Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
File: 9bJzfl2X4RCOsEmQTemxbzauseA.mft (raw, json)
Hash identifier: qXQ+9jFGi4D2PNKMjbtuOHqHaYSdXkz2EBnvKJ4PNDM=
Subject key identifier: FC:2C:0F:D7:50:E1:4C:9B:8E:7C:47:22:6E:59:2B:9C:71:19:F8:B4
Authority key identifier: F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
Certificate issuer: /CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Certificate serial: 0194BBCE837A2033E6F97D96D48B2100AD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: 9bJzfl2X4RCOsEmQTemxbzauseA.crl (hash: 8zPL8IjjmBHyyKU7aoPkeZ9myvZp/F2XGvADyWTVYYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:83:7a:20:33:e6:f9:7d:96:d4:8b:21:00:ad:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=fc2c0fd750e14c9b8e7c47226e592b9c7119f8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:99:ee:4a:33:0f:f0:0e:30:dc:06:18:2a:
c6:c5:98:a9:0d:42:4b:4d:96:f7:9e:a2:01:e6:09:
e8:3c:36:b8:92:54:0e:ba:e4:5c:6b:c0:e0:4f:59:
86:e2:cb:9e:d7:f6:14:2c:4b:e8:3c:5d:83:8f:8d:
5e:b0:24:3f:b2:f6:17:53:d8:c1:2c:53:6e:97:b2:
f9:72:3d:78:21:9d:b1:57:41:18:da:45:4e:77:02:
25:0a:f9:99:1f:e7:8b:d7:be:3d:e1:d1:fe:4c:57:
04:f5:1d:2b:e9:38:82:f5:53:7a:62:d0:58:44:48:
a7:aa:ef:7d:fd:40:1e:0f:8e:ee:b2:21:b5:58:ee:
3d:6d:7e:16:bd:98:37:09:db:f1:8c:dd:f9:82:b1:
5f:f2:69:18:aa:f8:04:64:d9:99:20:3b:c3:52:f6:
68:32:01:ce:37:91:8c:1b:0c:e6:a9:74:72:a8:0a:
e7:8e:79:02:60:59:1e:01:f9:65:31:f8:3d:0a:5a:
4d:59:8f:32:bf:a3:38:d2:94:4c:ed:80:cf:1c:05:
c1:6a:48:60:2d:de:ea:a9:79:6c:35:3d:ed:97:f1:
ca:d6:bd:8c:f0:e1:17:b0:df:b6:90:f0:43:ad:88:
93:37:b8:b0:0a:64:bd:7b:bc:7a:38:16:43:a5:02:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2C:0F:D7:50:E1:4C:9B:8E:7C:47:22:6E:59:2B:9C:71:19:F8:B4
X509v3 Authority Key Identifier:
keyid:F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:5c:61:06:6d:f4:ef:72:21:ac:b9:27:ef:8b:ee:b0:76:93:
b5:29:c1:4a:af:b0:52:f9:c9:c7:19:17:fc:aa:e9:38:b7:6e:
db:30:cd:f9:8f:36:5f:b6:b0:c9:fe:57:5e:41:3c:3b:fc:3b:
37:7c:1c:e0:ac:f4:2e:23:84:82:82:8b:5e:8a:3b:f3:2d:1c:
16:7d:bb:06:ed:83:df:5b:56:3b:aa:20:1a:66:31:b8:7a:4d:
8d:ac:74:68:91:2e:9a:ea:07:b8:0c:bc:e5:7e:5c:d3:02:27:
97:d3:e2:cc:2a:c1:d7:fe:60:01:fb:94:8e:0a:7c:23:90:21:
4b:f5:f6:79:33:a6:2f:18:8e:21:26:ca:1e:99:df:a7:03:ae:
00:95:97:cc:a3:e5:25:85:da:01:fe:42:9f:c2:93:e0:1e:82:
3b:83:9a:5c:b8:47:34:ab:22:71:67:dc:8a:1a:0c:42:3a:45:
9e:c1:e1:15:97:a1:d4:f4:1a:fe:35:50:51:1b:6b:06:de:59:
50:f8:4e:8b:2f:e4:c8:a5:6a:40:ef:17:8b:85:77:9f:b3:68:
01:00:81:be:ef:b0:f1:c5:21:56:1f:55:a7:d8:eb:d3:25:08:
10:50:d5:b8:48:60:a9:23:ca:9e:68:8a:fd:7a:3b:5b:61:ac:
0c:4c:76:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:41 2025 by rpki-client