Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json)
Hash identifier: Ba5HfUmQkb7kdqJkUsa4JWKUrM3AZ+3mAXIH/ynXpTs=
Subject key identifier: 98:7F:20:00:0A:CB:4A:B6:87:4A:7B:14:C4:FE:CF:88:5D:21:CD:1B
Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Certificate serial: 0194BCA9C1CF4C75D6B44D748BE852360488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
Manifest number: 0280
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: ZjyipUtj2pjJBDLC74GCAG799EyVhbjBh2NfaerXzW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c1:cf:4c:75:d6:b4:4d:74:8b:e8:52:36:04:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=987f20000acb4ab6874a7b14c4fecf885d21cd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:fb:13:5f:87:39:fc:6c:42:92:4b:c0:e5:
49:b6:53:3f:f9:7c:cf:44:00:c4:e6:12:0a:4f:0b:
73:83:a4:92:48:1b:f9:cb:39:d0:2b:a1:dd:0d:01:
bd:b2:5c:00:de:8c:8d:a4:65:6e:ce:04:2d:c2:ca:
a4:7d:cf:cb:e3:87:4b:69:4c:0f:3e:bf:7b:cb:49:
26:c5:3b:90:ff:46:f0:bb:35:f4:06:1d:dc:64:35:
78:99:70:64:b4:6d:37:76:b7:c8:f9:5b:bc:e5:ad:
2f:1f:69:2f:59:9c:62:d6:1c:31:7e:52:c3:00:5b:
c4:0a:ef:1c:64:39:74:98:74:a9:73:d6:fb:ff:02:
92:c5:84:e4:59:73:62:79:36:80:d3:69:26:f5:a6:
83:70:8e:5f:6a:37:7b:e0:ae:20:df:2b:d7:ad:ef:
c7:e9:85:2d:b2:f1:1c:d4:a2:33:29:e7:45:dd:3f:
db:80:96:58:13:57:d1:45:29:b5:cb:e6:6f:4b:f9:
bb:66:3e:0b:2f:78:4a:eb:f3:dd:e5:6d:8a:0b:3c:
bb:a3:2f:15:1a:5e:96:ee:17:1b:5b:73:25:e8:d7:
ed:82:b2:05:03:1e:37:a7:c8:90:57:a4:f0:e2:6f:
06:fb:72:da:df:6b:ac:dd:12:97:65:95:df:52:9a:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7F:20:00:0A:CB:4A:B6:87:4A:7B:14:C4:FE:CF:88:5D:21:CD:1B
X509v3 Authority Key Identifier:
keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:16:4a:e1:49:e0:e6:d9:53:d3:7c:5b:c7:d4:62:3d:96:1f:
e0:43:69:ac:74:20:17:ef:98:c0:b9:9e:0a:52:3d:82:de:bb:
31:33:7b:b7:4f:ac:53:88:e7:e9:f6:51:46:15:ca:9e:a2:31:
f4:d0:00:e6:b3:e9:55:db:13:61:44:fa:b5:9c:a2:01:cb:dc:
9e:84:5d:1a:41:07:d1:f1:cc:a9:07:8b:32:e8:d8:07:d9:bf:
02:57:c4:fb:a8:ab:81:35:b3:99:10:ac:c9:2c:95:aa:9a:eb:
9a:9e:2a:58:10:3f:a5:b7:cd:33:d3:a9:a2:34:6b:ca:0e:2e:
73:60:b0:4c:53:1d:26:47:b7:fa:0c:ac:d8:75:90:c5:f0:ab:
d9:06:cd:15:ad:06:58:fa:dc:c7:6e:17:88:8a:48:f8:79:c5:
d7:13:da:ed:9c:46:e4:42:f6:cf:d3:af:84:3f:24:aa:13:84:
ba:a3:fe:2b:ba:49:52:9d:8c:40:c9:5a:bf:f2:87:95:42:6d:
20:8f:34:d7:0f:81:80:3f:45:fc:3f:ce:63:a8:89:f5:ea:ec:
d9:cb:0f:76:e4:d1:e8:a6:e6:13:07:26:ab:fe:92:84:00:e6:
f6:05:04:94:39:ca:18:26:24:15:6d:25:ba:30:0f:e7:d9:22:
3e:f9:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:19:48 2025 by rpki-client