Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.mft
File: 7F4esePUCDzQChwAfbeS9xRLTQQ.mft (raw, json)
Hash identifier: pbwlnr8Mj13ksfjqAaZ/AMARAgMp3blv/04Syjj25Ws=
Subject key identifier: 2F:56:89:9F:4D:3D:E5:E7:B0:9D:81:84:0E:ED:A6:53:6D:E3:D1:23
Authority key identifier: EC:5E:1E:B1:E3:D4:08:3C:D0:0A:1C:00:7D:B7:92:F7:14:4B:4D:04
Certificate issuer: /CN=ec5e1eb1e3d4083cd00a1c007db792f7144b4d04
Certificate serial: 01943C21A70347B2832E492CE8D073C1D0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7F4esePUCDzQChwAfbeS9xRLTQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.mft
Manifest number: 01C9
Signing time: Mon 06 Jan 2025 15:00:25 +0000
Manifest this update: Mon 06 Jan 2025 15:00:25 +0000
Manifest next update: Tue 07 Jan 2025 15:00:25 +0000
Files and hashes: 1: 7F4esePUCDzQChwAfbeS9xRLTQQ.crl (hash: WMnZYpkGb4SnSM/9+J34UHMi2auEHjuuCGnuYcfFH9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:21:a7:03:47:b2:83:2e:49:2c:e8:d0:73:c1:d0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5e1eb1e3d4083cd00a1c007db792f7144b4d04
Validity
Not Before: Jan 6 15:00:25 2025 GMT
Not After : Jan 7 15:00:25 2025 GMT
Subject: CN=2f56899f4d3de5e7b09d81840eeda6536de3d123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:88:6c:f5:c9:d9:05:e9:ba:86:df:6f:f0:1a:
04:83:31:64:19:ce:08:4c:b0:98:a1:0f:b4:c1:06:
60:bf:74:c4:2d:2a:da:b9:d8:d8:be:29:d4:66:39:
95:b6:08:a4:b4:a4:bf:ae:52:54:d9:4d:c9:f6:90:
ae:e0:46:a6:05:c4:21:26:9c:c4:f6:b7:16:9f:bd:
d6:c6:8e:5c:4d:63:79:c3:f5:b7:da:c9:98:04:e7:
b4:b8:ff:4d:d3:8c:62:98:3f:9e:84:22:94:ce:c6:
fd:47:31:d7:d3:16:38:f2:c7:9c:b5:2c:82:cc:fa:
2a:e5:52:37:3c:1a:cc:6e:f0:54:f3:32:04:a8:24:
a7:43:bc:92:d8:c9:6a:85:47:6c:8d:a2:17:a4:7c:
35:03:51:0d:52:d7:b4:7d:d6:8b:85:55:c4:62:3e:
b3:f6:20:d3:61:ae:0a:77:c8:ee:51:98:92:13:9a:
52:e5:95:3b:35:6c:e6:2b:55:c5:c7:a8:34:64:c3:
e9:e7:33:e4:83:47:ca:4d:3c:cd:8e:6c:c3:c1:6d:
80:c4:ee:01:99:a5:0d:fd:35:3b:86:9e:21:42:b8:
30:ec:92:05:44:0d:bf:4b:3e:7c:ef:da:1b:83:96:
29:15:d4:e5:ce:b9:8d:5d:ba:ef:1e:22:d0:27:b9:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:56:89:9F:4D:3D:E5:E7:B0:9D:81:84:0E:ED:A6:53:6D:E3:D1:23
X509v3 Authority Key Identifier:
keyid:EC:5E:1E:B1:E3:D4:08:3C:D0:0A:1C:00:7D:B7:92:F7:14:4B:4D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F4esePUCDzQChwAfbeS9xRLTQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f0:96:cc:d9:a0:ae:04:b1:c6:27:da:81:9a:e5:99:8a:ea:
58:d0:99:b5:5e:8f:86:65:1c:a0:bd:ba:be:bc:59:6b:2a:03:
62:55:40:51:21:60:9d:0e:fd:39:84:23:25:5d:c5:d5:f9:c7:
0f:be:b1:3c:d7:31:8b:56:90:1f:04:cb:49:1d:5f:dd:98:a1:
08:b3:7a:42:e3:50:24:af:d2:44:1d:43:d6:6f:44:a3:3d:4a:
64:cd:15:0e:92:5e:04:cc:21:50:07:29:6c:b5:7a:4d:7f:b9:
ce:da:9e:8b:b2:17:9c:ff:ef:0e:63:c0:37:fe:32:5f:c2:70:
02:f0:e7:f5:9d:15:3e:10:2e:6b:68:39:23:13:ad:9d:54:04:
f0:81:73:1b:3b:71:2e:d5:e1:4c:c9:18:72:bf:12:c5:31:1d:
73:07:0d:0d:d5:b0:ef:8f:0d:39:f3:85:30:bd:8c:dd:fc:d3:
9a:82:12:c8:33:b0:83:36:81:61:75:31:5b:4b:8f:1e:10:cd:
2c:54:b9:af:0a:36:32:fc:32:bd:5c:be:23:38:7c:9d:c8:d4:
c3:f5:50:19:e9:18:5b:0c:0d:6e:4d:92:59:98:1f:fd:b8:02:
7a:43:dd:8b:f5:e6:a8:01:57:a3:68:a2:10:da:8f:f5:8d:29:
ce:ee:b8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:50 2025 by rpki-client