Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: HjRSbZ5lYv5abOQlYCF6Ft3hdzw2wRZRkhD/RAFzyec=
Subject key identifier: E5:7E:A8:5E:8D:F2:3C:6C:E2:F7:6F:27:C2:7D:75:5A:49:53:0D:7F
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 0194BBCDB414A29F6C399A1AD152D8F67B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 0703
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: uopY/ZRAfenm+T+y1edlYIVDlbsQkqQieWoSK7+VDS4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b4:14:a2:9f:6c:39:9a:1a:d1:52:d8:f6:7b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=e57ea85e8df23c6ce2f76f27c27d755a49530d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:fb:e7:31:a2:d9:a9:d1:14:6b:a8:e9:56:
98:73:5c:c7:f7:13:16:5a:a4:81:d5:f6:40:a7:74:
12:43:91:a3:5e:77:fd:29:07:3a:1d:73:78:f2:bd:
13:f7:1d:ee:c3:12:3c:12:64:66:8e:ec:e2:4d:35:
09:7f:06:e8:58:fd:bc:1e:90:e2:36:b2:e7:85:61:
f9:c3:84:8f:09:e0:70:5f:21:4c:19:f3:b7:15:ea:
bb:3c:a5:cd:a6:d6:0f:ac:49:71:bd:54:a1:53:3b:
54:4c:49:3b:03:9f:8c:76:28:fb:a7:41:e8:76:f8:
9b:14:bc:c1:3e:2f:0e:79:ed:4e:53:96:c7:89:12:
75:3f:4c:55:3d:77:d7:94:95:9e:e4:dd:d5:3d:00:
77:04:64:53:d9:96:cd:1c:c6:fc:2d:4c:5e:e4:3d:
b1:73:84:58:2c:17:58:a1:c6:68:37:08:6d:8c:a3:
9f:89:d5:00:ce:36:e9:2a:3a:7b:9a:99:65:ec:48:
03:1f:f0:93:9d:f4:2d:76:9e:10:73:93:bb:b6:0d:
a5:fd:95:51:ac:b0:4a:dd:a3:85:03:f4:73:c8:09:
7f:8d:c7:68:7d:08:02:53:26:4e:40:4c:4e:1d:df:
c3:67:b7:67:10:4a:d0:04:63:5f:7d:ef:43:f3:2b:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7E:A8:5E:8D:F2:3C:6C:E2:F7:6F:27:C2:7D:75:5A:49:53:0D:7F
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9e:6e:c2:f3:f1:74:c5:e6:db:8b:47:30:a4:1c:97:f8:1e:
2f:58:91:87:01:b1:7f:41:b1:ef:27:14:dd:99:61:89:33:7e:
2b:97:75:f2:7c:a2:c9:74:5e:43:31:64:29:d7:6b:df:80:1d:
73:fb:e4:04:10:f1:f2:a9:31:19:59:82:6f:b3:6a:f5:43:31:
3c:cc:ef:9e:2e:6e:1d:87:a8:84:15:ca:b6:b0:3f:9d:d0:28:
99:be:c1:af:a5:53:43:e3:ee:11:75:e3:c5:df:e3:83:27:31:
ed:ef:b8:80:22:59:62:aa:e0:6f:bb:fc:a9:b3:7d:68:1e:11:
6b:c2:8e:1a:ca:35:89:34:91:7f:8e:73:b9:49:8d:9f:d6:04:
fa:f2:29:c6:cd:5b:95:6b:64:08:0c:8a:48:7e:b0:16:7b:eb:
49:7a:98:46:e6:a9:95:12:a0:64:a6:ab:42:97:e1:14:60:82:
33:81:98:b4:e4:a7:64:b7:f9:5c:6f:40:35:37:a8:91:b2:20:
fb:62:ce:72:c6:d0:63:00:98:9e:bb:6c:99:3f:3b:b7:51:7c:
ec:1c:c8:9d:c6:3b:69:67:26:d3:46:ce:41:3d:72:7c:4b:c9:
aa:42:77:2e:88:61:f2:17:39:16:05:01:c3:a0:c5:14:1c:de:
37:12:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:52 2025 by rpki-client