Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
File: _Me2AVe1RTWEdeJXCMbizAbbres.mft (raw, json)
Hash identifier: EHU5Q1Evu4V1sRcPCaEVovihjXtgVGOZZzAldpe4cB4=
Subject key identifier: F2:D7:F9:80:BB:C9:AC:09:50:89:7F:5F:66:D5:60:AE:EB:E0:D4:5B
Authority key identifier: FC:C7:B6:01:57:B5:45:35:84:75:E2:57:08:C6:E2:CC:06:DB:AD:EB
Certificate issuer: /CN=fcc7b60157b545358475e25708c6e2cc06dbadeb
Certificate serial: 0194BBCE2BF01C6AC9382886DA6B93041A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
Manifest number: B1
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: _Me2AVe1RTWEdeJXCMbizAbbres.crl (hash: amVZOvQ/4s1N9+7axWqkCG4x/QuPs6luvMnnWNynsuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2b:f0:1c:6a:c9:38:28:86:da:6b:93:04:1a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcc7b60157b545358475e25708c6e2cc06dbadeb
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=f2d7f980bbc9ac0950897f5f66d560aeebe0d45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:a5:b7:bc:6b:76:fb:c6:74:68:13:e5:a6:
cd:49:f9:38:89:6d:b8:d4:5b:ab:11:4a:97:13:04:
25:6a:99:c9:fb:44:92:47:84:2b:a9:17:b1:38:27:
c2:95:15:20:05:b6:e0:8a:35:1a:dc:c4:94:5d:c5:
bd:c4:b7:07:10:d9:9b:46:3d:cf:07:05:0a:11:44:
26:d1:f4:e6:7a:ad:13:f1:3a:a0:9d:9d:6e:ce:a1:
1d:f3:98:82:c7:4a:0d:e8:a7:d7:91:db:d0:1f:4e:
ca:d5:e9:06:19:db:b4:5e:5a:b3:be:a1:f4:b9:c6:
05:66:4d:35:ee:33:ea:62:34:9a:c5:28:19:bc:70:
a9:9f:e0:7d:c3:5c:17:dc:75:54:25:64:0f:1c:7b:
3a:19:99:c5:81:5c:fc:aa:d2:bd:1f:8c:ea:a0:38:
46:d4:a6:9a:f4:98:96:dd:bf:ad:31:b1:1e:fb:5a:
93:89:be:57:2b:b1:12:2f:97:9d:f8:3d:84:00:a3:
fe:10:b3:0d:b2:9a:f8:99:a9:fc:be:36:df:e9:2f:
c3:cf:8b:d6:3a:59:d1:89:08:b7:95:0f:c5:b7:cd:
ee:05:3f:5f:0f:04:e2:f6:07:4c:b1:84:79:16:c6:
c8:86:49:8e:3f:26:67:e1:e6:1a:72:0d:75:99:c6:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D7:F9:80:BB:C9:AC:09:50:89:7F:5F:66:D5:60:AE:EB:E0:D4:5B
X509v3 Authority Key Identifier:
keyid:FC:C7:B6:01:57:B5:45:35:84:75:E2:57:08:C6:E2:CC:06:DB:AD:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3b:31:a5:23:41:62:9f:fc:d2:ce:fa:25:e3:ba:a6:0f:b5:
1b:c0:7b:72:5f:eb:cd:1f:3b:24:b5:30:e6:99:18:80:0b:aa:
c8:82:43:4d:e1:37:6e:b1:6e:32:12:41:bf:63:ce:14:cc:a7:
88:15:a1:78:19:90:9a:f8:05:4b:96:04:b6:e8:6e:e1:03:38:
87:7e:65:15:da:0d:8e:ab:01:42:aa:07:f0:f8:db:ac:4c:b3:
6d:3c:5d:e0:a2:ab:8d:41:14:3e:e2:da:c4:03:48:9e:92:5b:
11:02:c0:d0:99:47:6b:ef:5f:f4:bc:12:f4:c1:ad:b5:ae:5e:
35:4d:06:6c:4d:9d:a8:62:aa:9b:4a:6b:bf:8f:dc:60:11:bb:
67:69:eb:22:7f:b5:be:d8:95:e3:16:80:c6:97:71:67:89:fe:
3c:e3:8b:7d:92:8f:65:8e:b5:c0:c8:a6:82:67:1d:db:2d:45:
9f:90:92:2a:2a:66:40:c9:c1:b7:48:05:f5:2c:bd:90:e4:ad:
e6:8c:db:7a:bd:61:d6:25:e6:3f:d4:93:fa:30:1c:58:c0:47:
b5:7d:83:00:cb:4e:2b:23:ea:d8:6b:a3:5f:80:cd:97:55:c6:
8b:aa:4d:b4:6a:67:69:9b:67:b8:a5:a0:a6:ed:c5:a8:b5:9d:
be:42:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:22 2025 by rpki-client