Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
File: FAd8W3ds23z3vDXWtELjZ3arDG4.mft (raw, json)
Hash identifier: ArOZ7PSydN18V9NwzLrmr5ARZvJrFU+f3V2jEz6X/PM=
Subject key identifier: B7:7C:7B:81:27:43:00:2F:0C:B2:45:16:5A:EF:D9:12:A3:47:E0:9C
Authority key identifier: 14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
Certificate issuer: /CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Certificate serial: 0194BBCEB412618FBAB507C48F087DF34DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: FAd8W3ds23z3vDXWtELjZ3arDG4.crl (hash: YDWix+iecR0308dOvOa7pDKmC2zgczAeEvTgVP0rv7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b4:12:61:8f:ba:b5:07:c4:8f:08:7d:f3:4d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=b77c7b812743002f0cb245165aefd912a347e09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:1a:e5:39:e7:5e:c0:a7:a8:a9:58:31:93:
a0:1d:85:83:c2:7e:5f:76:ef:33:82:fc:27:be:db:
3d:92:2a:e3:2b:b1:61:85:c2:b7:0c:e1:a0:3e:04:
9c:2b:aa:46:7d:73:14:15:d3:da:e4:a7:55:52:52:
1d:85:e8:ab:32:3f:14:04:96:46:9f:aa:59:d3:fc:
90:7d:30:4a:f3:b1:a6:ba:a1:c7:23:9b:58:9b:f1:
3d:d6:7c:c4:7e:59:cd:d8:c5:3d:a4:d8:61:d2:c6:
be:0a:28:a0:9f:5c:f4:f9:49:54:f4:3c:3c:24:e4:
53:f3:6a:3a:57:4b:9c:27:23:01:05:ff:35:06:e5:
20:25:3b:e1:47:77:e8:83:40:d7:33:a3:03:02:17:
b1:7b:4a:63:33:30:a9:40:ae:32:c8:1d:0d:56:3b:
8a:fe:97:08:79:a7:0f:d6:6a:c5:dd:33:b3:dd:3b:
20:4b:10:22:8b:4b:1c:53:d3:1c:87:b4:e9:e0:b3:
af:be:bc:2d:b2:57:61:8e:78:16:a2:de:bf:82:a5:
a2:5a:7f:02:26:45:d5:b6:5a:61:a4:9f:68:f1:39:
9c:db:91:30:27:b0:e3:40:d1:b4:fe:9e:ce:7b:fe:
ce:fb:93:dc:f0:2c:90:ec:a2:40:9e:a9:e1:2d:20:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7C:7B:81:27:43:00:2F:0C:B2:45:16:5A:EF:D9:12:A3:47:E0:9C
X509v3 Authority Key Identifier:
keyid:14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:21:2d:95:3d:b5:3b:eb:4f:3a:d2:82:22:c0:d1:1c:4f:bc:
5e:c2:6e:6e:29:61:63:a7:67:4f:e4:6c:17:53:09:62:de:9a:
c5:04:80:b3:b6:a6:35:43:be:4d:6a:ac:99:08:62:5b:aa:d3:
00:90:c2:fa:c5:90:44:a8:96:88:3f:ac:7a:96:e9:23:12:4d:
71:69:53:23:31:76:3f:d1:78:e3:5a:df:b3:f1:97:b6:4f:d5:
fa:d1:56:9b:92:47:ca:32:99:4b:df:12:73:ea:fc:69:08:3e:
1c:18:02:ac:81:1f:98:06:fe:7f:e8:10:1d:56:65:0e:67:e6:
ee:e5:c9:a2:26:55:10:ac:cf:32:fe:fd:c3:a9:75:3a:67:61:
31:1d:1c:c2:c8:5b:1a:94:64:3b:b1:90:42:5e:15:c6:3a:6a:
9c:30:4f:aa:4f:48:9b:0b:c8:83:f1:29:f0:6f:16:f3:ce:6e:
c4:c1:df:66:8a:05:37:54:5c:8e:12:a3:7b:3d:74:8f:18:a0:
ef:8d:1b:d5:bf:01:6f:9b:dc:d9:4d:76:3c:33:fb:a0:fa:46:
4f:c8:31:ad:fb:3b:00:2e:a0:6a:a0:2f:e1:35:6d:22:55:93:
96:70:e8:9c:db:ba:1e:60:3a:d2:a0:89:38:7c:37:ba:53:33:
68:37:1f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:09 2025 by rpki-client