Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier: 61B58wyvxbPq5ygcaFDQdob5rN8OwYqkMKJm8VkIRhA=
Subject key identifier: 00:D8:04:85:AB:02:79:17:83:E9:44:B2:D0:5E:CC:E6:60:40:F0:FC
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial: 0194BBCF0389D81A14C25D35C0C1B1A147C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: qyfynXcattLs7WLCqNNQvm93S2ykfjNHiAlUlTZ5m88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:03:89:d8:1a:14:c2:5d:35:c0:c1:b1:a1:47:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=00d80485ab02791783e944b2d05ecce66040f0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:67:9d:7d:ce:f3:f4:f0:47:2f:7d:83:fe:
34:ab:f7:57:dd:09:9d:d2:28:ae:4a:5c:a2:7f:cb:
e9:f3:8a:a9:c8:19:a8:fe:9e:17:b1:8d:5b:7e:43:
07:36:30:67:a7:8e:ef:6e:81:e4:80:12:a4:d1:ae:
40:2c:a8:5d:55:03:2b:15:91:1a:a9:be:72:b7:7e:
02:ac:ae:03:ab:f8:bd:91:c0:38:52:e6:99:f1:77:
29:00:9e:ed:69:9f:86:b3:38:d6:eb:5b:90:fa:96:
cc:63:71:00:cc:0c:3e:98:bb:38:bf:ef:3e:47:67:
bc:92:1c:ba:d2:87:1c:1d:91:57:ed:6b:ab:81:3e:
89:0f:34:06:65:ee:a0:b6:17:7e:a9:88:9c:12:b1:
b1:d3:be:23:1b:48:94:85:f9:8b:89:64:67:fd:6e:
8a:96:6d:96:ce:bd:82:23:c1:4e:2e:44:36:3a:1c:
b9:17:19:52:aa:a0:b5:c9:4e:8b:96:44:0d:11:58:
8b:eb:de:7f:16:71:3c:d6:c4:a2:ec:b8:bb:65:91:
fb:4b:6a:27:15:77:91:50:e1:e1:d2:50:3e:41:d9:
47:60:8a:4f:21:28:33:72:64:76:5e:9c:8f:aa:a1:
d4:58:7c:03:91:cd:46:ba:80:ba:d4:d7:35:e6:81:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D8:04:85:AB:02:79:17:83:E9:44:B2:D0:5E:CC:E6:60:40:F0:FC
X509v3 Authority Key Identifier:
keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9c:61:bc:46:10:13:46:6c:fd:ed:3b:89:eb:18:eb:36:65:
3a:cb:79:2d:a5:b9:79:52:15:d3:e9:7f:d8:5c:f2:1d:b7:7d:
7b:86:0d:42:b5:75:cd:07:1c:9c:5b:f4:e8:2b:3d:5b:de:7d:
b5:70:df:4e:78:bb:1d:ff:03:33:4a:1e:5a:75:6b:69:08:78:
26:a1:77:7d:6f:d5:e3:71:3c:d9:2d:51:e1:39:5c:87:3b:1e:
8c:07:9c:b7:ca:06:2e:dc:6a:6a:12:99:79:29:25:ed:8d:78:
32:c2:29:49:73:45:15:eb:38:27:7a:61:17:c0:00:ea:06:0d:
c7:62:b9:d6:d5:c2:76:6e:21:5c:7e:fa:f9:4f:b0:31:e0:4e:
33:1c:70:ec:ca:d4:77:0b:0c:7c:9b:d5:27:9c:96:18:c2:89:
b5:10:69:08:75:5e:9d:35:4b:81:2a:3a:71:01:a0:33:1f:91:
7d:f2:0b:67:94:74:09:5c:41:6d:ea:42:1d:bb:6a:e9:5c:f9:
f5:98:85:f8:d8:f2:19:a9:7d:14:b7:be:e7:60:e2:94:6b:2e:
22:a9:1a:ca:32:9f:10:61:8d:34:9d:9c:d4:7e:e4:1e:db:8f:
e5:e7:18:37:3e:44:6b:a5:98:94:ac:46:82:71:df:6b:bc:d7:
39:f4:0f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:21:44 2025 by rpki-client