Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.mft
File: SHcGwrHYON95a_g_qn176rxcdvg.mft (raw, json)
Hash identifier: RI9GidRlag6jw90CikoTSuAAZRfUD3fVzJnYPrRcqKM=
Subject key identifier: 7F:0F:2F:10:47:D2:F6:7C:48:14:19:9F:27:41:D8:94:FB:93:4D:5A
Authority key identifier: 48:77:06:C2:B1:D8:38:DF:79:6B:F8:3F:AA:7D:7B:EA:BC:5C:76:F8
Certificate issuer: /CN=487706c2b1d838df796bf83faa7d7beabc5c76f8
Certificate serial: 0195380B42E5E22AC84916BC05F3972324F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHcGwrHYON95a_g_qn176rxcdvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.mft
Manifest number: 0C52
Signing time: Mon 24 Feb 2025 13:00:16 +0000
Manifest this update: Mon 24 Feb 2025 13:00:16 +0000
Manifest next update: Tue 25 Feb 2025 13:00:16 +0000
Files and hashes: 1: SHcGwrHYON95a_g_qn176rxcdvg.crl (hash: crbiEKJ/qEUW1wMatY+x1OyNCJsV19FXfwrnvT9bIjg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:0b:42:e5:e2:2a:c8:49:16:bc:05:f3:97:23:24:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487706c2b1d838df796bf83faa7d7beabc5c76f8
Validity
Not Before: Feb 24 13:00:16 2025 GMT
Not After : Feb 25 13:00:16 2025 GMT
Subject: CN=7f0f2f1047d2f67c4814199f2741d894fb934d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:74:29:a5:2b:b9:8f:ef:fa:62:9b:55:11:
26:2f:ca:d9:f9:4c:e1:1d:41:d6:d0:21:3b:b8:b0:
1f:63:68:d7:0e:fa:20:eb:f4:46:b6:52:12:a3:8b:
a0:5f:fe:8a:db:25:65:8c:ba:c5:a3:6d:3b:ef:62:
93:3c:ee:a5:b6:7b:af:cf:10:1b:52:a9:7f:61:bd:
83:89:6c:cf:08:e8:f6:ec:cb:9d:6f:b6:03:b9:f8:
94:63:96:5c:a7:4d:40:58:fa:6a:16:31:c6:af:ba:
89:3e:f9:a9:da:84:02:1e:0f:04:4e:23:a4:01:bb:
5d:60:a4:cb:a5:dd:17:ba:55:bf:5d:f9:40:07:19:
0e:d5:1b:ec:c9:14:ce:bd:46:9b:97:7f:8c:24:92:
83:a8:40:26:44:39:dc:c6:08:de:37:87:a7:02:93:
7d:f1:83:13:87:38:3d:23:7d:e6:e0:4c:a9:d5:d4:
73:c9:09:79:17:d9:53:57:0c:eb:c6:86:bd:20:d0:
93:bf:f0:57:0e:ce:cc:eb:6e:27:3c:88:a1:95:a5:
50:03:d0:bc:ae:2c:f9:82:54:10:2e:a9:cf:e0:2d:
a5:a5:10:60:35:d6:85:c2:8e:b6:48:1c:e8:98:23:
8c:52:f3:c7:0c:1b:77:05:26:b8:e1:a8:88:98:10:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0F:2F:10:47:D2:F6:7C:48:14:19:9F:27:41:D8:94:FB:93:4D:5A
X509v3 Authority Key Identifier:
keyid:48:77:06:C2:B1:D8:38:DF:79:6B:F8:3F:AA:7D:7B:EA:BC:5C:76:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHcGwrHYON95a_g_qn176rxcdvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/cf1693-e67c-4f73-aee1-e044071ef2d9/1/SHcGwrHYON95a_g_qn176rxcdvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:71:01:0d:d8:56:ff:3c:38:79:19:d4:bd:9c:59:ad:2d:cb:
12:72:ad:f2:19:7d:98:71:ab:3b:8e:1f:6e:7b:9a:e8:21:96:
ea:4c:dd:5b:c8:d5:8c:ba:1f:6d:ea:7c:91:3b:c3:3e:f4:3a:
29:4f:5d:24:0c:77:88:0e:58:56:77:81:a2:1c:0f:4d:da:5a:
f3:80:6e:ec:67:ab:a7:ef:ba:95:1c:08:d7:67:06:70:8c:e6:
7f:a1:b6:e3:53:ce:a0:b4:e3:4d:96:f1:1c:a9:c8:c8:06:ff:
6f:cb:d1:7e:82:39:44:5d:80:1f:0b:4f:aa:dd:9b:39:3a:85:
27:2c:64:61:d9:c8:97:6b:26:9c:a9:d4:ad:c1:6d:df:76:61:
da:22:f3:e9:0a:10:a9:86:9b:0a:28:f9:1a:55:68:f0:79:7d:
a9:1a:55:60:a3:71:71:e1:4f:d6:7c:25:74:9b:be:fc:70:78:
81:ed:c2:bd:ed:d9:50:59:70:a0:e0:6f:b5:0c:4e:1e:c3:02:
1d:5d:f0:27:53:0f:f6:62:05:73:a5:7c:cb:c3:00:74:ac:85:
b5:8c:36:c9:bf:43:a4:2f:6a:a7:80:50:c7:89:e5:ac:78:3f:
6c:3a:d9:a7:d5:24:bb:82:27:24:a1:fd:18:c5:3f:5a:69:dd:
39:1b:73:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:31:49 2025 by rpki-client