Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
File: FXll7fKBfF_wlm8i1yscqI4NNyw.mft (raw, json)
Hash identifier: E0E75YLxa4OKk1cxZFda4KaE47jXA53vztErTlUCobg=
Subject key identifier: D8:88:C3:08:D1:69:A4:70:70:B3:CD:D0:54:EE:58:10:9C:1C:59:84
Authority key identifier: 15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
Certificate issuer: /CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Certificate serial: 0194BBCE92B22AB2A44A951CB0F60208C3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
Manifest number: 1424
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: FXll7fKBfF_wlm8i1yscqI4NNyw.crl (hash: WjrJGAeD50GVWQyIuN/3w9+/lUyVnT2MVyZNwIp/d88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:92:b2:2a:b2:a4:4a:95:1c:b0:f6:02:08:c3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=d888c308d169a47070b3cdd054ee58109c1c5984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:89:6a:4e:29:10:f6:1a:78:9b:77:18:4f:
31:db:a6:b7:90:95:6b:86:d6:ca:04:5c:04:d2:6d:
f3:57:33:85:29:f2:4f:e4:78:70:8d:fe:e1:7b:ce:
66:72:ff:ae:27:18:df:8e:a9:7c:0d:70:d7:29:fd:
40:ad:0d:9a:ab:b7:8f:54:b0:b4:6f:3a:e9:ac:7b:
24:65:87:a3:b3:bf:7b:45:91:c9:4e:f3:77:1e:f6:
66:8c:aa:a3:ab:38:c1:8b:f5:3a:c6:97:8a:f7:6c:
72:28:ab:63:cf:2b:b6:f9:2f:88:5d:84:3a:b1:af:
de:c3:ed:93:65:dc:a3:32:72:47:e9:ef:6a:b1:c7:
16:a5:3b:cf:4d:ac:46:ea:52:27:7d:4e:ce:04:45:
70:7f:6b:50:16:36:3a:16:5e:5d:97:5b:70:fd:08:
c1:4f:04:5e:14:8d:00:fb:5e:70:d8:df:19:45:10:
59:12:21:0b:cd:02:cd:fc:c3:84:15:b9:b1:24:e0:
6b:5b:fc:76:92:c0:6f:16:09:d2:66:0d:37:8f:f1:
6c:ef:2d:5e:e7:3d:3c:eb:19:a0:47:8c:a7:13:7d:
1b:4c:c2:54:5d:02:26:1f:aa:e8:91:1f:7b:61:ad:
3c:2a:f8:e5:71:b0:5a:fa:bb:8d:f7:49:dc:fe:52:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:C3:08:D1:69:A4:70:70:B3:CD:D0:54:EE:58:10:9C:1C:59:84
X509v3 Authority Key Identifier:
keyid:15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3e:d7:bf:97:31:cb:18:09:f7:00:a2:cc:69:bd:3f:39:48:
83:c0:23:d6:23:ac:ab:13:c0:2d:3a:4f:1a:25:97:7c:89:52:
ae:70:aa:43:6b:97:a8:aa:d3:f8:69:68:18:c9:b8:8c:d7:7c:
1a:78:85:bd:b1:ef:d9:07:34:4d:20:1b:28:77:1e:b5:ce:c4:
32:85:f7:38:1b:77:e8:56:57:43:1b:80:cd:be:6c:da:3e:e0:
c7:96:05:cc:08:43:2e:cd:7d:50:ab:34:5a:c4:12:a7:39:17:
4a:32:f4:10:a9:bf:bf:b4:41:87:5a:8b:f6:6e:3d:24:5f:31:
3d:5f:61:bd:38:20:26:fc:0c:5e:b5:bf:b9:df:b7:be:88:f6:
bb:cb:a2:ba:57:a6:bf:38:fd:72:05:93:6f:0d:e2:e0:e8:8d:
13:90:f1:3d:8f:72:bc:a4:71:04:8b:67:28:c8:ba:47:7a:9a:
89:5b:ab:b5:68:5a:1a:af:0f:bb:21:0b:93:06:cf:43:57:9c:
a9:25:3a:fe:5a:c2:a1:f7:86:f7:e5:1f:d4:77:b0:2f:54:cc:
49:5e:d9:51:d4:18:76:30:84:95:f0:47:96:04:7f:05:40:e5:
c6:e8:22:c3:95:15:5f:c1:83:f4:6f:20:9d:f6:01:a4:7b:c5:
cd:cd:ff:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:54 2025 by rpki-client