Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.mft
File: _ThaYWOY5BbHDcsyJWb5Pj0vvxM.mft (raw, json)
Hash identifier: D0lSPzcplWflwS337FaQw9yfhGRGgqmRYmyw1qjgvvw=
Subject key identifier: FB:58:6A:4D:45:E6:B8:19:17:23:69:42:EF:45:14:63:F1:46:25:72
Authority key identifier: FD:38:5A:61:63:98:E4:16:C7:0D:CB:32:25:66:F9:3E:3D:2F:BF:13
Certificate issuer: /CN=fd385a616398e416c70dcb322566f93e3d2fbf13
Certificate serial: 0194BC3C0D7C39E93A3BF1503FE1653FA846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.mft
Manifest number: 0B9A
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: _ThaYWOY5BbHDcsyJWb5Pj0vvxM.crl (hash: vHMqGtqBiL0A0Dqkqr+dLsqM8TsjY5wTM3YkDWxkcYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0d:7c:39:e9:3a:3b:f1:50:3f:e1:65:3f:a8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd385a616398e416c70dcb322566f93e3d2fbf13
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=fb586a4d45e6b81917236942ef451463f1462572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:e1:ac:61:cb:c3:69:7b:23:c2:27:a2:85:
6e:88:a7:93:9d:92:dd:09:b5:33:37:25:a9:32:c4:
a3:54:ba:af:38:9c:2c:30:ec:e1:9a:05:e1:11:5e:
c9:85:e2:0b:79:b9:61:45:c1:0f:20:b5:cc:f4:4b:
cf:3f:ad:e0:04:0c:ec:2b:c2:28:da:cf:e2:68:fe:
93:d2:7f:b0:6f:6e:1e:a9:d2:ce:e0:86:60:80:8f:
d4:ec:21:94:ab:4f:25:c0:c1:34:68:f9:a7:93:6f:
67:8b:6b:ce:54:be:e9:d3:e0:31:ff:04:5c:ef:27:
bb:fd:95:7b:a1:1e:2e:5d:5b:0b:0e:a1:ec:0a:80:
23:20:84:3d:bb:b1:b8:8c:6a:03:20:17:55:42:17:
30:63:1d:b2:5a:ef:77:e5:c1:3e:33:4a:69:98:09:
5a:57:e3:f5:ae:7e:c0:fe:87:92:4d:ba:15:06:48:
a9:09:09:6a:f7:e9:5c:82:ba:ef:37:0f:01:76:20:
1a:75:ae:be:35:7c:3d:e3:d7:9d:cc:89:43:d5:0a:
46:dc:46:51:c5:b1:98:e7:58:7b:33:88:42:8e:60:
cc:ca:ad:c2:3c:e7:a1:aa:c2:15:0a:84:f9:db:ad:
fc:03:5b:25:e8:93:61:a1:3b:eb:3c:61:a0:57:a3:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:58:6A:4D:45:E6:B8:19:17:23:69:42:EF:45:14:63:F1:46:25:72
X509v3 Authority Key Identifier:
keyid:FD:38:5A:61:63:98:E4:16:C7:0D:CB:32:25:66:F9:3E:3D:2F:BF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:50:2e:4b:f3:ee:50:98:6d:b8:36:f9:1e:96:7e:08:05:80:
e2:02:6c:ea:28:db:0a:43:29:b5:b3:c6:f9:7f:a4:0b:26:84:
b8:2e:79:ee:e0:ab:14:2e:d6:f6:19:68:69:f5:7a:5e:ca:dd:
96:30:99:39:5c:3e:1c:11:c5:6f:e1:e5:d6:2f:22:2a:e4:9c:
10:32:4c:7a:8f:1d:77:17:68:48:0e:a2:33:9f:de:b9:c7:5a:
87:8a:2e:29:58:52:d0:24:04:9e:d7:91:17:b0:c2:e5:e0:8e:
dd:ff:ab:ec:51:90:67:75:3a:02:35:ea:bd:f8:d1:fc:c2:fb:
7a:8f:92:73:42:62:36:69:d9:6f:4b:90:76:26:dd:19:82:49:
a5:f3:41:c3:f2:22:2f:a6:39:bb:e1:2b:4b:d6:9d:e9:ab:c9:
b4:5f:18:5f:e1:d3:7d:77:f6:39:33:02:7c:ef:b6:73:4c:52:
c4:9b:81:1e:ac:aa:99:72:0e:80:7f:ab:aa:56:73:1a:4b:e9:
85:89:c9:18:78:28:b5:da:8e:11:8f:de:b9:8e:8f:cd:ba:d2:
6b:08:a5:00:8a:47:17:63:8d:9c:73:e9:0e:3b:c5:8d:68:b5:
b0:c2:58:2a:b6:68:e2:e7:1c:7a:18:d0:75:2d:4a:dd:b5:b0:
86:31:8d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:00 2025 by rpki-client