Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
File: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json)
Hash identifier: ZkZFwpFVWqhs8la0j656IqwD+TqeKYqR9exUZtHRm78=
Subject key identifier: 32:5B:7C:FB:E8:8E:6C:31:49:7E:E0:55:0F:5A:64:FA:F7:04:D6:8E
Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
Certificate issuer: /CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Certificate serial: 0194BD1785056FFD0B98EA73AB3DA6B129B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
Manifest number: 052F
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: QyoENxom+zbIM77HSCuoZQdlwTc+k0pB8PMu2WJXu7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:85:05:6f:fd:0b:98:ea:73:ab:3d:a6:b1:29:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=325b7cfbe88e6c31497ee0550f5a64faf704d68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:c5:92:0f:89:2f:42:2e:cf:26:7b:57:76:
ea:7a:2c:4c:d6:82:d8:96:8c:7a:33:6d:19:53:d2:
4a:14:51:06:ce:e3:98:3c:ba:3c:f4:8a:69:13:f5:
9d:33:38:40:7f:e0:4e:d6:85:c0:bd:8e:96:54:a5:
75:58:03:10:42:4a:76:fd:fc:41:16:4b:75:f6:b9:
de:d2:3b:99:70:a0:3a:8a:12:dd:11:55:b8:d9:09:
5b:c2:f2:d5:1f:7a:d1:be:93:e3:b4:d4:14:4c:fc:
95:30:6b:8f:af:dc:61:ff:24:ea:5f:32:a6:12:ea:
4c:c4:5a:f5:00:4b:70:b4:85:bf:5a:ce:6b:97:ab:
94:a4:35:2a:1b:f1:df:83:dc:1c:ff:5f:68:ed:25:
ec:ed:c3:a7:69:08:36:1f:c6:00:50:be:c2:8b:8b:
e4:d2:2d:b7:b7:26:de:ee:e7:43:5e:ac:e6:66:ed:
d1:e9:17:99:f2:f4:db:22:69:2f:83:6c:5f:93:97:
0e:46:39:20:4e:81:c5:aa:ce:fa:b3:2c:0c:52:8a:
e5:93:fb:c1:25:63:da:70:60:cc:85:91:cf:8d:2d:
ad:1b:a4:56:0b:2f:be:47:6f:27:b3:7b:7c:ab:61:
a1:17:5b:22:91:30:56:49:7b:8b:64:f5:64:84:24:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:7C:FB:E8:8E:6C:31:49:7E:E0:55:0F:5A:64:FA:F7:04:D6:8E
X509v3 Authority Key Identifier:
keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:95:92:02:55:0f:11:52:b0:84:7f:11:cf:99:2e:a6:7b:77:
bc:4d:77:b7:10:48:31:de:cd:36:f0:60:06:2d:81:a7:87:da:
82:b5:44:d3:02:49:be:81:ac:d4:c5:85:ed:76:94:f0:7c:ef:
dc:57:2b:d4:05:39:c2:bd:e5:96:cc:2b:06:79:77:c0:a3:31:
b0:30:87:eb:16:db:4f:a6:6a:a5:b0:be:f8:0b:50:93:19:f4:
f7:b1:2c:d7:bb:93:aa:af:45:c3:81:f7:9e:ad:d9:55:1a:87:
df:b4:ed:87:f1:c3:22:d0:55:20:be:e3:a0:58:b1:86:5b:8d:
e7:a5:e0:1d:45:b4:89:ea:e7:50:fb:8b:34:5f:53:b9:76:cb:
81:2d:5e:17:4f:ad:c5:49:f8:11:8a:3e:a7:3c:a0:cc:6d:26:
24:e4:f8:1b:cd:dd:5a:0b:3b:61:7b:30:b6:6e:6d:47:26:7e:
df:6a:90:1b:b6:c3:f0:a6:6b:61:c0:88:64:42:37:df:5f:a0:
50:07:e8:75:81:05:6c:35:0f:19:6c:95:45:3f:00:6e:52:75:
f2:88:b9:1c:3b:36:67:3b:66:10:5f:ba:c0:b9:f0:7c:c2:fc:
f8:1e:9e:03:11:bb:dc:19:6b:b2:b7:75:2c:79:63:63:62:76:
58:c9:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:56 2025 by rpki-client