Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
File: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft (raw, json)
Hash identifier: CvEglakxlqR2b0dbQb21l1LyGAPrpGngUrBBZqTYVwU=
Subject key identifier: FB:38:8B:B6:02:E2:2E:1D:82:9B:3F:4B:C7:D3:F4:58:54:FF:03:68
Authority key identifier: D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
Certificate issuer: /CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
Certificate serial: 0194BCE0DE611D889F807A4E1FF068D7DF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
Manifest number: 0142
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl (hash: SPvfMEVfisdCJDryrq2+JDI79RHF3NkkgEYej4qOwbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:de:61:1d:88:9f:80:7a:4e:1f:f0:68:d7:df:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=fb388bb602e22e1d829b3f4bc7d3f45854ff0368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:56:24:e5:68:5c:dd:b7:c5:b5:95:5c:c2:d3:
b3:45:71:24:48:1f:c3:42:f6:7f:e9:da:a0:6c:3a:
4a:9a:ca:c3:99:2d:36:64:c0:14:4e:78:17:38:8b:
fd:69:bd:0c:64:cc:34:0c:e7:86:d8:47:30:c9:31:
f3:f0:00:a9:33:f4:9d:df:24:b0:ea:02:6a:e3:d2:
07:49:8d:e2:b3:7f:20:28:78:e1:13:cf:c3:fd:11:
57:df:34:5b:cb:5f:75:6c:53:2b:64:db:4f:36:0c:
27:8a:51:bb:13:43:42:71:a0:92:47:75:10:0e:1f:
6a:42:e2:9c:9b:97:be:a1:c0:b5:85:07:f9:86:f1:
8a:7e:1e:d9:0b:1d:b7:56:0a:31:e4:ab:12:6d:3c:
e1:d1:28:1f:a7:ec:36:c8:37:61:d8:49:86:67:0a:
b2:46:d1:cb:70:2c:37:60:e8:bc:fb:8a:a9:f9:26:
14:e5:71:79:ac:be:9c:bb:5c:c9:f0:82:d5:cd:d8:
b3:50:7f:9f:17:3b:08:5c:e6:03:f0:97:6d:52:1a:
c3:8a:ca:48:e7:47:9c:c0:9c:ef:08:03:8a:99:83:
2d:cd:56:4e:12:40:9d:68:d1:40:c1:87:b1:38:41:
d9:0d:b5:5f:40:5a:a7:16:14:de:7f:27:f4:81:02:
90:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:38:8B:B6:02:E2:2E:1D:82:9B:3F:4B:C7:D3:F4:58:54:FF:03:68
X509v3 Authority Key Identifier:
keyid:D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0a:02:55:8b:d6:74:dc:12:76:d9:7b:f2:b2:98:8d:a0:10:
4f:48:59:86:04:2e:03:17:41:64:6c:40:92:c6:ac:21:80:f3:
a1:c3:9c:f6:cd:02:58:d1:55:89:06:c5:a6:f7:40:a3:dd:82:
92:d1:6d:bd:db:fc:9c:eb:6b:d0:86:70:2f:4c:0c:19:84:66:
70:2d:47:51:68:ec:17:97:09:58:e0:45:00:b1:a7:d3:87:8c:
74:85:01:46:51:48:70:79:0b:dd:2f:ca:2c:31:ac:fd:99:d2:
1d:8d:54:77:df:95:1a:53:30:74:37:21:a4:28:cc:b8:16:b1:
d2:be:25:07:36:34:c1:d2:4d:eb:76:cc:4a:81:18:c8:71:87:
64:09:35:9a:f5:b6:ba:e8:69:95:02:3a:2b:28:a7:4a:47:8c:
5c:b5:39:b8:06:b9:40:6a:07:82:8b:5a:5f:88:d8:c2:26:46:
30:7f:20:7a:43:8c:77:5c:9e:34:ed:a5:de:a7:a1:6b:32:20:
70:09:ee:05:1c:17:6b:a2:a2:5b:6e:1d:60:1e:e7:2c:98:f7:
dd:4e:ae:3a:a8:f7:bb:9e:0a:a0:05:f8:18:fc:dd:8d:50:4d:
cb:22:c8:60:68:32:91:bd:c0:40:15:45:3a:3e:16:0d:30:78:
3b:cf:28:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:43 2025 by rpki-client