Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/65fef8-8483-4cf1-b0bf-feeca92ac3d6/1/g3t5wzf1FFChNtMFExd-h7yUfkY.mft
File: g3t5wzf1FFChNtMFExd-h7yUfkY.mft (raw, json)
Hash identifier: 8rfN+sxUNEFz514oePyiYqcIgtYqCwdayDKfhPtlFkk=
Subject key identifier: B9:6A:27:42:9B:9E:DA:85:8F:63:2F:E1:A9:38:D5:FC:68:E5:A9:BC
Authority key identifier: 83:7B:79:C3:37:F5:14:50:A1:36:D3:05:13:17:7E:87:BC:94:7E:46
Certificate issuer: /CN=837b79c337f51450a136d30513177e87bc947e46
Certificate serial: 01906D1A90EBB3F33624D7DF69D998F2B3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g3t5wzf1FFChNtMFExd-h7yUfkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/65fef8-8483-4cf1-b0bf-feeca92ac3d6/1/g3t5wzf1FFChNtMFExd-h7yUfkY.mft
Manifest number: 11EE
Signing time: Mon 01 Jul 2024 07:02:55 +0000
Manifest this update: Mon 01 Jul 2024 07:02:55 +0000
Manifest next update: Tue 02 Jul 2024 07:02:55 +0000
Files and hashes: 1: g3t5wzf1FFChNtMFExd-h7yUfkY.crl (hash: XP0/XdkUdB9g+oEQMM8Af/4KuIUDPsGDSct50u6S4u4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:1a:90:eb:b3:f3:36:24:d7:df:69:d9:98:f2:b3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837b79c337f51450a136d30513177e87bc947e46
Validity
Not Before: Jul 1 07:02:55 2024 GMT
Not After : Jul 2 07:02:55 2024 GMT
Subject: CN=b96a27429b9eda858f632fe1a938d5fc68e5a9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:2e:68:e4:d7:e8:98:b0:72:6f:d2:17:c1:
74:92:eb:e5:93:ad:2f:56:db:4e:da:f5:96:da:32:
3e:65:2f:63:c2:0d:b2:fb:28:49:59:a8:c3:ba:0d:
4d:cd:24:93:b5:c3:90:f9:56:8b:31:05:12:30:7b:
32:14:42:92:d5:08:f2:c6:9c:cb:37:37:42:6a:b8:
f7:1a:a3:94:cf:4c:fd:f2:25:e1:2d:03:57:b3:d1:
be:94:2e:d7:ff:a3:67:0c:81:63:06:0f:84:3d:cf:
32:10:b7:ef:84:58:da:31:f5:a9:30:ab:2d:67:b8:
3a:e5:a8:88:36:5f:13:73:e4:30:ac:52:71:03:f2:
b3:6b:81:64:ca:b4:11:ee:2d:05:41:14:dc:4f:8a:
24:51:22:a0:fd:8e:67:f2:b9:ae:57:97:a6:12:5c:
06:56:2f:3d:8f:64:19:52:aa:d3:b8:a2:39:30:cb:
aa:47:c1:37:68:8a:82:7a:d7:72:34:85:7a:11:4e:
78:25:80:d3:81:99:64:76:98:52:c2:96:da:5b:6a:
22:0f:b8:88:61:9b:e2:3e:6b:dd:9d:70:4a:7b:ff:
07:cb:04:82:dd:4b:83:38:41:ec:da:34:0c:37:5f:
bd:bc:a1:d6:53:1e:9f:75:72:aa:04:16:7a:49:e2:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6A:27:42:9B:9E:DA:85:8F:63:2F:E1:A9:38:D5:FC:68:E5:A9:BC
X509v3 Authority Key Identifier:
keyid:83:7B:79:C3:37:F5:14:50:A1:36:D3:05:13:17:7E:87:BC:94:7E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g3t5wzf1FFChNtMFExd-h7yUfkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/65fef8-8483-4cf1-b0bf-feeca92ac3d6/1/g3t5wzf1FFChNtMFExd-h7yUfkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/65fef8-8483-4cf1-b0bf-feeca92ac3d6/1/g3t5wzf1FFChNtMFExd-h7yUfkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:00:db:18:64:77:6d:b2:cf:91:00:2e:0d:4a:3c:8d:5b:b0:
fc:0d:c4:bd:47:6d:08:87:52:24:a6:1f:2b:d5:c2:19:58:81:
cc:ec:02:6a:ac:fe:0a:3f:57:c7:d8:f6:1c:44:8b:8d:b9:4f:
d9:a9:e3:12:1e:2b:a6:ce:7a:2c:32:ca:70:3f:63:9d:de:51:
30:62:36:c1:e2:10:b7:9e:c1:22:3c:38:fb:79:7d:31:3f:1e:
e8:f7:9a:97:de:fc:62:09:62:43:23:49:9a:61:50:40:dc:90:
bd:67:24:ed:b0:19:67:ca:08:8a:63:35:05:01:fa:45:a4:52:
42:a7:a8:69:da:28:86:db:8d:db:c5:62:a8:06:df:85:4f:57:
1c:81:97:ad:b1:cc:f3:d3:d8:5f:2c:be:6d:08:6a:cd:c8:42:
f4:a2:ec:c6:15:0a:f1:92:6a:2c:a5:00:a8:1e:3b:39:1c:e7:
fb:d5:f3:fe:78:f7:d3:1d:bc:d2:3b:12:ce:70:da:59:33:fa:
f8:2b:cc:9f:9f:69:0d:3f:73:4c:a9:2e:4b:88:89:9f:0f:f1:
9a:cd:38:29:12:e1:f0:51:03:c6:4a:13:82:06:02:ef:c0:bf:
ec:2c:42:bc:ea:67:27:0b:9a:4c:ad:a9:95:a2:9c:ab:ba:71:
bd:02:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:06:23 2025 by rpki-client