Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: ehZn/3CmScdFfc5a3LCCyIffJsQWhACXgC27kvhAzdA=
Subject key identifier: C6:38:56:09:64:63:8B:AC:AD:59:91:FB:DD:B6:E6:24:41:8A:D8:31
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 0194BC3C8CB37C495C89321EC92209BBFB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 0394
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: P5QNh9vnAZ4P/2oKsaKGHJPycC+QzLnp/+ehp8Pchvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8c:b3:7c:49:5c:89:32:1e:c9:22:09:bb:fb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=c638560964638bacad5991fbddb6e624418ad831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:0c:bd:f7:84:c2:f9:9a:06:5b:0e:ec:9f:
e4:76:dd:24:14:b0:16:16:56:c0:28:f7:31:e4:2c:
84:92:44:2a:86:24:38:8b:c7:cc:54:ca:5f:99:69:
35:14:63:b9:45:ab:f6:6f:c8:a1:06:2b:fd:53:10:
28:ac:1c:b0:2e:79:5d:9d:48:74:3b:74:5e:1a:ea:
f1:64:20:7b:5f:90:2f:a8:87:2f:a4:25:22:65:39:
0e:df:c2:06:14:38:cd:fe:e2:02:a8:ac:3f:ae:a4:
34:cc:e3:47:71:f4:ae:66:63:11:37:8b:b9:39:77:
bc:a7:3a:94:8e:68:66:68:1f:3d:9e:97:c3:b8:45:
e1:94:32:28:5d:8d:33:4c:a0:a3:24:03:27:23:c2:
36:37:90:f6:1a:a6:08:55:05:c2:cd:14:e0:f2:7c:
64:60:0c:77:7c:7f:8f:bb:7d:01:e6:ba:48:82:54:
7a:7b:fd:57:db:f2:c6:e0:97:5f:62:af:dc:0a:4a:
3e:6b:10:2a:40:9c:d9:c9:4a:28:f1:e7:5c:05:88:
91:57:37:31:cd:de:5b:d3:9b:ed:64:11:d1:b8:c1:
13:56:7e:51:06:3b:8f:26:1e:55:33:4c:98:1a:d7:
69:d5:a7:33:e6:b3:aa:fb:ef:20:20:6d:16:c3:8a:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:38:56:09:64:63:8B:AC:AD:59:91:FB:DD:B6:E6:24:41:8A:D8:31
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:47:0d:ab:e2:c7:2e:d5:8b:2c:f9:bd:a8:af:47:6c:d0:8e:
e8:d3:fc:b6:63:81:f6:fc:c2:14:e9:0b:18:43:7d:f2:a1:ee:
a1:c5:05:18:c2:48:0e:f4:75:ac:65:dd:df:32:01:9e:19:0e:
78:45:a8:30:ec:d1:55:4f:8a:07:35:e9:70:ef:2b:b7:be:b2:
b8:f9:6b:5d:f5:05:37:57:37:58:14:35:4e:50:86:ee:ff:88:
45:54:f4:f2:0d:75:89:14:29:65:59:61:95:f5:4c:49:96:89:
b5:19:3b:c0:6b:1b:01:db:e9:2c:d7:54:a1:56:83:15:28:7c:
0f:a5:2f:78:1e:80:a8:1e:9d:15:9f:f7:4a:95:68:9e:89:f5:
61:99:b6:28:87:54:49:1c:5e:f9:0c:41:81:7e:18:04:5c:77:
92:3e:ed:dd:bc:bb:92:f1:81:0b:02:0a:2b:54:6e:86:9e:ad:
bc:a6:96:dc:aa:5d:2e:0b:c9:06:7c:4b:b5:fe:e2:5e:6e:bc:
c4:29:7e:2f:30:36:92:30:d1:33:cb:ba:31:ae:af:d3:21:3c:
84:af:82:25:5c:42:b3:2d:f6:f8:0d:60:81:a6:2c:b1:7f:40:
ec:94:65:7c:be:e7:ac:1c:a8:d9:39:a6:d0:83:d5:c9:a5:83:
c6:a2:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:15 2025 by rpki-client