Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
File: 1-zutfQaFmVztNRCLLhFSWnqrFBg.mft (raw, json)
Hash identifier: vgSb4u/BZ++z2465GpYB7+oVxmsdRAdF1debv2lnG+0=
Subject key identifier: 87:18:A1:43:F1:51:99:D4:D2:18:2A:FD:67:AA:D6:59:93:65:B2:8E
Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
Certificate issuer: /CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Certificate serial: 0194BD8577292719C4FF939D73B76285BE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
Manifest number: 0521
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: 1-zutfQaFmVztNRCLLhFSWnqrFBg.crl (hash: KVBTbhJpp2estJ3NpbxtpbTDKG60S7b8wipymWJFtds=)
2: bS2AXyQj6T-v-BFQFVgN8omhTFI.roa (hash: Hlm2+aXt9COQOoJS5S5Wj7t+eBfLw0yjo9KgiG+EY2U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:77:29:27:19:c4:ff:93:9d:73:b7:62:85:be:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=8718a143f15199d4d2182afd67aad6599365b28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:99:c6:ca:9d:bf:0b:af:8d:a1:83:6b:c2:
e7:a1:b6:9d:0f:1d:7d:1d:bb:3e:db:70:d7:08:2b:
dc:05:56:5e:3f:be:9a:64:07:9b:46:c9:b8:68:35:
97:b4:fc:80:57:11:a7:97:6f:f0:bd:2d:7a:35:a2:
4d:78:aa:dd:2d:90:d4:06:2c:93:e3:a1:78:d3:6b:
47:a7:9a:df:d5:2e:04:09:c7:08:1e:f3:b1:1d:04:
f5:77:eb:ae:e4:1c:7e:17:52:99:95:b7:c0:87:a5:
02:82:24:9c:1e:16:d2:27:26:4a:33:44:ce:07:71:
4a:3a:27:c1:fc:6d:d5:74:de:86:ac:e6:8d:e4:04:
a4:f9:d9:b4:2b:19:c4:2a:0b:fc:07:1b:43:8a:ac:
3c:32:d3:dd:5c:de:b3:6a:d9:d3:88:f5:5c:e1:a7:
bb:a3:b0:fc:06:db:82:b9:12:bc:28:62:f9:46:ae:
8d:f6:33:ea:fb:8d:31:07:19:fd:1b:d5:e4:9d:56:
8c:26:f8:cc:65:3c:96:44:a3:2f:1a:05:b7:3a:dd:
a0:2d:39:ec:d8:95:a5:9a:ff:b7:de:f2:f3:1a:15:
27:84:92:02:b9:6d:6d:ba:7a:5d:90:d0:9b:47:00:
d6:2f:c3:78:72:81:e1:63:4b:b8:53:ba:a4:3b:a4:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:18:A1:43:F1:51:99:D4:D2:18:2A:FD:67:AA:D6:59:93:65:B2:8E
X509v3 Authority Key Identifier:
keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7d:51:54:39:d1:c4:d7:47:82:ad:a8:88:82:4a:91:9c:a2:
66:c7:38:f2:ac:95:a9:35:06:95:41:ea:93:60:98:5d:62:81:
65:2d:46:4c:52:39:52:a4:6c:c7:00:b3:3d:a2:da:2b:9f:39:
c3:ed:24:be:4e:74:36:a5:c4:c1:11:d0:5f:ad:d3:7a:74:65:
71:75:e6:04:3c:6e:74:f5:05:02:4d:67:ab:51:ac:8f:7c:70:
a1:e2:ca:72:57:d1:ae:3b:6a:17:85:63:7e:12:c8:6d:47:4d:
4a:86:c8:c9:82:ec:d3:d9:ce:f4:b2:8c:55:4d:82:d1:d6:4c:
78:cf:c4:79:b0:28:7c:3c:c9:78:c4:ee:b4:de:26:3c:22:12:
2e:18:7a:eb:4d:e9:84:1f:3b:90:df:cd:56:e0:f0:d0:1b:4a:
79:76:a3:4a:46:d2:5b:6a:d6:c9:2f:fb:85:c0:a1:c8:1f:d0:
05:5a:db:fb:94:ce:72:c2:51:f0:9b:fc:f9:0e:5f:1c:83:c0:
0e:47:15:a1:7a:c9:2f:fc:8f:b3:d0:7f:3c:53:aa:0f:8b:24:
8e:7d:06:9a:39:cf:e9:1e:c3:42:df:4f:9b:cd:04:db:ae:b8:
28:26:eb:45:de:5d:ab:78:d1:33:22:42:57:a7:7b:eb:60:48:
fb:ce:7c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:49 2025 by rpki-client