Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json)
Hash identifier: XMb3xkypzxXsbkc/eGCTFCPNN9vTflUlUco5KnbCpy4=
Subject key identifier: 3F:6E:46:87:69:31:EA:67:66:32:A3:97:FC:10:F5:88:60:D0:CE:F9
Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Certificate serial: 0194BBCE1AC27635635E54581192860F3B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
Manifest number: 0531
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: whWc8BcGD58Lgdhg77TGlf+1rOABU8cWDhG2D5c9pHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1a:c2:76:35:63:5e:54:58:11:92:86:0f:3b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=3f6e46876931ea676632a397fc10f58860d0cef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:8e:c6:8b:ee:13:04:24:a8:68:8b:8b:c0:
3b:94:54:a3:00:91:af:c4:c3:3b:a4:4d:f4:42:a7:
a4:fe:c0:03:0f:60:30:82:e0:cc:91:34:c6:80:33:
99:ba:c6:b2:ab:ac:69:f5:a4:ae:c8:ea:09:df:b7:
09:e8:03:b1:68:e7:ed:9d:22:b7:63:e3:93:6a:bd:
9f:13:9f:63:b4:6a:74:ea:63:a5:c7:55:8a:89:b4:
42:63:63:66:ee:dd:83:6b:e8:39:f4:36:79:f1:69:
07:cc:b6:f2:93:a3:0f:0f:c2:e0:b5:3b:cf:0a:1c:
b7:c2:4b:b3:8f:5a:84:c9:4c:3c:6a:b9:29:c2:0c:
2c:a8:95:23:b6:bb:6f:16:1b:67:3a:2f:81:fd:d1:
6f:74:22:77:f2:bb:82:0b:ec:b5:3c:6f:d3:c0:f7:
a5:5a:be:fe:3d:ba:a6:12:a1:55:7c:19:8f:fe:40:
3f:6b:42:c0:a0:6d:e5:ea:5b:a6:a2:0f:ee:a5:3d:
a8:d2:13:4e:df:8c:39:cc:31:3c:45:ad:42:e5:d7:
54:4d:4e:e3:d8:d1:f9:b2:7f:77:37:bc:3d:8a:c9:
5b:96:18:b6:d2:8a:a2:bf:9c:02:b6:6f:76:6e:81:
9b:70:5a:1b:c2:77:d9:46:cb:77:d2:96:21:b4:fd:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6E:46:87:69:31:EA:67:66:32:A3:97:FC:10:F5:88:60:D0:CE:F9
X509v3 Authority Key Identifier:
keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9f:42:b5:e2:c4:38:57:67:fd:c8:94:3f:9b:9e:55:8b:1b:
4b:2e:e4:a6:6a:05:e7:df:ee:69:b9:92:32:27:18:64:fd:34:
5b:01:90:65:75:ac:6d:d0:55:7d:12:c6:ff:32:76:ad:f6:40:
c2:69:dc:68:ed:32:f8:0a:10:20:94:69:18:3e:e4:3a:e8:f0:
70:43:f9:a1:d7:22:2c:76:69:d6:4a:05:03:52:9c:a2:b7:99:
26:b1:e0:40:37:4a:02:65:a3:97:ad:04:e8:18:86:38:bd:37:
be:98:11:c4:cc:e9:4f:97:0c:b3:5e:19:5b:71:59:25:8e:6b:
20:50:6f:09:70:bc:b5:2b:1b:43:96:4b:63:f0:01:da:83:fe:
5d:8d:3d:94:9b:61:28:c1:da:9f:de:33:3f:5f:01:d5:33:aa:
ba:dd:63:a7:2b:14:71:d2:d5:ff:54:43:b7:cd:70:a3:73:0a:
d2:86:54:c0:3c:74:a8:7d:de:59:b0:ea:52:49:10:4d:51:8f:
9d:6a:68:5a:33:5c:95:93:61:c9:58:56:e4:52:93:7b:19:39:
9c:6e:cb:2f:dc:fb:ad:b4:9b:16:62:8b:bf:d2:ff:2f:8a:83:
41:c9:18:d1:ab:43:52:4c:d4:14:d5:b6:0b:84:5d:12:7d:69:
4d:0d:f1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:25 2025 by rpki-client