Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
File: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json)
Hash identifier: /1Z2C1Idolv4xtz1/P3NUYrfV2wMyaB3u3ZbkYY7cWE=
Subject key identifier: F4:26:93:5B:D4:29:0A:A7:3B:D8:78:84:E7:31:AB:16:0E:65:3E:5C
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial: 0194BC052F7DB9910E39C2C5BFC7FEB3FAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
Manifest number: 06E5
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: tAH7Fj5sULGnfcBPCGm/piRf8/I2S4V3UbtMWcPmuCg=)
2: kyUP_zUxJzKqp_WSRe64xjQTn88.roa (hash: IIbLVXzFiGKxHkStsyV2IH0lCTK/4GbGDWn4D7OnNxI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2f:7d:b9:91:0e:39:c2:c5:bf:c7:fe:b3:fa:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=f426935bd4290aa73bd87884e731ab160e653e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:87:25:08:d9:8b:64:25:eb:17:9f:0c:91:
80:86:18:35:f6:2b:56:16:a6:7c:59:92:68:65:8e:
c3:41:ed:3a:01:4c:be:d6:75:74:89:aa:b7:ee:ef:
4e:c3:3e:71:36:fe:37:3a:5e:6d:76:c1:6c:12:d0:
3c:c3:48:0a:7b:ac:28:65:06:4b:aa:49:eb:63:b4:
00:12:76:b4:12:c2:78:7b:a1:e8:1b:ac:7a:24:f8:
0b:50:ba:38:e7:c4:d0:b6:11:ea:5c:2c:28:08:6f:
d2:6a:08:db:63:48:53:9b:1d:7f:6d:3d:e6:70:1f:
8b:19:50:9e:9a:7d:ff:1a:cc:38:8e:0d:0a:3a:32:
74:3c:22:40:b5:2e:c0:39:56:35:75:7f:40:25:15:
53:20:de:3a:6e:a5:3d:52:a6:ec:d8:d1:d6:7a:ca:
6a:57:59:26:23:31:16:4c:02:ca:c8:c0:8e:53:15:
22:3c:0a:6e:91:7b:1a:2c:7c:11:0a:e1:ce:20:a9:
c6:6e:a7:df:31:d7:91:62:2d:0d:69:0b:a7:46:6d:
d3:0f:6f:5d:0c:6f:2b:8f:de:9f:dc:7b:66:e7:f9:
5a:5d:04:d5:50:d6:f9:25:38:d2:f7:f9:e5:4f:0d:
c8:15:a4:f7:0d:55:0e:dd:2b:d4:08:b7:52:79:8e:
f8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:26:93:5B:D4:29:0A:A7:3B:D8:78:84:E7:31:AB:16:0E:65:3E:5C
X509v3 Authority Key Identifier:
keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4e:b7:4d:a1:75:66:76:3d:16:47:93:a3:c5:33:c9:77:64:
9a:1a:32:1a:67:25:e3:7a:4e:45:ef:e1:13:98:6b:a8:15:ee:
8b:ba:37:99:71:e4:49:00:0d:ce:69:ea:d2:78:ae:57:41:ca:
6b:ae:68:7a:29:17:3a:b7:ab:55:06:86:cb:14:45:c6:52:82:
5b:cd:85:ca:55:1e:b7:07:7d:c3:33:4a:04:cf:2e:36:3a:63:
c6:09:3c:4a:8a:36:4f:9f:6c:0e:5c:4a:1d:54:92:fd:c5:aa:
da:8c:a1:e4:57:ca:fc:18:3d:01:34:9f:cc:b6:38:a7:99:87:
d4:5d:37:33:52:a1:e4:cd:72:67:11:2b:c1:43:62:c1:d0:64:
4b:b5:13:93:fe:61:f1:cd:b3:ae:b8:21:1a:19:3e:68:46:c2:
4f:0a:29:01:e7:ad:ba:d4:e9:9d:40:d7:7d:1e:2c:f2:f0:3e:
f9:44:55:43:d7:e0:06:c9:c0:16:84:f6:e3:96:1e:92:d9:ab:
7e:e3:91:c1:19:7f:0d:a1:b9:1a:27:42:60:20:d8:41:d9:34:
0c:e6:44:95:c9:7a:30:dd:8b:46:f1:9e:fb:12:3d:13:1d:7c:
0e:a9:cc:17:7e:f8:82:43:70:1b:28:59:66:21:62:da:9d:e9:
4f:2d:a1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:20:06 2025 by rpki-client