Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft
File: 8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft (raw, json)
Hash identifier: hR46IX4LTgN5cCQUJspXIYGXvvQ5LjeWH8PC1uuVWr8=
Subject key identifier: 83:5B:E1:79:E7:C5:F4:13:80:D8:16:2F:A4:A4:85:0D:48:BB:4B:D2
Authority key identifier: F2:4C:C2:97:6A:69:ED:1D:D7:D1:0F:3D:6D:25:9C:7C:90:24:4C:56
Certificate issuer: /CN=f24cc2976a69ed1dd7d10f3d6d259c7c90244c56
Certificate serial: 01948D070AEB3C9A8F9668AABDBBA7754DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kzCl2pp7R3X0Q89bSWcfJAkTFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft
Manifest number: 029E
Signing time: Wed 22 Jan 2025 08:00:36 +0000
Manifest this update: Wed 22 Jan 2025 08:00:36 +0000
Manifest next update: Thu 23 Jan 2025 08:00:36 +0000
Files and hashes: 1: 8kzCl2pp7R3X0Q89bSWcfJAkTFY.crl (hash: wDA5MSdIvpLLd3QpyS55+YtLa8DfZGSvGExWmRR1KAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:07:0a:eb:3c:9a:8f:96:68:aa:bd:bb:a7:75:4d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f24cc2976a69ed1dd7d10f3d6d259c7c90244c56
Validity
Not Before: Jan 22 08:00:36 2025 GMT
Not After : Jan 23 08:00:36 2025 GMT
Subject: CN=835be179e7c5f41380d8162fa4a4850d48bb4bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:1f:77:c0:79:5b:22:85:82:7a:d4:51:ed:
d9:41:72:3c:38:ca:6a:fc:d9:29:d7:49:f7:20:74:
df:e5:f6:eb:ba:4e:ab:17:30:63:92:52:b8:bb:3f:
3a:bf:62:2f:aa:61:70:f8:ce:8b:fd:e7:41:2c:82:
e0:29:3a:a7:22:f9:17:8e:32:2d:90:ca:83:81:f3:
31:4a:90:66:81:a8:a8:a0:d7:ea:3a:35:65:32:00:
64:89:75:1e:0b:f1:9d:5e:72:53:ba:47:f2:0a:d1:
30:91:07:de:8a:1e:7f:0d:a4:9e:0f:87:81:0c:5b:
8b:de:69:4d:52:f3:6d:4e:71:10:fb:f7:5c:f4:79:
ab:64:0d:61:4e:dc:b8:36:a6:fe:db:c7:4f:65:7d:
81:d0:48:3d:3b:a0:a1:2f:34:25:55:8b:34:f3:8d:
45:f5:7e:2c:b9:bd:40:94:a5:21:d2:d0:bf:d4:6b:
76:34:a1:31:8d:2a:35:af:9c:c1:cb:d1:76:83:89:
c6:a0:f2:c2:95:b4:18:de:85:f9:e6:86:29:27:5a:
86:ad:85:de:f7:c5:c0:ef:6b:d7:24:aa:7c:65:2f:
91:4a:f8:19:10:c5:09:97:4c:02:92:e6:d8:9c:2d:
4d:71:c4:7c:76:dd:0a:2c:be:d1:e0:fc:f7:69:b9:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5B:E1:79:E7:C5:F4:13:80:D8:16:2F:A4:A4:85:0D:48:BB:4B:D2
X509v3 Authority Key Identifier:
keyid:F2:4C:C2:97:6A:69:ED:1D:D7:D1:0F:3D:6D:25:9C:7C:90:24:4C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kzCl2pp7R3X0Q89bSWcfJAkTFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5c:fc:fa:41:ce:c6:07:3e:b8:d4:96:a3:d9:ee:9e:40:28:
30:81:b4:70:d9:96:27:c4:9e:15:e3:b1:db:02:73:5b:ad:4f:
de:5d:00:58:9c:8b:24:eb:43:9a:f3:2b:9f:25:b1:14:64:95:
75:a2:ff:13:99:3f:40:52:56:fe:62:0b:e7:5e:1c:36:29:59:
fe:52:a6:d9:52:83:49:f9:ea:1d:af:7e:a0:1d:ea:d9:a6:d5:
97:dc:bb:0f:37:72:b4:14:64:a2:9c:dc:82:e6:ec:7b:3a:f9:
20:4c:78:7c:bf:48:88:6f:ce:55:fd:f2:f2:fa:10:d9:53:b1:
10:90:3d:a4:4f:b7:d7:a4:5e:c9:41:0d:30:a6:57:20:5b:5f:
09:72:44:3a:2c:8b:c8:c3:5c:a2:23:11:9c:05:3c:e8:13:96:
d6:e9:2f:fa:7e:88:e3:10:7e:46:2e:9a:52:5c:32:d5:43:e9:
f6:52:bd:b5:e8:15:fa:5c:39:f7:6c:c9:15:f6:6d:a2:2f:94:
b9:c2:fe:f5:6e:69:70:84:17:a3:63:9d:54:4b:45:43:ff:15:
1b:ea:35:a1:b8:81:e0:a6:02:53:1a:11:01:b9:aa:e5:0f:ca:
ea:ea:95:d7:4f:37:65:6c:46:41:a1:ce:9c:f8:e6:93:c4:10:
81:a4:cb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:55 2025 by rpki-client