Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: f538zdzWVdGr27puvqSbDUxQqCnXAlnj5mHSCCSO0GU=
Subject key identifier: F4:C9:C8:62:65:0E:56:02:95:24:E0:CD:18:83:09:FC:3A:A4:D8:9A
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 0194BBCDDCF95E4FBC1779BF8B40C5FCDE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 075C
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: M3Rkk3czeWN586HS32opM+JQ0NbAjYLEs/bSREr3Ykw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dc:f9:5e:4f:bc:17:79:bf:8b:40:c5:fc:de:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=f4c9c862650e56029524e0cd188309fc3aa4d89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:1d:9e:dc:aa:aa:27:ce:08:4f:ff:30:1c:
18:95:44:b1:4c:c3:ac:6c:f7:b5:c7:d5:14:2d:64:
04:81:00:d5:ca:e9:4b:cd:63:3c:2e:e2:fd:f9:29:
3c:15:5c:1e:67:b9:1c:e6:7d:b4:fe:32:0d:a1:97:
ca:92:d2:39:64:18:7a:f3:67:4b:bf:39:1e:97:04:
c7:a5:09:52:35:c9:fd:4b:92:9a:97:8a:8e:6a:cc:
a2:66:82:29:e2:25:43:87:2c:88:52:c0:86:d5:a7:
4d:b6:6e:63:b8:3f:22:28:6c:8b:a6:55:03:d0:e1:
f9:ab:ee:78:49:71:80:d4:17:68:c6:ce:84:74:c8:
61:10:35:c0:07:70:4d:49:f8:cc:f6:97:d1:74:3a:
3f:a1:82:9c:72:d7:5d:af:19:a4:9d:4f:06:91:90:
8c:a6:b6:1e:b7:98:8c:0e:6d:10:77:c1:4e:d5:76:
ab:e2:58:74:e8:c4:c1:70:86:6a:0f:85:37:d7:44:
f3:26:a1:44:eb:cc:47:58:0e:0a:1b:c5:3e:2a:d7:
29:ca:74:e1:b5:54:3d:29:99:32:0a:1f:02:8b:89:
31:43:d0:a2:5d:6c:9b:c0:ba:d2:2a:ca:a9:bc:20:
56:3c:2f:59:ba:ea:d3:16:53:cb:d8:62:9d:ed:9b:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C9:C8:62:65:0E:56:02:95:24:E0:CD:18:83:09:FC:3A:A4:D8:9A
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dc:c7:53:d4:e8:38:2c:14:5b:96:ab:ff:1a:c5:72:71:44:
61:f5:7c:74:a9:4b:53:0e:94:33:bb:c8:d8:89:7d:08:c2:2e:
80:72:eb:d2:7c:a9:2c:42:01:53:6f:0e:5a:32:33:2d:9f:84:
25:c2:24:e1:e3:91:8f:93:82:79:00:1c:36:77:9d:37:00:38:
76:01:7d:fd:b7:37:1c:6a:4b:4e:43:55:57:94:18:9c:3e:ff:
94:97:69:e7:21:fc:38:c4:d1:d9:ab:b5:97:c3:c5:5e:09:12:
50:84:cf:1d:31:41:ed:86:c5:c1:3f:f8:0d:b4:66:c8:fa:45:
5b:14:ac:35:6b:ab:aa:91:62:ed:d7:52:17:ff:9a:b3:dc:b3:
ca:63:88:ad:5a:a1:c8:f2:c0:46:23:ec:d6:4b:62:08:b6:87:
fb:6c:6e:d2:12:e6:95:a5:33:27:da:98:6b:94:0c:03:59:2e:
3f:8b:12:4e:91:e2:c4:20:24:f0:0b:2e:33:78:25:33:23:ff:
a1:64:51:4a:4a:3f:4f:9d:24:f8:71:2a:ff:d6:02:bf:a3:60:
30:6a:f0:83:71:96:c6:15:01:47:70:e4:ca:5e:fe:c7:d8:e6:
20:5c:f8:1d:42:e2:60:5a:d7:43:71:43:0d:11:a4:44:d6:04:
4a:9f:f0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:02 2025 by rpki-client