Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
File: _i4izBWFntSgeEv9CFhLPI-yn5o.mft (raw, json)
Hash identifier: m2Qg4Giy+gFVHwY0d4NnY7aHvrvD/jOYVoxebpmgsaE=
Subject key identifier: FF:48:D9:3E:84:6A:C8:4C:A2:EE:61:39:F6:7D:CA:44:E9:24:33:FF
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 0194BC3C465A940DF1FBC1BB6DDA6A48BC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
Manifest number: 0A54
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: _i4izBWFntSgeEv9CFhLPI-yn5o.crl (hash: SkRgWB7KNWkD2UPXGuve5FV435YIBo3M0FRok7F7EMo=)
2: bkv0tf8B7iS-vnBK_3AdS1Bzza4.roa (hash: sVeZTcwjMup/pTvS7GUIobKYbPGzbA4y8WVwVhuhqdg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:46:5a:94:0d:f1:fb:c1:bb:6d:da:6a:48:bc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=ff48d93e846ac84ca2ee6139f67dca44e92433ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:b3:e6:15:bc:d5:6f:ad:0d:cd:6c:ae:49:
86:ec:ca:a5:1d:a2:d8:d9:1b:d7:2b:34:98:3e:79:
a3:43:1a:a7:88:f1:61:dc:2c:9f:d6:f5:01:ab:cf:
74:50:c8:7e:1b:26:20:be:17:e6:9b:55:4d:83:05:
19:56:64:4d:32:eb:24:a7:81:87:40:56:51:2f:19:
6a:69:df:75:d1:7a:ed:fb:4e:9d:54:71:db:f9:c0:
ed:9f:49:51:62:38:b0:af:f3:82:72:36:77:2f:1f:
9e:5f:3c:d0:e8:4b:4b:bb:0d:1c:85:52:99:39:8b:
56:dd:e8:5d:3b:f8:68:14:03:27:53:3c:bf:51:7e:
bb:cb:11:94:ee:93:da:0b:ee:34:45:6a:5c:19:69:
55:25:08:61:5f:5f:0e:11:06:86:e1:98:0e:1f:45:
58:23:6c:61:95:f4:70:dd:90:38:cf:f9:19:2e:bb:
7c:21:ed:c6:41:a8:9e:6b:13:bd:47:7f:b5:e7:9b:
77:e6:e6:21:7f:59:9f:6d:9b:0d:c0:64:f2:6b:b8:
ac:81:95:bb:88:36:c0:78:18:c4:2d:ca:8c:26:a9:
32:76:ce:3f:99:59:b6:24:f7:46:9f:90:19:32:fb:
bf:e4:73:87:34:c5:8f:78:de:22:d8:3e:d2:53:5e:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:48:D9:3E:84:6A:C8:4C:A2:EE:61:39:F6:7D:CA:44:E9:24:33:FF
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ce:e3:7f:f8:d0:cf:78:0a:41:30:8d:d5:77:32:f9:f5:83:
74:8d:19:35:e4:07:52:e2:41:b0:b3:ad:08:ee:68:4b:61:6c:
bf:c0:58:e4:d6:55:19:8f:77:e3:cb:1d:33:f2:6f:84:46:98:
21:2e:34:88:ac:8d:08:ff:3a:06:fd:c0:1a:98:7f:ec:f0:40:
07:09:51:79:6f:fa:70:31:17:e6:20:2e:31:0e:06:e5:03:9b:
14:82:40:f5:62:7d:af:cc:16:2c:e7:4f:fe:55:b8:63:b4:a4:
70:1a:8c:1d:77:07:42:e1:68:c3:8e:7e:2c:75:4f:7f:f0:b6:
56:44:75:f7:12:30:fe:f7:99:18:82:10:13:2b:95:df:b1:38:
8b:a1:dc:51:f3:ae:84:2f:57:f6:4d:8c:af:3c:b7:c1:af:9b:
b4:47:19:c7:35:d4:4a:72:4f:4f:b5:24:00:de:dc:e0:fe:31:
c6:59:15:14:9d:5a:d5:24:80:14:9f:9d:de:c5:0c:06:5f:50:
f8:bc:de:1e:cd:f5:0c:49:92:b6:e8:27:53:37:56:d3:f9:5c:
77:c1:68:41:91:e2:72:0c:4a:34:2b:5b:0a:d8:ae:d5:8c:08:
54:da:43:05:e5:a7:59:31:37:dc:f7:87:74:28:d2:8a:f7:4f:
30:a8:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:18 2025 by rpki-client