Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
File: _PU0Avp2-gY3bN6mvNOV4YAHnbc.mft (raw, json)
Hash identifier: a/CoqSd8IyadnM0LcjbCObg9u+EWtcl6qAWb6d8ipkM=
Subject key identifier: 97:86:F7:25:02:82:60:80:45:03:F6:FA:8F:68:D6:65:C6:D6:BB:2A
Authority key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
Certificate issuer: /CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Certificate serial: 0194BC7309F53696802C98878DF4901A4980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
Manifest number: 1139
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: 5QVE77uQnSCLbr9iYF89fXdJU-M.roa (hash: IPgTEo7hNu+XjVm/3xLzVMgF8abs7044xMIbnapyQg8=)
2: _PU0Avp2-gY3bN6mvNOV4YAHnbc.crl (hash: P677e2GK4Fq/05YHKSFfIyuCKhuf955INQ6vTDUqyfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:09:f5:36:96:80:2c:98:87:8d:f4:90:1a:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=9786f725028260804503f6fa8f68d665c6d6bb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:34:be:37:07:4c:54:a8:74:8a:99:18:46:
f9:ce:d7:42:0b:28:fa:81:7e:39:16:04:ef:3b:d5:
f1:da:53:cd:ef:86:d0:8b:89:06:4a:2a:c2:98:5f:
39:b5:de:75:dd:5c:a5:f2:47:3c:1c:53:bc:c3:45:
48:48:fc:06:d3:05:b2:5f:97:a2:43:ae:c4:be:9e:
df:ca:ce:a4:7b:a8:01:33:ab:f1:90:f9:6e:d0:a4:
79:d9:4d:ad:59:5e:71:5e:e4:48:d4:bf:91:a3:07:
5e:81:a5:53:9d:e9:f2:82:80:16:81:f1:b9:9c:a4:
8d:44:ec:5e:53:32:70:3d:e2:50:9f:5b:60:56:28:
5c:44:41:c4:2a:b2:0d:df:b9:f9:42:61:78:b5:ea:
0e:17:80:69:0e:b5:3c:4d:50:92:03:b2:e2:8b:47:
4a:e0:82:09:6f:79:38:8a:df:63:84:2b:3f:2b:9b:
dc:5d:f9:9c:cd:53:e2:71:30:15:8c:80:68:17:29:
51:0b:fc:ad:9f:db:f3:b5:83:84:63:32:79:2c:6a:
49:ab:ae:3f:3a:bc:04:54:da:73:9b:fd:64:33:3c:
58:38:06:f7:6c:86:ea:57:98:80:4c:b9:8a:57:a5:
25:8c:46:8c:06:32:b5:3f:b2:d4:a7:e1:45:66:fe:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:86:F7:25:02:82:60:80:45:03:F6:FA:8F:68:D6:65:C6:D6:BB:2A
X509v3 Authority Key Identifier:
keyid:FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1b:5e:48:00:66:e6:a7:63:41:84:c5:b0:e1:17:f8:12:26:
ab:15:0d:c3:57:25:32:28:aa:7f:93:66:e4:ab:52:31:0a:31:
aa:dc:ef:10:30:2b:54:31:81:95:7a:f4:98:62:d7:7e:ee:0c:
66:22:cc:14:19:42:b1:e2:14:f7:f0:e2:c6:e7:a2:a6:f6:3b:
fd:b4:5f:40:8c:17:21:d5:c6:82:30:f0:60:2c:d4:3f:34:8a:
41:49:86:9f:d7:d6:0e:86:2f:1e:a7:71:84:2b:6b:3c:59:a5:
bd:b4:92:55:0b:08:63:03:6d:a3:42:71:89:93:69:bb:28:24:
6f:f6:1a:80:2e:f7:fd:0b:29:ca:ef:6d:b8:90:70:84:a0:28:
1c:a3:0b:2b:96:7a:62:b3:88:b3:f5:e2:30:d3:de:e3:0e:06:
67:3a:17:42:99:ff:55:88:71:11:14:0f:ff:1c:b5:40:fa:5e:
3c:cb:82:e3:2b:44:f8:05:f8:1a:71:58:87:53:db:7e:ae:1e:
38:d4:f8:28:db:74:4a:73:68:29:9d:1c:19:ec:00:ce:02:8d:
36:d7:81:c2:c8:d6:0b:74:d4:0f:75:f0:18:98:7e:8b:08:94:
45:33:45:a7:e0:12:50:0b:fc:4d:64:b3:83:f3:b5:72:2f:47:
1e:20:d9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:15 2025 by rpki-client