, json)
Hash identifier: RmCHzbPc5L1fYLH+WZBkiuMM6uD46DWlXwTPSUUnPu8=
Subject key identifier: 9D:0E:38:E3:D3:7F:3E:33:DD:C5:82:57:62:CA:CE:BA:7A:DC:25:B9
Authority key identifier: FE:61:D9:0E:7A:3A:9D:B6:DA:26:D0:1F:2C:DB:A2:23:51:B4:79:78
Certificate issuer: /CN=fe61d90e7a3a9db6da26d01f2cdba22351b47978
Certificate serial: 0194BCA975BC8CFE630E671FF5E453A47D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mHZDno6nbbaJtAfLNuiI1G0eXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft
Manifest number: 0762
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: _mHZDno6nbbaJtAfLNuiI1G0eXg.crl (hash: 7pKFq2JA+zEnUsosQEkRtHRK7QwiLWLMRbb2ezjYBFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:75:bc:8c:fe:63:0e:67:1f:f5:e4:53:a4:7d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe61d90e7a3a9db6da26d01f2cdba22351b47978
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=9d0e38e3d37f3e33ddc5825762caceba7adc25b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:5e:65:ad:dc:9f:ff:cf:9b:70:a1:31:09:
4b:34:f0:ce:ca:86:3b:d2:21:c1:bb:e1:6d:f9:4b:
39:56:10:b0:96:bc:9d:af:72:4a:e6:42:e3:31:b2:
74:09:da:26:1a:b1:8e:f6:37:e3:9c:10:59:93:3a:
46:ae:65:b3:42:eb:e6:97:f7:44:fc:c6:9e:57:b7:
d1:93:9e:f7:f2:7a:9b:59:14:b0:25:94:99:2d:cf:
04:99:05:a6:67:17:7a:fa:4e:68:28:fb:88:7b:82:
1e:a9:69:dc:0c:26:be:f1:14:54:bd:d5:0f:65:05:
00:e8:4a:7d:5c:b0:5c:c8:0c:d3:d2:cb:4c:06:b5:
eb:55:d8:64:8c:80:95:e9:15:d7:e8:e8:49:6e:c0:
b1:57:23:c4:43:7a:b5:3d:ef:15:c9:3e:f0:ae:69:
87:4f:42:a9:2b:fa:d4:0f:b0:e1:06:e2:0a:35:7d:
aa:7f:f9:11:fa:3f:32:d6:d8:06:51:77:8f:37:32:
5f:95:82:06:bb:a8:16:29:39:10:4d:3d:2d:d0:ee:
bd:55:f9:73:ed:c5:4c:85:bb:f3:26:c8:90:f5:f8:
13:c2:0c:96:5b:56:46:42:d2:0e:b8:91:a9:0c:e6:
90:82:68:fc:b9:45:24:af:c8:9b:fb:24:b5:98:2f:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0E:38:E3:D3:7F:3E:33:DD:C5:82:57:62:CA:CE:BA:7A:DC:25:B9
X509v3 Authority Key Identifier:
keyid:FE:61:D9:0E:7A:3A:9D:B6:DA:26:D0:1F:2C:DB:A2:23:51:B4:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mHZDno6nbbaJtAfLNuiI1G0eXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f6:b4:b9:2c:42:e5:48:57:db:46:0d:5c:57:07:53:48:01:
3c:84:52:2d:13:46:66:ff:f4:c7:5b:4f:0a:68:82:3b:8d:6f:
de:e4:5c:fa:69:ba:3c:58:d4:9d:a5:db:d7:e3:dc:26:8e:55:
af:d1:79:69:22:9e:ee:55:d9:40:df:e5:45:7f:fa:90:32:bd:
3e:f6:bf:5f:68:51:d5:b0:61:d0:92:70:7a:6a:ba:4d:13:b4:
0e:66:9f:36:b2:fb:3e:f3:e3:f5:8e:94:f4:bd:25:9d:8c:c8:
83:86:77:04:70:a6:6f:b1:45:33:58:90:d2:06:18:1b:4e:64:
45:ab:2f:08:0c:37:59:a4:d2:a1:0b:33:a2:92:0f:64:68:8d:
9f:9e:a6:3f:5e:d3:6a:20:fe:09:ba:b6:71:2e:20:ad:a3:7a:
57:71:b4:ac:98:0b:fe:48:d1:e4:96:bb:1b:6b:68:6b:33:ce:
e6:c7:7e:a0:f9:ce:c9:3d:dc:b2:a1:94:f6:28:c7:ed:13:f8:
85:de:77:7a:40:e4:39:3b:2c:fa:06:0d:54:b2:63:98:78:52:
24:0a:0f:2d:86:26:44:36:e2:74:33:75:61:29:17:87:2b:db:
e5:f4:c0:93:ba:07:6c:71:6a:7a:80:13:5c:ba:5f:64:4b:19:
69:d7:bd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:15 2025 by rpki-client