Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft
File: C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft (raw, json)
Hash identifier: 0Nlx0sT0JO2dnSlONATX8XIKqsH+CpeD66A1hbA0dGQ=
Subject key identifier: 7C:30:4A:24:7B:E9:D7:CF:16:22:F4:B1:B0:44:3F:34:EE:6B:7C:8F
Authority key identifier: 0B:80:C1:C5:0C:96:31:13:42:D5:D9:C6:12:4C:21:CC:B7:11:92:AA
Certificate issuer: /CN=0b80c1c50c96311342d5d9c6124c21ccb71192aa
Certificate serial: 019535785B4621B752573B6343A088EF8AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DBxQyWMRNC1dnGEkwhzLcRkqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft
Manifest number: 0E08
Signing time: Mon 24 Feb 2025 01:00:34 +0000
Manifest this update: Mon 24 Feb 2025 01:00:34 +0000
Manifest next update: Tue 25 Feb 2025 01:00:34 +0000
Files and hashes: 1: C4DBxQyWMRNC1dnGEkwhzLcRkqo.crl (hash: yuBGxaZmmjaRIWYRWw1ngOGuFFz3Iu/+2EOfG7+1H4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:35:78:5b:46:21:b7:52:57:3b:63:43:a0:88:ef:8a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80c1c50c96311342d5d9c6124c21ccb71192aa
Validity
Not Before: Feb 24 01:00:34 2025 GMT
Not After : Feb 25 01:00:34 2025 GMT
Subject: CN=7c304a247be9d7cf1622f4b1b0443f34ee6b7c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:95:b2:e1:d7:3e:1c:eb:23:9b:1d:02:14:ad:
e0:aa:22:66:b6:c2:1d:26:53:4e:1a:54:6d:52:fd:
d4:c3:dc:b7:82:b0:c1:83:e5:6d:9b:1f:c1:de:e6:
dc:0f:91:db:97:05:d6:77:5a:16:88:d6:61:ac:e4:
a9:d4:4c:c0:56:24:0e:3a:54:77:fb:09:b7:5c:2f:
ca:57:e3:9c:f4:9e:93:89:c8:82:69:21:50:75:1a:
2d:13:89:fb:f8:66:2f:30:bd:a1:ad:0f:59:3a:20:
2d:9c:b0:02:e4:78:d1:c1:cc:94:f8:00:70:a9:3e:
d8:69:b2:55:c4:3a:2c:41:ec:6a:d5:73:13:fc:da:
ac:de:35:f7:b9:42:9b:20:eb:a9:4e:a8:b9:06:ee:
1f:c3:ba:e4:ef:2f:89:67:1d:ce:8c:c3:49:87:9b:
42:1d:49:bb:77:dc:a5:7c:d4:80:00:38:13:30:5d:
58:56:a1:a0:cc:9e:3f:c5:75:11:42:f7:56:37:17:
4e:34:3a:03:4f:5b:2a:50:b8:c2:83:05:1a:23:51:
0b:f6:f3:47:76:68:e9:33:f4:14:0e:f1:c6:75:12:
2a:06:e9:ce:db:7f:3a:3d:7e:c7:aa:9f:9e:7d:d3:
ea:bf:f2:88:e1:66:35:44:67:a5:4b:ab:ef:54:35:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:30:4A:24:7B:E9:D7:CF:16:22:F4:B1:B0:44:3F:34:EE:6B:7C:8F
X509v3 Authority Key Identifier:
keyid:0B:80:C1:C5:0C:96:31:13:42:D5:D9:C6:12:4C:21:CC:B7:11:92:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DBxQyWMRNC1dnGEkwhzLcRkqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:84:2b:81:94:dd:1f:c0:99:e6:37:f6:32:cf:7e:39:64:91:
33:1d:03:f8:95:f0:28:f9:55:b0:e7:40:12:5d:b5:86:3c:6a:
d7:c8:8a:a3:62:8b:7b:b0:34:c4:cc:22:6b:6a:fd:4d:1a:6f:
77:ce:21:c9:a6:aa:6e:3d:0b:d2:49:ca:4d:5e:86:65:82:7e:
ba:0f:d4:96:ef:fe:dd:f6:48:21:6c:55:fa:2f:61:f1:4f:ec:
31:29:68:88:50:9b:da:62:8f:d7:af:06:62:44:e2:52:41:59:
90:6a:cc:f8:52:74:ed:84:fe:c8:f3:b6:1d:47:5e:7c:e8:b7:
86:17:65:5f:8d:92:5d:81:ba:2b:6e:7e:ce:5f:2e:57:dc:0c:
ff:81:9b:0b:c2:46:33:c5:86:2a:d1:e0:c4:b7:3b:21:cc:59:
8a:c5:a8:07:9c:8b:03:c0:42:61:c6:91:3f:13:dd:4e:8b:a9:
96:66:07:c1:3e:39:2e:18:15:d3:4a:14:22:59:a4:c3:1d:35:
f2:c9:4e:54:ce:21:8d:dc:6f:74:06:1c:fe:4a:7f:c0:c1:33:
70:ce:74:92:47:f6:53:f6:b7:4c:0f:6b:08:4e:41:60:7c:e6:
f7:c1:36:e4:d2:4c:e3:32:c2:61:ed:c6:f6:b7:14:2f:71:a0:
fb:e2:b0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:06:29 2025 by rpki-client