Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
File: fF27C541OBhfPm1uPH2i-JIsjOA.mft (raw, json)
Hash identifier: P225+Gnne8IldFArA7rEcwNc7ZWrf54jxh+YcEyjuLg=
Subject key identifier: 0F:62:97:2D:56:0D:55:46:FB:83:81:EB:FF:26:8A:D7:8A:17:21:D9
Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
Certificate issuer: /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Certificate serial: 0194BCE0E3C181AFB8E1EF47649F49360603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
Manifest number: 059D
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: fF27C541OBhfPm1uPH2i-JIsjOA.crl (hash: ff8sUlLbF0WN8Q2wimaL7KiP36oqCbVxMLkSCcH6LkU=)
2: q-UjelWVJEcPadl31G47nebbXb8.roa (hash: 65aJhppjeAJp5scwXUtr/SDly2MObd0FzMz5wed2pGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e3:c1:81:af:b8:e1:ef:47:64:9f:49:36:06:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=0f62972d560d5546fb8381ebff268ad78a1721d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:2b:fa:cc:a2:8c:38:4c:16:0f:8c:a2:2c:
49:df:70:7e:a9:4a:d7:fe:55:ea:96:2f:cf:7e:5e:
03:66:e2:a4:18:38:11:18:39:62:16:76:ef:e1:2b:
1f:63:ed:c6:b2:89:8f:49:98:b2:1c:72:fa:81:da:
33:08:04:46:35:96:2e:37:23:c9:f8:c5:1f:18:cf:
1b:51:7f:3f:35:02:fe:85:cb:9f:68:a3:58:c9:2b:
fb:e9:70:11:fb:67:ec:2d:88:50:27:c1:a0:b6:c8:
14:6a:54:6f:d1:7d:b2:12:ef:a8:a4:fa:07:c8:67:
c1:58:0c:31:dd:79:c0:f8:ba:b9:69:24:1b:f0:cd:
d0:d8:f4:1b:b9:ca:b1:5f:06:74:79:43:35:f7:7a:
97:03:e5:7c:90:8f:2f:53:5f:73:d7:1f:37:db:89:
4d:1b:1d:15:9f:1a:69:9f:bb:cb:c3:f1:2c:cf:4c:
74:9e:a4:69:ca:c7:2c:80:40:68:26:8f:1b:7b:af:
2f:ee:89:e9:66:0e:f3:1d:f0:3c:a3:a6:a3:d6:af:
8b:bc:72:90:d2:f0:c2:96:85:49:bc:89:da:9d:6c:
93:a3:e8:c9:7e:e2:13:d6:04:15:e2:f2:9a:a4:72:
8a:71:7c:bf:44:88:23:d3:59:8b:29:f8:5d:4d:4b:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:62:97:2D:56:0D:55:46:FB:83:81:EB:FF:26:8A:D7:8A:17:21:D9
X509v3 Authority Key Identifier:
keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ad:61:52:29:11:55:fe:6c:2b:6c:06:50:2a:38:6b:01:d6:
4d:6b:37:16:d7:2d:59:7c:fa:2e:f7:88:d1:ed:05:a6:b7:5f:
60:61:70:a2:5b:78:2b:c2:59:82:9c:3b:c8:57:7c:6f:cb:70:
70:04:1c:05:75:1e:f0:0b:16:8d:09:74:d6:d1:23:88:98:ba:
3e:19:2a:a0:a5:ed:4e:ce:71:47:43:e8:86:c1:c4:53:89:f9:
f8:ef:a9:0d:e2:c1:06:18:74:43:fe:b7:5e:5a:8b:45:47:f8:
61:a7:c5:23:84:b5:40:fe:8d:4b:53:15:a4:bd:e4:97:6b:bf:
2f:ba:9b:38:66:71:70:05:2f:48:b2:f1:8b:28:37:b7:6f:b7:
92:1c:15:4b:11:d8:12:a6:c1:2d:9b:ef:87:3f:f7:5f:9a:b3:
62:71:93:67:9a:d5:95:52:60:c7:76:37:62:72:3a:30:cd:7b:
73:ab:b3:35:f1:b4:99:a1:cd:ae:63:aa:32:16:72:8b:1d:2a:
af:91:c4:27:8e:05:a4:de:d9:4b:fa:37:4d:bb:f0:6e:88:06:
39:59:d5:6c:48:d8:64:c2:99:4f:16:6c:7f:1c:88:be:d4:c1:
27:20:94:3e:b9:14:67:45:02:f7:94:65:b2:f2:b0:6d:ec:55:
aa:41:cb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:22:48 2025 by rpki-client