Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: MW363eVQAs6/BlSzX9xvrCWMV8PsNK7z1DhnzRwnSFA=
Subject key identifier: 53:FF:D2:7C:21:57:34:6A:82:EF:6C:67:29:23:4B:15:85:88:EE:20
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 0194BD1786E1017985ED06190728FF4B3383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 1238
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: 7sPxmd3uGkI+9gddEWzSytGJf6Cezb1KoNncNB3nhvo=)
2: BkhUnEeKLpdw7zqQsCW8fb_TG_I.roa (hash: krWgcFHtgzZmGIlUNG6InVr0KfezPC+cFYoPcdTkKaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:86:e1:01:79:85:ed:06:19:07:28:ff:4b:33:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=53ffd27c2157346a82ef6c6729234b158588ee20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:41:9a:e4:50:a2:77:b4:2d:a2:f6:88:af:
7a:f5:95:00:e6:39:0d:4e:f6:15:49:0a:e3:3c:2e:
ca:a6:03:e5:bb:78:8e:2b:8f:9d:57:02:64:62:5b:
d1:34:b4:9a:ad:4d:c9:19:8c:b1:6e:4c:40:22:f8:
4f:5b:fd:d8:2b:4f:dd:a0:97:5b:55:72:a4:61:aa:
a7:41:3f:4f:3e:73:da:22:be:81:8f:5e:a3:f6:bb:
4b:13:be:1b:00:3c:98:c4:56:0f:1a:bc:63:e6:d7:
50:c8:27:11:9a:37:c1:e3:c1:9e:2f:fc:26:55:09:
9e:42:d8:d3:6e:7e:fd:b7:e2:d4:0a:ad:94:c0:38:
fc:a3:c5:fc:16:ad:69:ed:93:9a:5e:da:59:0f:f8:
71:9f:0f:82:ed:81:a1:be:cc:40:79:8a:e9:80:df:
f6:1d:65:29:37:1f:41:0d:76:ab:64:8f:34:37:f9:
93:b4:c4:6f:42:59:4e:63:6a:81:2d:20:3e:03:9d:
12:8f:2e:58:a0:fa:9d:19:cf:ec:78:a6:8f:ef:04:
6f:7a:97:31:fa:a4:54:be:b3:36:cf:4e:a6:7f:76:
67:8e:73:09:dc:53:4c:ae:96:0d:62:cc:fc:fe:59:
30:88:1f:6f:c2:ff:d8:96:e0:45:45:69:7b:73:60:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:D2:7C:21:57:34:6A:82:EF:6C:67:29:23:4B:15:85:88:EE:20
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a4:52:cb:5e:13:0d:22:56:53:ba:95:d7:09:71:da:d0:21:
60:4b:e9:37:a0:0f:67:b3:90:2a:da:81:8b:7e:a2:ec:37:74:
c9:a4:7e:81:94:31:3d:c9:23:34:2b:ba:36:a6:4b:c0:71:54:
c0:e0:0d:c1:c9:17:8f:08:87:cc:ef:40:13:5d:fb:95:2c:1b:
35:9c:99:45:5d:e0:c9:06:fe:2a:3b:b0:be:d0:64:8d:01:c7:
b7:10:05:d7:c7:aa:6a:90:45:bf:a9:48:d0:c0:ac:7a:8d:d7:
de:ae:52:27:8e:9d:e8:0d:2e:a2:e7:b8:03:f6:b0:6a:67:b0:
bb:cb:37:ee:19:45:53:be:18:d1:4a:82:47:a8:87:0d:6c:09:
b6:72:9d:58:9f:fd:62:85:12:67:af:42:14:b1:42:f4:e8:7e:
25:5f:03:c8:f0:36:48:a7:25:cf:10:aa:c5:ff:e5:9d:5a:e7:
d2:0e:2c:29:ce:a6:61:49:7a:85:48:40:42:bf:ae:52:20:e4:
bc:4f:d9:a2:8f:d9:4e:63:88:26:12:d6:33:dd:0e:ea:75:1c:
ce:81:43:f3:5b:9e:9c:14:06:4e:08:6d:fd:f2:64:4f:b0:c9:
bf:9f:86:d4:b7:d3:2f:26:09:d4:c8:cf:57:58:d0:7f:17:5c:
8b:19:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:28 2025 by rpki-client