Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.mft
File: IH7fmk0-60c-6Y8vOyw0PsOsHqw.mft (raw, json)
Hash identifier: aNnAk8oKn2xMkd2HO1zkr4h3qiOjP5ykoSQ8C37U25E=
Subject key identifier: 95:DD:3E:FF:25:F8:B4:35:6F:D9:39:15:0A:8C:F8:0F:3F:FB:2C:F8
Authority key identifier: 20:7E:DF:9A:4D:3E:EB:47:3E:E9:8F:2F:3B:2C:34:3E:C3:AC:1E:AC
Certificate issuer: /CN=207edf9a4d3eeb473ee98f2f3b2c343ec3ac1eac
Certificate serial: 0195CC896E7F2C945F39C23B95D3CE0E1008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH7fmk0-60c-6Y8vOyw0PsOsHqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.mft
Manifest number: 07DF
Signing time: Tue 25 Mar 2025 09:01:53 +0000
Manifest this update: Tue 25 Mar 2025 09:01:53 +0000
Manifest next update: Wed 26 Mar 2025 09:01:53 +0000
Files and hashes: 1: IH7fmk0-60c-6Y8vOyw0PsOsHqw.crl (hash: G5jY0SdX26E1daScF9SsYkt+saBWpmTXkTA+qUDBtAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:89:6e:7f:2c:94:5f:39:c2:3b:95:d3:ce:0e:10:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207edf9a4d3eeb473ee98f2f3b2c343ec3ac1eac
Validity
Not Before: Mar 25 09:01:53 2025 GMT
Not After : Mar 26 09:01:53 2025 GMT
Subject: CN=95dd3eff25f8b4356fd939150a8cf80f3ffb2cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:47:09:fd:1f:6e:bf:c3:ec:1b:51:1e:4c:
57:89:6b:b1:9d:e5:bc:b2:6b:2f:10:29:96:a6:a5:
96:cd:f4:14:cc:0a:e4:49:47:5b:57:b5:76:a3:c6:
46:e6:d9:cb:ba:a6:7f:e7:12:c6:82:cb:45:77:d7:
af:83:fa:cd:39:bf:3a:cc:f9:af:33:a3:09:15:d8:
7d:57:dc:12:c3:e7:ac:b9:f9:46:57:6e:f1:5c:91:
be:75:b6:49:e3:f6:8c:95:53:37:71:67:f3:42:2a:
ce:c7:60:9e:58:62:a3:e2:91:df:41:3e:47:76:b3:
1d:b2:c9:c2:25:4f:9b:6c:c4:54:49:c8:ff:4a:d6:
c2:7f:df:1f:87:29:cf:94:55:17:eb:a5:c4:81:e2:
8a:42:a7:e9:f4:20:c2:2e:7e:99:dc:69:84:ed:99:
19:53:1e:32:95:0d:ea:a1:24:83:82:af:38:d7:23:
b9:5a:f8:76:bf:60:b8:5b:5c:28:ca:0b:bd:36:42:
23:cb:37:a8:34:4b:4e:d9:4c:37:c7:35:31:64:08:
73:a7:2b:81:e5:f3:11:73:f2:2b:4c:d4:d1:20:ea:
f7:68:05:d0:42:89:7f:b6:12:fe:8a:27:ca:23:8d:
37:e9:fe:96:d6:95:91:fc:99:31:ef:8a:a8:dc:a1:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DD:3E:FF:25:F8:B4:35:6F:D9:39:15:0A:8C:F8:0F:3F:FB:2C:F8
X509v3 Authority Key Identifier:
keyid:20:7E:DF:9A:4D:3E:EB:47:3E:E9:8F:2F:3B:2C:34:3E:C3:AC:1E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH7fmk0-60c-6Y8vOyw0PsOsHqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4e:4e:2a:cd:e8:bc:ac:a1:b2:4a:fc:21:2a:6e:79:7b:23:
b9:4c:bb:04:09:e9:7b:48:91:5a:2e:a6:ff:ab:f8:54:f8:33:
6d:0b:89:c8:b5:12:a2:53:01:c1:af:31:0a:fb:10:20:b3:ae:
81:4e:ae:9d:31:66:42:06:0f:7a:b8:81:cb:57:23:fd:0e:ec:
24:11:f0:00:29:aa:22:65:79:e6:10:55:2c:28:ae:78:e5:14:
9a:52:51:3b:d9:b3:a4:4c:ac:9f:c1:29:2c:85:0c:9b:1b:f0:
c5:39:d1:c7:5e:1a:2a:3a:1b:4e:75:d9:61:55:ab:3e:f5:dc:
af:32:e8:b6:dc:5e:4b:8c:8d:1b:46:0c:39:a4:6f:45:6f:e2:
fd:b5:87:d3:d1:d1:87:bd:fd:47:a1:fb:40:c1:a7:31:2f:c1:
cf:d3:6f:f8:1b:89:c1:45:1c:3b:49:fe:b3:e7:97:99:34:db:
cb:95:7e:87:64:80:49:4a:44:9f:d2:4b:04:56:ab:2a:43:dd:
bc:e6:49:0d:b6:27:de:7d:ce:ce:54:e0:59:2b:d3:ea:d5:3d:
6d:d1:67:32:8e:f4:ac:da:93:5f:7a:d2:a7:12:9a:11:be:70:
3a:6f:37:13:49:38:a3:24:58:c6:a8:6a:ad:f9:83:62:0a:fb:
1a:cd:ab:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:53:02 2025 by rpki-client