Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d1aa2e-b819-421c-8456-b5ae839f30e2/1/FYi9izG5XpysnzgSjZW4UvA9V4Q.mft
File: FYi9izG5XpysnzgSjZW4UvA9V4Q.mft (raw, json)
Hash identifier: 9XEyHSasIaDQLY5zjv6W02XTfteKjsGNz1rkG1BEaNI=
Subject key identifier: 29:84:F5:39:F2:21:46:25:03:0B:15:21:FC:B9:A6:B9:7E:75:A7:5B
Authority key identifier: 15:88:BD:8B:31:B9:5E:9C:AC:9F:38:12:8D:95:B8:52:F0:3D:57:84
Certificate issuer: /CN=1588bd8b31b95e9cac9f38128d95b852f03d5784
Certificate serial: 0194BBCE2D93020DE5281B4A15C70A281C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYi9izG5XpysnzgSjZW4UvA9V4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d1aa2e-b819-421c-8456-b5ae839f30e2/1/FYi9izG5XpysnzgSjZW4UvA9V4Q.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: FYi9izG5XpysnzgSjZW4UvA9V4Q.crl (hash: hQKdMeatoRWU1ucuzn/2dMZnJ5aQWJDdwM6H+Ocy5fs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2d:93:02:0d:e5:28:1b:4a:15:c7:0a:28:1c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1588bd8b31b95e9cac9f38128d95b852f03d5784
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=2984f539f2214625030b1521fcb9a6b97e75a75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ce:ba:26:d5:df:1f:ae:bd:36:41:28:5d:35:
a5:c9:7e:0b:8b:04:4f:a7:07:f2:58:c4:d3:19:b7:
87:5b:dd:16:cb:ab:0b:fd:e9:4d:50:75:c3:e5:48:
9a:47:34:f9:4b:4e:71:33:c6:4a:fb:51:66:ca:2f:
94:8b:e2:00:5e:e1:5a:0b:9e:9d:32:9f:d3:b4:ab:
f5:09:35:25:3c:bf:6d:b7:9f:df:2e:89:69:38:70:
c5:51:b6:33:76:44:3f:e9:fc:39:22:e4:38:fd:8f:
42:8b:3e:42:76:59:1c:c5:7e:e6:8f:3b:8c:81:24:
c6:54:97:74:19:8d:a2:4d:21:3d:a1:57:ed:8f:60:
19:f6:f1:97:9c:f6:b5:df:2e:e5:33:9d:0f:d2:29:
3f:c5:25:23:2e:66:8b:5e:70:0f:fe:3c:5d:92:31:
bf:60:93:be:d9:b7:23:e9:f8:f2:66:4f:be:0d:5b:
b9:32:7f:13:be:da:b6:eb:f3:96:37:5b:8d:c4:88:
99:6e:36:de:a9:41:c1:90:d6:14:ff:31:02:52:16:
87:10:1e:7d:3a:9b:1e:d6:51:50:86:08:ef:d0:19:
08:3b:ae:f7:b3:90:02:68:7b:f2:9d:d3:67:a0:e3:
a1:1c:d2:c6:5e:ca:af:5b:05:fd:bb:94:28:a9:2a:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:84:F5:39:F2:21:46:25:03:0B:15:21:FC:B9:A6:B9:7E:75:A7:5B
X509v3 Authority Key Identifier:
keyid:15:88:BD:8B:31:B9:5E:9C:AC:9F:38:12:8D:95:B8:52:F0:3D:57:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYi9izG5XpysnzgSjZW4UvA9V4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d1aa2e-b819-421c-8456-b5ae839f30e2/1/FYi9izG5XpysnzgSjZW4UvA9V4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d1aa2e-b819-421c-8456-b5ae839f30e2/1/FYi9izG5XpysnzgSjZW4UvA9V4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:03:82:c1:65:9c:0b:fe:fe:d7:fb:b2:f0:7c:62:1a:36:a8:
29:1c:66:23:c8:a5:ba:0b:d8:27:9b:f8:18:29:3b:2e:da:b6:
0c:04:cd:fd:ba:1b:c1:83:77:4f:40:51:1d:15:bc:37:2b:2d:
5f:4a:7b:f1:84:61:be:ea:e3:b7:1c:92:66:cc:5e:0b:4b:e2:
44:c0:55:9a:36:7c:8d:e3:d7:2e:c3:89:e4:f1:70:1a:a0:17:
da:37:95:4c:1c:e2:e4:7a:74:5e:63:69:a2:55:75:a2:ee:a5:
ed:87:26:38:b4:d2:bc:f5:d2:22:ba:a6:7e:f3:12:05:7a:8e:
87:2b:6d:7c:60:1e:8b:4a:b8:14:04:4a:85:9e:1f:ae:25:aa:
24:33:fa:58:92:f6:1c:04:36:ef:0d:90:d7:fc:39:56:0e:c7:
6a:ab:c4:31:aa:6f:00:07:62:be:63:0e:ae:fb:43:54:5a:14:
28:ed:7f:df:f5:b5:6e:9c:56:0d:9e:c1:62:a1:0c:55:56:32:
24:bb:ea:b4:b2:f0:5e:69:df:50:9e:c9:2f:0c:0f:20:67:d3:
99:77:2a:23:06:fb:b6:5f:38:d7:a4:d9:a7:b0:1e:8b:1b:07:
c3:51:db:02:18:23:d5:59:f3:4f:6b:40:43:7e:ed:b7:ce:4b:
cd:fb:35:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:59 2025 by rpki-client