Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
File: Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft (raw, json)
Hash identifier: 40b/Z8mLjx8YJlF174xyqpXVLBtMupurkAB+9AEJg1w=
Subject key identifier: A9:AA:23:B8:9B:00:A3:BC:68:70:D9:24:04:97:75:37:F5:88:22:5D
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Certificate issuer: /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial: 0194BBCDC6C444A83A5C352A2D0D69092AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl (hash: MRpeHeGOKMkRp9T/yxVFykWmOhJfoDm0D3lXnHSoHL8=)
2: _AGKWozlzWCnt0EVUV_nIRjWGDc.roa (hash: u4jnpeyvwfIgkyOL/DVIQbqgyc9sUOLPqmAM+WUWM1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c6:c4:44:a8:3a:5c:35:2a:2d:0d:69:09:2a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=a9aa23b89b00a3bc6870d92404977537f588225d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:ab:a4:5f:95:b3:1f:0e:72:90:ee:75:aa:
7d:9d:73:6e:9e:28:ef:88:a0:60:2c:8f:02:62:62:
f9:cd:fa:91:e9:2a:6e:15:8a:1b:df:29:68:19:3a:
c0:95:1e:d2:d3:92:a7:dc:49:86:71:3c:2d:9a:5c:
43:bf:c5:2c:cb:1d:9f:1b:d0:83:5d:e7:16:b8:b9:
28:40:80:cc:85:d4:a0:e1:ec:bb:6b:bc:46:53:bb:
96:9b:78:e2:66:2c:f2:db:f7:5d:a1:18:27:6d:f3:
8e:3b:9e:d8:6f:78:d0:b7:72:66:bd:92:e6:45:4e:
31:7d:97:86:aa:d5:9f:01:ab:2e:ae:14:fc:97:02:
de:41:7b:73:3e:c3:6a:e4:82:3e:98:66:06:7d:5d:
35:43:7b:0f:a8:e7:84:d9:b5:5d:e1:7b:71:92:b8:
72:4f:ec:e1:3a:e8:7a:52:cd:04:3a:f6:e9:46:fc:
c6:2d:d6:90:c8:cd:39:fa:53:cc:13:ef:f3:cb:cb:
b9:b7:99:1f:26:26:0d:83:95:65:d6:87:b5:19:88:
8f:97:4b:0d:2e:a4:14:02:6c:8c:e1:89:da:85:1b:
22:06:18:a9:58:43:02:e9:df:58:62:3a:e9:33:7b:
86:eb:3c:31:60:e7:d2:f0:3e:99:6d:91:37:84:59:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AA:23:B8:9B:00:A3:BC:68:70:D9:24:04:97:75:37:F5:88:22:5D
X509v3 Authority Key Identifier:
keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:06:2d:9a:30:5c:29:c5:c5:88:b8:c8:3c:14:71:b1:da:e6:
fd:ec:ed:51:22:4b:a9:70:51:2b:c7:7c:54:c5:c2:e0:c5:b6:
1e:c1:db:e7:ec:97:dd:42:7f:b1:ae:43:ac:8d:b9:15:e8:0e:
8c:9a:9f:54:2f:28:0a:fb:ff:34:74:ce:81:9d:83:56:88:13:
f2:bd:e9:21:39:a8:73:a2:83:63:57:d2:e8:d1:0e:0c:70:27:
ad:b1:92:c3:c9:0a:0d:75:7d:37:a7:8a:7b:0f:7a:44:7e:f1:
05:f7:62:31:a1:6b:70:8f:a5:51:b0:a3:bd:da:ca:65:f1:9b:
5e:85:2d:0a:28:f7:d2:1d:4c:0c:c6:13:fe:ca:04:b6:46:0a:
52:ed:91:57:6b:27:68:42:f4:e2:77:63:61:a8:a0:f6:d6:ce:
e6:f2:00:1f:50:11:bf:6f:e4:fc:78:fe:b1:ff:25:41:e8:5c:
51:83:02:02:b9:a6:b1:48:70:67:56:7d:a1:39:47:9e:80:d8:
d4:c8:3b:8e:48:af:3e:85:73:20:83:65:2f:09:0b:9b:9e:9e:
5c:7f:fb:61:79:8a:4d:18:fb:7c:3f:70:49:13:f2:69:f6:5c:
ec:67:81:27:ba:19:38:a8:5f:55:84:2c:56:42:7a:80:47:8e:
fa:99:27:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:43 2025 by rpki-client