Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
File: 1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json)
Hash identifier: 00kT4WTnzUQsGt0Ei+s/aMSWeoAvmDI0UUOb3LARAXs=
Subject key identifier: 1D:5A:F5:4C:37:84:A9:02:A5:0B:3D:6C:C6:1D:CD:E8:39:A9:F1:B2
Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
Certificate issuer: /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Certificate serial: 0194BBCEE29D96DA513E5CA9C0A573429294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
Manifest number: 09ED
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: v9ErNE+a5cf9+y1LPWoSPeN0VKLjibfNQ7UC1WuQujU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e2:9d:96:da:51:3e:5c:a9:c0:a5:73:42:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=1d5af54c3784a902a50b3d6cc61dcde839a9f1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:91:78:f0:01:c2:de:07:27:9c:73:69:c2:
7e:8a:dd:f4:00:de:ab:c8:cd:af:55:fc:e6:fb:a3:
1c:ce:ff:cb:95:6b:c6:d8:58:6d:d6:81:5e:e3:c3:
ac:50:19:bb:92:c6:5d:5f:4f:85:f2:c5:15:99:58:
40:38:44:a0:b6:8d:53:4d:7f:01:a2:5c:98:66:e4:
fb:16:05:32:1c:8a:d9:f8:f0:d7:60:97:18:5e:e6:
f3:ce:ff:f3:10:d3:5e:ed:e8:34:5b:0d:fb:9f:80:
9c:0d:34:01:9a:06:83:68:41:30:9c:de:38:3b:73:
31:d3:f0:e1:9b:5e:d1:4e:28:fb:cd:72:fc:6d:1a:
d1:37:f6:64:66:1b:23:a7:3a:91:f3:5f:3b:67:70:
18:24:3e:04:08:9f:1d:43:20:08:78:4e:b5:ca:41:
41:e1:86:42:a5:7a:f6:f0:f4:b7:3f:17:ff:95:dc:
64:a7:58:64:3b:d1:c4:e6:21:fe:da:76:43:43:f9:
d4:76:f1:51:fe:2f:ab:d3:0c:01:67:dc:02:d2:1d:
7e:a1:35:a5:66:de:0e:ee:44:4a:f4:59:21:71:fe:
59:50:2f:14:c2:c5:28:78:d0:2f:da:f1:b0:a6:0f:
90:a1:e1:07:b7:37:3f:05:fb:74:ad:7d:7f:98:61:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5A:F5:4C:37:84:A9:02:A5:0B:3D:6C:C6:1D:CD:E8:39:A9:F1:B2
X509v3 Authority Key Identifier:
keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:36:c2:f3:ee:c5:36:b1:e2:22:ea:6d:6c:bd:52:76:97:c5:
22:67:98:a5:9b:7e:36:e7:6b:53:23:71:25:41:a2:c6:79:69:
3e:2d:d7:29:19:9c:3e:b8:4a:2c:67:1f:2f:4d:b4:81:9e:94:
1e:ba:94:18:8a:49:80:0a:de:cb:81:c8:21:89:11:38:36:64:
a2:9f:ee:2e:20:b5:39:85:5d:e5:36:85:0d:df:fe:cc:f2:1b:
8b:ea:bb:ae:b4:6e:07:f2:ec:18:cb:da:55:cb:d0:9d:30:78:
6c:5c:2c:91:b1:7d:ed:da:36:e4:c7:b5:28:c0:65:f5:b6:d1:
24:82:c2:6e:a7:f3:f6:23:d6:7e:01:05:3e:2f:ad:57:35:18:
31:9a:80:d0:bf:f5:fd:71:72:7f:c7:90:71:87:26:fb:39:86:
e7:66:5d:66:fc:c5:b2:0b:7f:84:ef:a1:4f:33:3d:be:6d:7c:
b7:f8:60:d2:b3:53:08:ad:bc:83:32:a7:41:85:5e:fd:79:35:
7b:a9:69:37:29:fb:b8:34:c6:a0:89:bc:d7:88:ea:d6:fc:bc:
0e:6a:bf:52:c6:00:4f:96:c8:67:96:da:46:da:fb:8b:14:75:
67:ef:bb:12:32:2b:fe:97:5e:af:74:ad:8e:25:f1:63:a5:b8:
5f:eb:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:00 2025 by rpki-client