Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.mft
File: iF7nSXYIGvmeHXt0Btio9fbA97k.mft (raw, json)
Hash identifier: 1QT3oPVb59FHxqhFMa8Dx471/IQv331+XS/k6Gji+yA=
Subject key identifier: 01:F7:87:54:DC:7E:5B:ED:63:F6:E2:82:C1:78:64:65:AC:6E:7C:27
Authority key identifier: 88:5E:E7:49:76:08:1A:F9:9E:1D:7B:74:06:D8:A8:F5:F6:C0:F7:B9
Certificate issuer: /CN=885ee74976081af99e1d7b7406d8a8f5f6c0f7b9
Certificate serial: 01942A1BC1A15C765435A707820C8EF79271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iF7nSXYIGvmeHXt0Btio9fbA97k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.mft
Manifest number: 038B
Signing time: Fri 03 Jan 2025 03:00:49 +0000
Manifest this update: Fri 03 Jan 2025 03:00:49 +0000
Manifest next update: Sat 04 Jan 2025 03:00:49 +0000
Files and hashes: 1: iF7nSXYIGvmeHXt0Btio9fbA97k.crl (hash: t/LpXTVfoL55u+PrA/6e024J6oCfDDJ8rjmjHv6XwKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2a:1b:c1:a1:5c:76:54:35:a7:07:82:0c:8e:f7:92:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885ee74976081af99e1d7b7406d8a8f5f6c0f7b9
Validity
Not Before: Jan 3 03:00:49 2025 GMT
Not After : Jan 4 03:00:49 2025 GMT
Subject: CN=01f78754dc7e5bed63f6e282c1786465ac6e7c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:04:dd:b1:e6:d9:13:9d:d9:b7:cb:74:a1:
a9:96:c6:fb:67:72:71:48:99:f7:d8:58:65:6e:a7:
ea:b0:20:cf:53:2c:2e:a9:f3:0d:f5:52:b2:5a:b0:
20:d1:01:44:61:3a:b9:30:69:e6:a3:f8:85:8b:bb:
45:8a:2d:4d:2c:e7:63:1e:9a:3d:c0:44:4a:8d:bf:
25:49:4e:1b:21:3d:4c:86:bc:2a:3c:41:d6:0a:59:
1d:02:92:b6:de:09:90:a7:2a:29:58:4b:45:d9:1e:
52:4f:4f:43:df:d6:1a:a7:3c:de:df:d7:0c:02:a8:
88:2d:0e:11:4f:b0:60:1f:7a:75:d2:7a:db:c1:db:
a7:5f:6f:2e:41:63:ca:4d:a3:d6:92:10:b4:73:e2:
d0:5a:5a:3d:72:e1:7e:bb:74:c9:5c:82:bb:c9:f4:
d0:71:7a:3f:81:1a:25:03:92:a8:53:20:4e:a2:b1:
32:10:90:29:01:80:fe:6d:0b:01:57:14:95:cd:d7:
54:d6:78:c8:34:83:9d:dd:7b:6a:72:71:67:22:d4:
a4:cf:d9:1e:52:bf:ff:16:eb:19:17:45:53:1a:0e:
16:56:4f:d9:37:50:3c:fa:69:5c:70:36:d4:e2:2b:
4b:32:9a:05:c6:ec:8a:dd:6f:90:e8:70:ac:d2:ea:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:87:54:DC:7E:5B:ED:63:F6:E2:82:C1:78:64:65:AC:6E:7C:27
X509v3 Authority Key Identifier:
keyid:88:5E:E7:49:76:08:1A:F9:9E:1D:7B:74:06:D8:A8:F5:F6:C0:F7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iF7nSXYIGvmeHXt0Btio9fbA97k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f04e8a-a091-41be-8a27-ff9d24b4219d/1/iF7nSXYIGvmeHXt0Btio9fbA97k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:90:f7:00:24:82:69:0e:93:95:d0:ab:cb:7f:37:06:8f:68:
41:8c:55:dc:bf:ad:55:7f:e7:a7:b0:8b:83:14:42:f4:c4:bf:
72:93:c7:34:c2:65:1b:f2:3e:98:81:48:42:f2:f0:58:96:33:
b1:e7:64:ed:9c:d1:c4:93:05:4c:83:46:4e:0d:83:06:77:34:
38:64:38:ed:1d:7b:bb:0f:e2:f7:31:2e:cc:6b:a9:ab:d6:fc:
f1:97:eb:8f:15:cd:96:be:ea:68:f3:70:76:da:d2:1d:cd:7b:
b9:aa:d6:22:e0:0a:6f:31:ec:f2:5b:e8:d0:13:70:2b:6c:b1:
34:38:30:14:69:43:d3:ff:fb:fa:0d:18:26:fe:bf:e1:cc:49:
3d:c0:74:cf:3c:fe:f5:10:b4:56:39:3f:d0:c4:86:ef:fa:3b:
4a:5b:1a:54:9c:ad:8c:75:6a:ce:7b:62:62:f7:cb:3b:8d:d5:
53:59:5f:d7:94:c1:ca:97:fe:36:aa:1f:ea:1e:10:eb:38:2d:
3c:3c:37:c8:ea:28:6d:41:9b:ef:e3:32:fa:3a:91:ff:85:8a:
2b:43:da:13:03:47:d5:1c:29:8d:fc:d7:78:55:63:93:65:6f:
c5:4e:7e:9c:6e:ae:f5:13:3e:4f:6c:08:d0:2e:23:f4:63:b4:
9e:3f:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:34 2025 by rpki-client