Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
File: _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json)
Hash identifier: wob1qc6MWYMWNgIH3hv9xn00Sf1dPki7ORGrrjeE80A=
Subject key identifier: 11:09:F8:FE:4D:4E:C3:88:50:34:56:89:38:FF:C8:AB:E8:FA:49:BF
Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
Certificate issuer: /CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Certificate serial: 0194BD17F85E278205E937B83A530FBBE14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: XK006YsQL2oA1fJlkpl0y41x3doJRezsAzBtoDKh87w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f8:5e:27:82:05:e9:37:b8:3a:53:0f:bb:e1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=1109f8fe4d4ec3885034568938ffc8abe8fa49bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:96:4a:34:d4:fe:9d:79:d8:5a:6e:61:3e:
e5:a2:b3:d0:6a:f4:75:06:f5:58:31:5e:15:db:ff:
76:ab:17:f3:7b:17:82:3f:53:c4:90:95:c4:d9:14:
c2:98:5c:91:b4:a0:17:78:af:70:a4:5e:6d:a5:ce:
13:bf:a1:dc:01:fe:67:a7:40:12:d7:d3:a3:4a:cc:
97:f4:4f:ac:83:85:b9:47:e5:ea:9c:97:dc:75:89:
9d:88:60:e1:0a:7e:cb:b1:2c:cd:ad:f4:40:33:ee:
79:1e:ec:7c:41:44:0d:51:3f:db:25:10:25:52:62:
d8:4a:5d:d3:c0:35:92:27:d0:2b:42:f0:31:9d:32:
b6:81:0d:b3:80:58:23:da:f3:b4:77:fe:13:2d:89:
9c:06:89:17:83:2f:a5:77:d6:55:8e:63:db:ef:de:
87:ce:79:27:5c:df:fe:70:0e:d6:4a:92:c2:a4:c9:
56:42:d6:e6:3f:10:42:75:95:c8:f7:44:44:5a:8d:
e1:bf:70:28:59:d8:e7:e1:76:c8:b7:63:99:2d:e2:
f9:d3:08:15:a5:a1:62:61:7d:59:91:c8:0f:a0:19:
f5:70:43:9b:4d:d4:1a:9f:63:51:0a:7b:da:d5:cd:
b3:5d:11:30:07:6b:40:1d:c2:a1:04:7e:40:2c:ef:
28:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:09:F8:FE:4D:4E:C3:88:50:34:56:89:38:FF:C8:AB:E8:FA:49:BF
X509v3 Authority Key Identifier:
keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:97:f4:9b:7d:fc:86:bb:bd:b4:68:de:c0:65:bc:4e:b1:de:
3f:fb:14:3d:83:19:5b:23:15:fe:8f:4d:6c:c3:b1:65:7f:f8:
34:2c:61:7d:bf:85:4e:aa:50:b3:02:b2:33:9f:54:7d:dc:e8:
be:36:e4:8e:7b:96:f9:0b:fb:9e:c8:fe:71:76:d8:9b:72:17:
e0:9b:72:43:46:d4:38:1f:fe:04:c2:0d:5b:4c:9b:61:ac:a5:
de:ca:c7:df:f6:28:27:12:50:f8:d0:b8:f7:a5:e0:30:fd:40:
2b:16:bd:a3:db:71:f7:05:26:ab:fd:01:92:76:b8:e8:33:4c:
55:71:89:3f:94:a8:55:59:54:70:38:73:7f:fb:1b:50:86:0a:
aa:1f:a4:ad:46:56:46:0d:fd:7e:c7:2a:f1:21:40:c5:f6:c8:
ec:a2:1b:d2:39:ae:1b:77:94:f0:13:2b:72:4a:34:84:eb:e3:
51:df:5b:a6:ed:e4:e3:cd:bf:9b:99:22:32:16:32:8e:58:a8:
b0:43:73:f8:e2:bf:f0:b5:14:d9:cd:d6:67:6a:c8:2f:d2:c7:
da:39:2e:ed:9f:63:17:91:37:f0:9e:75:d7:aa:0a:ab:5b:90:
c4:56:96:d7:85:f3:d6:06:f6:13:01:f5:ac:90:14:c6:ed:bf:
f5:51:e5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:54:48 2025 by rpki-client