Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: JGLweFA60Zlv4RPTPiY8KuBxvQir4luIydgqXcS8pjY=
Subject key identifier: CC:ED:42:41:7F:DF:D7:DD:17:85:93:F3:7B:7B:6E:CB:B8:06:A6:BB
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 0194BCE0DE7245A4222BC98382894F39DE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 0C88
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: RjVzRp5suRo5LSKsYZUavOQY5hi5M9Fm6SZ9Oy472zU=)
2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:de:72:45:a4:22:2b:c9:83:82:89:4f:39:de:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=cced42417fdfd7dd178593f37b7b6ecbb806a6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:d6:31:02:ba:5c:fd:de:91:b6:cf:24:86:
bf:a0:31:a3:df:b9:5a:06:34:30:a4:8d:a0:af:d5:
92:3a:9e:5f:a9:1d:d7:e3:8c:c9:ab:f0:87:e8:3b:
c3:03:76:d7:02:3a:e8:6d:f2:44:1c:72:55:bc:81:
7c:f7:4b:85:f9:6b:73:de:95:b5:59:7e:d9:d1:53:
66:f4:0b:e0:9c:4b:df:13:c9:6c:b2:24:11:ff:6a:
11:ed:7c:ae:d5:92:43:7f:a9:6c:c0:21:70:b9:93:
f9:6f:e4:51:dd:b8:3f:f8:55:e9:93:64:90:05:ba:
40:f2:31:91:01:05:81:b6:4a:98:0f:88:25:a4:7d:
e4:6d:88:3e:3d:c4:df:d5:2e:65:8a:71:6f:09:0a:
56:85:fe:68:b5:e6:f1:ec:00:7a:05:e1:33:0b:ce:
39:da:e6:56:aa:e3:92:53:cd:92:68:27:3c:b8:b4:
4c:53:a5:c3:01:0e:a2:2c:64:b7:20:93:71:62:ec:
ba:53:ac:6e:9d:d6:47:52:74:b1:c4:9f:d9:71:7f:
1e:4f:e6:5d:6b:7e:03:f0:1a:68:a8:7b:d3:f8:39:
8b:48:1a:b2:da:27:d6:99:e7:f6:89:b1:89:67:7e:
0c:67:1a:69:7f:e5:b3:15:71:07:70:4a:a4:12:45:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:42:41:7F:DF:D7:DD:17:85:93:F3:7B:7B:6E:CB:B8:06:A6:BB
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0c:19:3a:47:61:0f:fc:a8:1a:f9:46:83:25:e4:c1:5b:cc:
e6:8c:35:09:29:26:52:05:33:1d:70:8b:1d:58:ab:79:0c:b9:
79:13:1a:fd:87:26:29:9d:43:15:3c:4f:a8:64:52:65:4e:22:
c5:8a:31:b2:07:1e:b9:5f:a5:eb:c2:d9:47:ff:cd:79:38:58:
f4:6d:40:85:4a:e3:05:99:57:64:1d:16:99:f5:96:63:d1:c6:
41:9c:d8:c2:87:f2:95:50:da:c6:7e:de:ad:dd:28:4f:07:30:
8e:d6:64:41:fa:49:d2:db:53:5c:c7:a9:56:8f:dd:eb:1a:d0:
66:60:c1:4a:c6:42:dc:54:37:36:9b:42:29:1e:2a:4a:44:70:
aa:3d:6e:86:3b:f5:0e:fa:64:28:2f:29:bc:e0:70:60:09:88:
13:a0:34:70:02:34:04:b8:a4:ae:09:fa:3a:11:3f:b2:62:f6:
1c:a7:94:66:a0:9b:a5:38:48:c8:a7:05:00:65:02:bd:0f:c0:
d6:92:65:c6:32:3d:df:af:cf:55:aa:e0:68:46:cf:4f:46:b8:
55:c9:a8:b5:a0:6a:ec:2f:35:e9:4d:de:e3:32:64:ca:3d:09:
17:aa:a7:37:30:2f:15:b6:54:39:b5:37:47:9d:2d:ca:0a:f7:
24:ab:a2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:36 2025 by rpki-client