Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/db226a-998b-4b88-9c11-64f2a0fff3db/1/r7NGGNyBMKnxANOMnaVdD2S44QA.mft
File: r7NGGNyBMKnxANOMnaVdD2S44QA.mft (raw, json)
Hash identifier: CNoxtoWeodh2bxQeGO2pus6I6vd7TIOakNvMHMGlDeA=
Subject key identifier: 8C:7B:F4:24:CC:09:22:96:30:AA:F9:71:E9:21:C6:37:C8:0F:E5:F2
Authority key identifier: AF:B3:46:18:DC:81:30:A9:F1:00:D3:8C:9D:A5:5D:0F:64:B8:E1:00
Certificate issuer: /CN=afb34618dc8130a9f100d38c9da55d0f64b8e100
Certificate serial: 0187609C8DD929383F749E1195B6ACCE2EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7NGGNyBMKnxANOMnaVdD2S44QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/db226a-998b-4b88-9c11-64f2a0fff3db/1/r7NGGNyBMKnxANOMnaVdD2S44QA.mft
Manifest number: 0F
Signing time: Sat 08 Apr 2023 11:24:45 +0000
Manifest this update: Sat 08 Apr 2023 11:24:45 +0000
Manifest next update: Sun 09 Apr 2023 11:24:45 +0000
Files and hashes: 1: r7NGGNyBMKnxANOMnaVdD2S44QA.crl (hash: F/ZQ2XaG4yfmel0NZd4oakK1p2uJ7uKzj6Ie7KOvbT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:60:9c:8d:d9:29:38:3f:74:9e:11:95:b6:ac:ce:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb34618dc8130a9f100d38c9da55d0f64b8e100
Validity
Not Before: Apr 8 11:24:45 2023 GMT
Not After : Apr 9 11:24:45 2023 GMT
Subject: CN=8c7bf424cc09229630aaf971e921c637c80fe5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:19:eb:f1:cf:08:56:67:24:ca:2d:5f:9c:ec:
88:76:25:c0:22:2f:73:3f:bc:a5:50:65:0e:b3:4a:
ca:82:5c:e1:c0:d2:57:39:db:04:e0:93:02:c5:49:
94:33:2c:c2:50:d9:c9:27:ec:17:e5:e0:21:ce:63:
8d:d0:bc:c5:7c:9b:72:da:2d:1a:f3:41:9d:9d:39:
f0:dc:53:08:7d:5e:60:e4:0b:fb:21:3c:83:06:c2:
c2:9a:eb:0c:c0:e7:d5:3b:69:3d:df:06:44:47:d9:
65:16:77:43:a3:0b:fb:07:9a:6f:c1:e1:63:b8:bd:
ca:10:4c:4f:da:f0:48:7f:25:3f:a2:0f:c0:7e:fc:
aa:9f:45:cd:f6:e1:2b:d3:e2:3a:d5:b4:c9:bd:5d:
ae:45:6e:52:0b:e4:cd:ea:42:8f:89:5e:66:a4:b9:
52:52:4b:30:11:ad:e5:d7:79:16:b8:34:02:ff:9f:
df:28:29:2c:8e:94:53:53:ab:1f:f5:c2:f5:39:27:
83:74:6e:b3:ff:2b:1d:66:cd:df:b2:49:a9:00:51:
6f:eb:6d:d2:0f:95:7c:1a:f5:51:cb:19:c2:b8:4c:
c4:8e:1a:03:73:20:a7:e0:a8:d1:cc:ef:f5:92:39:
42:b3:47:54:a3:ac:8b:1a:f1:fa:0d:b7:c8:96:14:
d1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7B:F4:24:CC:09:22:96:30:AA:F9:71:E9:21:C6:37:C8:0F:E5:F2
X509v3 Authority Key Identifier:
keyid:AF:B3:46:18:DC:81:30:A9:F1:00:D3:8C:9D:A5:5D:0F:64:B8:E1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7NGGNyBMKnxANOMnaVdD2S44QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/db226a-998b-4b88-9c11-64f2a0fff3db/1/r7NGGNyBMKnxANOMnaVdD2S44QA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/db226a-998b-4b88-9c11-64f2a0fff3db/1/r7NGGNyBMKnxANOMnaVdD2S44QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:20:a9:2f:75:ad:61:af:40:91:16:4b:07:78:11:ac:d7:65:
dd:e0:14:dc:82:ce:b9:10:22:0a:b4:d6:a7:6d:ca:13:39:eb:
35:7b:9a:38:4f:02:24:77:05:9f:d8:ac:46:d8:db:0c:a4:3f:
ae:f4:ca:0b:72:d7:bb:6d:1a:95:be:a8:c0:5b:28:5b:ac:93:
e5:1f:40:e4:10:70:a5:f6:b2:83:d8:3a:72:0f:33:6f:c3:eb:
d6:06:3b:7f:b7:a6:cd:90:57:aa:64:ab:fb:ed:7e:c9:14:90:
41:72:7f:0c:b4:0d:21:23:d5:6d:51:7f:d9:06:a4:1a:29:72:
9f:e2:3e:f6:32:31:02:35:6b:1f:78:ca:a4:92:6c:05:2a:19:
ca:19:6e:0a:46:0e:3c:03:a5:cd:41:dc:ff:b6:5c:62:a7:66:
ff:76:f5:e0:01:eb:27:5f:69:49:38:c6:64:d3:22:cd:ea:0f:
14:78:45:46:d0:3a:8b:6e:4c:1f:56:df:d4:f4:51:e7:79:2f:
0a:d5:34:de:8b:0c:e3:e9:d7:eb:1d:e1:34:ee:ea:c8:df:d0:
c5:d1:10:db:1f:49:7b:cf:54:38:18:87:cf:87:78:ce:0c:85:
57:6f:50:8b:6a:f2:b0:a8:84:4e:45:6b:cc:d9:9e:e9:66:4e:
ed:6b:10:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:06:10 2025 by rpki-client