Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft
File: C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft (raw, json)
Hash identifier: 0fKPXNgMvcqiSwEyDxPgneKTqtI9/8gjD9VnI1i5Pno=
Subject key identifier: 96:29:73:FC:B4:7D:98:1B:A1:55:31:73:ED:EC:52:8B:0B:4F:B1:19
Authority key identifier: 0B:80:C1:C5:0C:96:31:13:42:D5:D9:C6:12:4C:21:CC:B7:11:92:AA
Certificate issuer: /CN=0b80c1c50c96311342d5d9c6124c21ccb71192aa
Certificate serial: 019514A4B08B7A8FD2A79FF95F21DE710F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DBxQyWMRNC1dnGEkwhzLcRkqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft
Manifest number: 0DF7
Signing time: Mon 17 Feb 2025 16:01:32 +0000
Manifest this update: Mon 17 Feb 2025 16:01:32 +0000
Manifest next update: Tue 18 Feb 2025 16:01:32 +0000
Files and hashes: 1: C4DBxQyWMRNC1dnGEkwhzLcRkqo.crl (hash: g1BklswHuhNZea9L1ob2GLBmMJritrfH4xXu3MhNug0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:a4:b0:8b:7a:8f:d2:a7:9f:f9:5f:21:de:71:0f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80c1c50c96311342d5d9c6124c21ccb71192aa
Validity
Not Before: Feb 17 16:01:32 2025 GMT
Not After : Feb 18 16:01:32 2025 GMT
Subject: CN=962973fcb47d981ba1553173edec528b0b4fb119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:1e:23:84:ef:80:9f:18:ce:4b:ae:2f:f5:
d0:67:c8:b1:08:41:c9:3d:b5:6f:cf:1b:52:15:96:
a9:c7:e8:6f:c4:52:d1:c5:d3:dc:57:ec:a3:2e:29:
d0:31:f9:a7:d2:b2:f6:cd:14:0a:32:2f:9a:d8:e9:
b0:a9:d4:d3:0e:ca:54:9b:71:a9:a0:ec:92:30:45:
d1:fb:7f:ff:18:f3:b6:26:b0:74:c7:87:3a:58:98:
de:14:38:3f:69:e6:e3:31:1d:b4:4d:96:44:23:fb:
2f:64:07:e4:00:b6:06:0a:5b:91:40:2e:ef:ba:c3:
69:02:11:50:4e:4c:80:4f:27:4e:fd:72:c8:0b:f0:
68:9b:fd:cf:93:7b:5d:92:49:6f:2d:9e:c4:69:7c:
8a:76:52:e0:36:cf:0c:f7:cf:92:a5:15:cd:2b:6a:
4d:be:bc:55:29:96:38:0d:c5:2b:05:db:5a:56:61:
b3:bf:08:e6:09:03:20:10:5c:7d:81:3c:e9:77:fb:
cf:ad:b1:1b:0c:4b:f1:37:a5:4d:d3:b7:65:66:94:
29:eb:27:a8:9a:a8:9e:46:f1:b7:b6:7d:94:a8:62:
b7:61:72:c2:49:a0:dd:22:68:18:e6:d4:52:8e:70:
eb:8c:01:c6:d3:68:81:20:91:1f:f3:55:6e:51:92:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:29:73:FC:B4:7D:98:1B:A1:55:31:73:ED:EC:52:8B:0B:4F:B1:19
X509v3 Authority Key Identifier:
keyid:0B:80:C1:C5:0C:96:31:13:42:D5:D9:C6:12:4C:21:CC:B7:11:92:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DBxQyWMRNC1dnGEkwhzLcRkqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fa27b6-8172-4cf2-b65f-91a43f4da295/1/C4DBxQyWMRNC1dnGEkwhzLcRkqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7f:e2:62:97:7c:e8:65:1f:74:ce:97:a3:e1:6c:10:7a:ef:
4d:3f:45:9a:4a:f5:65:a2:2b:c6:5d:89:f9:92:1d:c8:49:62:
63:7e:44:75:91:56:24:47:66:ee:61:a4:38:56:d2:8d:a5:56:
c6:5f:94:ff:c5:8d:cf:da:1b:83:9c:a0:c6:64:4f:f7:c5:9f:
a7:d2:a3:35:f2:a4:40:f1:74:6b:bd:0f:0f:c3:5f:f8:a6:9c:
9c:bc:68:58:f7:7f:1f:fb:c5:90:d5:60:57:e8:61:b7:3c:dd:
37:ad:ef:27:78:a2:4d:80:11:be:90:a5:6d:e2:d4:fa:14:e8:
71:5d:f4:28:60:ed:9f:7a:0d:dd:b9:4a:78:47:1b:e7:39:e2:
85:1a:51:71:08:1c:db:54:fb:e1:1a:2e:a3:62:ba:ea:ee:29:
af:64:ad:cc:e8:eb:39:26:67:4d:6b:f4:47:ed:3d:20:52:59:
b2:58:47:d6:de:ca:b0:e2:59:b8:bf:f0:5f:92:a4:46:a1:c9:
fc:12:37:e3:18:f5:a4:fa:4f:e6:ba:27:a6:46:4e:b7:25:6d:
d5:64:a1:6b:83:e4:25:4d:b7:f0:fa:5d:c1:6f:5c:c4:6f:a6:
a0:cc:db:e9:0a:5e:e2:ee:70:b5:14:7b:cb:c1:50:3b:7a:73:
24:00:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:26 2025 by rpki-client