Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File: _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier: a+yUg5DnKpD92a3RJFKysV9DBw4gwnNhHRaB9jMUmiQ=
Subject key identifier: 97:FD:36:55:F0:03:33:D6:A4:CC:0C:5A:7F:C8:26:73:D7:E5:20:C0
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 0194BD85825528C86C17FC0A1A9819FC66DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number: 0C1E
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: 7ntVyo9x/NSyrdKF/2Zdgfg51xiXc/2c9xxv1t9dzgI=)
2: miFtnjs24Q4-RR01JpCMeAQD8WI.roa (hash: hNI7H2ayjIbmcGVqvenpoZ5nB2aID+7Eteg64XuKiJk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:82:55:28:c8:6c:17:fc:0a:1a:98:19:fc:66:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=97fd3655f00333d6a4cc0c5a7fc82673d7e520c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:03:a2:9f:55:f2:ee:4a:9a:3e:a1:cf:1a:
6b:58:77:00:0d:bc:13:a0:37:11:22:3b:64:92:98:
55:78:28:e7:8f:55:f3:41:41:6e:de:18:10:82:64:
a4:93:2a:13:3a:0a:18:41:ce:70:c2:7e:5c:91:82:
47:2c:2c:9e:ca:9d:92:86:26:7a:cc:f4:3a:16:0f:
e1:9b:c7:f9:71:f5:25:c8:de:19:4f:bd:81:1b:7f:
0f:c9:81:47:0a:56:c2:bd:52:d4:b5:68:5d:fe:71:
cb:5f:71:e8:da:e5:8a:31:a5:22:35:e2:ad:93:1f:
ab:e4:70:de:c0:90:1c:b2:b6:a6:70:e5:2f:3f:1d:
fc:77:1e:67:35:ba:41:88:9d:7a:55:15:88:ef:86:
82:71:37:29:b3:fb:28:cb:14:9c:5d:41:2b:5a:57:
64:d1:86:59:1a:f7:22:1f:ce:dc:1c:a5:21:d7:18:
dd:be:77:c5:4e:3f:2a:1c:0c:a9:3a:14:a8:7e:57:
bd:74:d3:56:c9:53:e8:69:24:7c:09:d5:3b:98:e6:
bb:2a:cd:41:cf:a3:f4:ca:ca:36:98:85:29:9d:4e:
34:b9:c1:62:87:45:54:cb:45:3e:6f:ef:24:90:31:
e3:95:56:a5:82:e9:11:78:8e:bc:a8:af:01:a0:9a:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FD:36:55:F0:03:33:D6:A4:CC:0C:5A:7F:C8:26:73:D7:E5:20:C0
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:41:df:cd:e5:02:da:0f:9c:bb:6c:12:6e:d0:58:b1:6a:62:
b3:af:53:10:38:55:51:85:f1:f8:53:73:75:ba:31:58:12:9d:
47:d6:d6:9f:a3:c2:ca:c0:f2:ca:7e:5a:53:22:65:73:c0:b8:
15:d9:de:c6:06:33:78:77:68:81:07:a2:6f:7e:95:18:4c:fb:
e2:fd:f5:67:fb:1a:c3:14:59:4b:d4:30:17:09:f7:96:e2:cd:
e4:bb:ef:d3:01:b1:10:cb:2a:fb:f2:01:80:01:1e:4b:0d:89:
0f:22:65:76:e6:05:75:1f:a1:34:3e:86:f6:0b:95:ce:71:ea:
9d:23:c4:40:1e:8d:8b:65:ec:83:50:86:ee:63:04:72:5c:ea:
04:20:91:7d:40:2d:95:29:c6:bb:89:63:4d:e2:67:34:d4:5d:
3a:db:33:50:8c:11:05:43:32:bf:4b:5c:75:ee:52:b9:8b:fb:
ac:a0:c4:aa:8d:f2:f9:3c:69:c8:50:8c:7f:69:d8:9e:44:29:
00:27:23:cd:75:ea:f1:65:a7:8a:73:e2:7b:ac:c2:86:b6:7c:
19:fe:9e:6b:5f:3a:89:2d:ba:1c:57:4a:88:1b:c7:51:3d:65:
2b:0e:7d:44:bf:87:b4:87:84:db:68:bc:97:cc:cd:b1:d5:56:
53:b3:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:55 2025 by rpki-client