Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
File: fAMRalBjzm8X_OpTUcneSgxosN0.mft (raw, json)
Hash identifier: SNmxx8xTqSdTNJU4H6NCkmvESSUUXBxrqGS/f7R3k9s=
Subject key identifier: E6:F4:43:14:E5:C9:1C:F8:A3:6E:97:12:E4:13:7A:63:52:14:F5:49
Authority key identifier: 7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
Certificate issuer: /CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
Certificate serial: 0194BBCEBC2F2199F3E3035EA8BD6224B502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
Manifest number: 08E1
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: fAMRalBjzm8X_OpTUcneSgxosN0.crl (hash: vU2hic21hgue0LpxMKifuLABaov9REoGSBedgpm09zY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bc:2f:21:99:f3:e3:03:5e:a8:bd:62:24:b5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=e6f44314e5c91cf8a36e9712e4137a635214f549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:44:9d:8a:a9:d6:c6:bc:0b:af:d1:86:ac:
d5:66:8a:20:19:88:c9:65:fc:e5:74:d7:6c:0d:13:
88:05:a1:e1:4a:38:68:64:fd:cc:bb:93:34:89:35:
c6:e3:cb:02:c5:6f:f2:71:64:7c:a0:ec:b5:17:46:
68:c7:bf:ba:c4:ce:6e:75:7b:5b:1d:10:fd:7d:ca:
de:52:a5:c9:29:b8:d9:46:19:ed:40:62:ad:80:64:
a4:f4:5d:0e:fe:49:31:c2:fc:ad:b2:c7:79:e0:de:
f6:61:36:02:2f:b7:3f:f3:61:da:c1:41:2b:b9:0c:
2b:ea:96:33:56:bb:67:7f:c4:ec:6b:da:1b:14:06:
bd:42:4d:4c:5e:4f:c3:6e:3c:ea:93:a2:51:7a:1b:
89:63:cb:96:40:a3:3c:4e:af:ee:a4:9e:d3:79:b7:
68:be:f1:7b:f8:aa:8a:53:10:3d:19:25:a7:de:fe:
df:a8:92:07:9a:5f:13:1c:81:68:f9:4b:1d:5d:68:
0e:7f:1f:85:ab:ef:70:9b:ec:45:14:5f:8e:25:18:
96:2e:a4:06:81:6d:fc:2e:2a:3e:a1:6e:39:2d:14:
da:17:57:09:bb:68:de:b6:31:17:f2:05:62:b2:c7:
a5:3f:be:35:d2:20:80:88:c3:22:b5:f2:82:1c:cf:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F4:43:14:E5:C9:1C:F8:A3:6E:97:12:E4:13:7A:63:52:14:F5:49
X509v3 Authority Key Identifier:
keyid:7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ee:7f:5b:d6:0e:0d:f5:f4:93:2c:d1:51:3c:fc:d8:1d:3f:
87:30:4e:13:48:57:22:15:f0:53:d0:b1:e4:2e:5a:3f:66:44:
5c:28:74:9b:51:73:94:b7:96:53:10:24:61:1d:a5:db:5d:59:
ea:08:8b:9a:6b:c1:cd:c0:eb:01:60:49:9d:c7:c3:5a:d9:8a:
af:a8:16:86:81:f1:ac:67:24:55:fc:00:69:a7:01:71:0c:78:
ab:70:60:e2:75:c2:f8:1d:bb:0a:b9:2b:3f:b3:88:fc:77:15:
e9:00:d8:f0:71:a4:ba:cc:a9:f1:70:b5:a5:f1:40:10:82:49:
82:e8:fb:3d:3b:c9:e2:9b:1e:16:dd:76:f9:5b:aa:f8:e7:23:
95:c3:61:92:68:15:ad:f0:be:8a:fd:b1:f4:d4:e3:25:64:c2:
b4:b2:74:f7:0a:7a:e9:f0:8d:20:d5:7e:20:92:77:c5:cd:74:
9d:7e:38:05:88:9f:f2:d8:1a:6f:58:30:64:c8:59:66:b3:3c:
c5:eb:32:86:7a:fc:52:b9:70:f3:68:98:fa:94:39:0c:94:2a:
16:1a:0b:12:f6:5d:05:78:75:58:28:3f:53:43:ee:bd:5f:d5:
46:1a:ea:d1:12:0a:bc:29:39:ff:ad:af:2f:ce:a8:9b:6b:1e:
eb:96:de:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:21:00 2025 by rpki-client