Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: jVwcL1kc3MwoWlWqrfR/P1nXCpBSVc3HD6YPpt+OuCI=
Subject key identifier: B5:E5:B3:38:52:BA:2B:A9:9C:B2:A6:0C:7F:22:D5:46:C8:2C:31:97
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 0194BD4E6536D0B881C24FE2C0F60962F9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 27ql0pmKcM7odOuyt-r9IUbz8H0.roa (hash: 8BtUKmV8OD/wNsVNWexZC4Gh5lDDpl/q9sI4sznft7k=)
2: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: MvY8JSZ8XCU25A2Jo9HvfSHgm/Yi652j9fRcPicjfv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:65:36:d0:b8:81:c2:4f:e2:c0:f6:09:62:f9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=b5e5b33852ba2ba99cb2a60c7f22d546c82c3197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:02:f6:5c:2e:87:8e:f5:7d:2b:d1:01:2d:c9:
0e:39:08:da:4f:76:67:d1:51:ed:a0:0f:64:ac:0c:
8a:e0:6d:ba:18:09:a5:ca:90:4d:8e:66:6d:af:a8:
ff:af:af:13:72:fd:89:10:01:1e:7a:40:bf:aa:c2:
fe:fe:cc:01:bc:a3:6f:07:0c:20:16:6e:01:2e:f6:
39:d8:9d:29:c1:7e:9d:68:03:00:30:b2:51:42:4c:
43:d6:2d:af:6a:9d:63:b0:30:79:ac:10:ee:10:b3:
e1:3c:ce:a2:ac:13:15:f9:83:43:05:58:8a:5c:0e:
62:13:29:20:7f:af:9f:73:74:a8:c3:13:45:42:38:
7a:18:ef:38:79:a4:3a:26:cc:91:73:44:e4:12:3d:
b2:c9:c2:49:0f:e8:05:a8:0a:14:fa:ac:92:e4:97:
bb:b9:51:5a:98:03:df:e7:36:37:7a:f2:8e:02:e6:
1a:b4:96:fc:66:60:32:6b:e2:c4:b6:45:a4:8b:f4:
9d:22:0f:fc:dc:0d:c0:f7:d6:df:a1:83:5f:9c:86:
05:09:7f:79:49:d1:01:3c:69:f6:51:f5:df:3d:e5:
0b:53:4d:22:2a:5b:90:ae:e1:3f:c0:c1:b0:c1:57:
79:6b:b7:17:16:f7:b3:26:2f:ac:bd:d0:cb:3c:d4:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E5:B3:38:52:BA:2B:A9:9C:B2:A6:0C:7F:22:D5:46:C8:2C:31:97
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6b:45:03:ac:e2:62:aa:42:98:8b:eb:5f:dc:28:ff:7f:d0:
3a:55:d3:36:4f:cb:15:c9:91:1d:3e:ef:4b:91:4b:bf:ac:ec:
1c:ff:98:3e:1e:73:50:d3:e7:7a:cb:59:ee:30:59:d9:fa:cb:
e7:0a:75:a3:94:12:e8:70:c7:db:9b:0b:69:7b:87:d2:15:36:
ff:ac:05:b7:ae:12:41:16:58:29:71:e9:46:8e:51:a4:c3:a5:
99:96:da:dc:05:97:00:c1:28:0e:29:8b:81:54:ba:f1:ca:db:
0f:91:64:d4:52:fa:d5:82:0f:b9:cf:c7:49:ee:fe:fa:3b:08:
bd:55:ea:c8:3e:a4:74:98:2a:a0:75:b9:2d:12:c2:7d:2d:5f:
68:22:64:51:d6:8a:c9:52:a3:bc:83:43:2c:bf:1e:18:bb:07:
1d:c4:d2:97:12:42:b8:50:34:4e:ab:77:01:f9:f5:bb:cf:12:
9f:26:7e:e6:0f:dc:1e:fd:4a:15:93:ef:3e:a7:77:e3:f5:a0:
16:ab:4e:e0:e8:e8:dc:01:5f:f1:6f:dd:49:f6:db:11:df:68:
e9:06:cd:c3:5f:37:08:aa:f7:20:3d:40:6e:82:a7:11:a1:f7:
c0:06:37:9c:db:18:be:68:84:57:cd:9a:5c:cd:34:ee:25:ca:
52:6c:87:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:58 2025 by rpki-client