Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
File: F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft (raw, json)
Hash identifier: j0GW28YmxzK9MypJ4Ga+giiacbrsfKz52g5+RufSUcU=
Subject key identifier: 0F:CF:B0:BA:B7:03:F4:20:B0:94:34:AC:DF:CB:72:F5:C8:45:D8:86
Authority key identifier: 17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC
Certificate issuer: /CN=179a0e21251f28c2328644620b0d279cac60d8cc
Certificate serial: 0194BD1806D4B57CB06DAAE3D352BCDF3ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
Manifest number: 0717
Signing time: Fri 31 Jan 2025 16:00:55 +0000
Manifest this update: Fri 31 Jan 2025 16:00:55 +0000
Manifest next update: Sat 01 Feb 2025 16:00:55 +0000
Files and hashes: 1: F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl (hash: bUSiQ7Sm2r9jIdZXbdkT5KkavMi6PMp7TCRTiCBYoYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:06:d4:b5:7c:b0:6d:aa:e3:d3:52:bc:df:3a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179a0e21251f28c2328644620b0d279cac60d8cc
Validity
Not Before: Jan 31 16:00:55 2025 GMT
Not After : Feb 1 16:00:55 2025 GMT
Subject: CN=0fcfb0bab703f420b09434acdfcb72f5c845d886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:81:67:f5:aa:4c:3c:d4:94:8b:75:db:f0:
f9:a4:3e:cd:35:cb:38:40:75:11:04:13:81:ae:e2:
17:58:f5:ba:a4:06:c4:a2:d9:6c:c9:14:7e:7b:c0:
e0:3a:7e:01:b5:5d:dd:33:f5:53:b3:63:2b:87:35:
4b:bc:ce:e6:cd:81:0c:8d:b2:f8:63:b1:74:bb:43:
db:df:96:9e:4a:a9:69:6c:84:ea:fb:60:70:fd:c5:
08:d8:35:e7:09:41:a5:c3:2b:2c:aa:11:f5:83:53:
c7:2b:60:2d:53:56:0d:0e:fc:5f:4f:3c:18:2c:08:
a4:c8:3a:72:be:53:33:8d:71:76:f2:1c:0a:60:34:
0a:61:99:e6:51:0c:d5:da:78:bd:7a:d2:75:27:d8:
f6:fd:f5:b5:43:5c:77:53:10:69:40:04:71:c0:df:
22:75:dc:c8:a7:f2:b7:4c:51:3a:69:12:32:ce:76:
b6:65:98:c4:6a:68:3e:c6:bb:b9:3e:a3:d4:79:88:
97:a1:17:7c:d6:21:d4:01:e2:1a:d5:b3:2f:7b:ff:
af:27:b6:97:b4:bf:c4:90:70:69:cf:7e:bc:a9:d4:
90:0f:f2:d2:0d:a0:c4:b9:35:7a:a1:76:04:b2:03:
2e:7c:a1:ba:4c:7e:b2:d7:1d:7b:95:6a:dc:8e:5f:
db:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CF:B0:BA:B7:03:F4:20:B0:94:34:AC:DF:CB:72:F5:C8:45:D8:86
X509v3 Authority Key Identifier:
keyid:17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1c:0e:a7:94:83:00:00:d5:39:4e:4a:e0:ae:f2:e7:4c:6e:
7a:f4:f7:61:ce:80:79:48:c3:36:b4:41:5a:d4:43:3e:40:b2:
f3:ec:be:65:af:f2:70:21:cd:36:b1:83:90:0a:bd:e5:fb:37:
ee:d4:3f:8b:4c:e2:08:c3:9b:79:8c:b4:5d:58:da:ce:28:5d:
9a:10:fd:6e:a8:d6:30:01:cb:0d:73:10:83:68:d8:0a:13:7e:
41:c5:47:e1:f6:db:10:ba:2a:f4:0d:df:0b:07:1e:8e:34:39:
f1:71:89:00:e9:b0:59:b6:c0:29:32:ad:8b:1b:f6:89:0a:93:
27:be:aa:25:b2:74:12:46:8b:15:c5:bf:06:87:9d:ab:da:e5:
e7:14:45:8f:61:bd:b0:fd:75:09:4f:41:a8:22:40:3c:42:bc:
a2:01:7c:30:75:2d:f3:03:5a:5e:43:21:44:fb:2c:3b:de:2b:
52:f1:cd:76:94:9c:91:b0:86:6f:0a:ff:df:83:83:a4:00:61:
68:12:b4:d0:ed:f6:4f:13:4d:2c:76:b7:6d:fc:35:e5:a8:57:
3c:84:b3:95:12:ce:b7:dd:d9:4d:60:91:89:6e:2c:58:25:7c:
f0:f7:e2:28:86:ff:fb:1e:fe:c7:c7:51:4e:b0:47:54:8b:b8:
4d:28:d8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:37 2025 by rpki-client