Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
File: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json)
Hash identifier: 1GhyUfBBHw1XXsm12O/wWqe1GaUpksS2Z9k8Jcy0TG8=
Subject key identifier: C3:39:06:76:4F:89:4C:63:4C:42:05:B6:21:45:14:78:7C:F0:0E:E3
Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
Certificate issuer: /CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Certificate serial: 0194BC3C260F08A1394F3EA17C0FAB2C6B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
Manifest number: 08A0
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: VkdF1i2rULdZN21cSymY7cmfdiVX9OyqdBvgyrSorVg=)
2: wbh15XPn1kgCYyJ-XkIl20Yytuw.roa (hash: aWvLndo6Gq/HOzsYU6uHpO8FpYdNLyOKJEg8ZgZ7QAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:26:0f:08:a1:39:4f:3e:a1:7c:0f:ab:2c:6b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=c33906764f894c634c4205b6214514787cf00ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:91:33:ba:74:15:32:36:65:ba:9b:f6:90:
37:9f:3e:42:31:ad:24:33:03:7a:77:8a:46:fc:36:
29:39:b6:4e:cf:c4:e2:5b:e5:fa:21:a3:03:56:94:
be:2c:c3:df:f7:d8:ea:b0:86:82:77:11:af:52:1b:
a8:b9:aa:db:0d:5e:01:b6:66:3c:3f:30:2b:e7:1b:
00:a2:af:08:3c:33:19:d4:10:05:83:1b:2d:74:07:
c1:61:40:cc:aa:56:d8:9b:93:c5:d6:a6:2c:62:c9:
2c:d4:15:f7:7d:da:f4:6a:7a:c2:f8:23:0a:87:1d:
4b:ec:1a:7c:3c:08:f3:51:d6:37:d0:51:55:dd:ec:
d6:6a:13:c7:60:8f:f9:0e:1a:68:9b:e9:c6:e6:7c:
46:08:e6:7d:6b:81:9d:61:1d:5b:5c:fc:83:ee:63:
1e:80:13:22:da:46:2a:ae:23:3a:a0:48:2f:8b:38:
2d:84:92:9e:39:45:14:f7:09:4a:13:11:d0:a4:d5:
c2:96:f0:bf:f1:26:ed:b3:16:fe:b7:8f:1a:59:0a:
0b:c6:bf:02:4a:59:4d:f4:eb:c4:5e:78:53:c0:4a:
fd:94:9a:b9:69:fb:fe:06:8d:c2:87:b7:01:a2:c2:
2a:2f:5f:aa:05:1b:07:00:cf:0a:ee:43:6d:2b:53:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:39:06:76:4F:89:4C:63:4C:42:05:B6:21:45:14:78:7C:F0:0E:E3
X509v3 Authority Key Identifier:
keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e0:ba:2e:92:28:52:83:9c:b7:40:81:54:75:4d:0a:ee:ca:
49:66:01:b6:4c:21:ed:95:a7:15:f9:53:76:30:c2:88:cc:e1:
a7:d1:0b:4a:51:00:c8:c3:56:aa:be:f3:f3:22:80:e5:f1:5a:
65:35:11:03:97:d9:58:dc:8f:43:24:cf:ea:e2:96:be:f6:8d:
40:97:8d:aa:5a:02:ac:b6:04:75:01:fb:99:13:cb:a9:01:e2:
f1:ae:42:82:80:72:d9:73:50:b3:a8:b4:a8:84:e7:b7:74:0f:
7b:49:1c:4d:75:c8:14:eb:0e:12:23:bd:50:0e:6e:7a:df:21:
60:d8:a6:1d:74:d0:73:3c:fe:c5:7e:43:0e:4e:6d:2f:32:9d:
93:18:ae:e0:b7:00:41:8f:50:88:21:ca:ae:71:71:18:53:3d:
24:d0:93:e4:26:f0:b6:4d:cd:bc:6e:e7:85:5b:e7:68:b5:fe:
ee:c1:80:12:bd:f9:f8:1f:e9:0d:f7:6b:bf:ba:52:f5:6d:f6:
9a:e6:31:e0:e4:4c:18:4f:f4:04:b3:0e:b6:92:d7:5a:b6:1f:
a7:83:b6:cc:ad:d4:ea:31:dd:af:4e:3e:8a:25:b3:5f:6f:8b:
da:50:fa:a4:19:b1:37:69:85:09:a6:4d:a9:d5:30:73:12:65:
a8:b3:74:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:35 2025 by rpki-client