Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
File: R0APQz0S1oqeufakK688jFKVyFI.mft (raw, json)
Hash identifier: ky46TvlWzQOfkNBxTrkmwoI0bGedpR67/MAMwEQweQ8=
Subject key identifier: 1F:B9:6E:60:D2:34:5C:B5:57:BC:39:C8:89:67:88:F8:42:9C:72:F6
Authority key identifier: 47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52
Certificate issuer: /CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
Certificate serial: 0194BC72D733CC7502D844DE5B94622DCE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
Manifest number: 1121
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: R0APQz0S1oqeufakK688jFKVyFI.crl (hash: rRdZsfuG3p0QZ5N9AIGIF+KkZ56GXiPajDisu9VpDfU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d7:33:cc:75:02:d8:44:de:5b:94:62:2d:ce:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=1fb96e60d2345cb557bc39c8896788f8429c72f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:7d:ce:f7:39:ae:fb:02:87:d8:9c:9b:6d:
46:99:17:27:4d:2f:16:09:ec:6f:bd:b6:c7:06:a8:
46:27:e3:15:e4:32:9e:80:a4:b6:e2:6e:ab:82:a4:
77:a9:02:b6:30:cc:14:6b:69:36:72:ba:43:78:50:
65:16:06:34:ac:13:8a:52:39:98:6b:c4:e2:c2:35:
b8:83:97:87:3e:d4:5d:50:90:ea:7d:f6:19:a5:6b:
72:67:1c:00:c3:96:e9:dc:55:8d:b2:59:a1:36:87:
8e:23:68:e6:36:d2:5a:68:f7:08:53:a7:4e:74:48:
06:92:d3:ff:96:eb:f2:ff:7b:63:3c:77:95:84:20:
4a:c2:18:1f:32:86:fd:14:87:59:e7:62:24:ad:0f:
80:ef:8d:75:ef:b6:ec:b8:24:96:3c:bf:dc:dd:fd:
b3:9a:50:da:f0:04:e3:d2:09:d0:06:4b:8b:fd:e9:
38:55:9b:82:d8:da:06:33:c0:d3:a8:93:dd:a2:ff:
04:aa:5a:1b:b1:2c:40:a7:b5:56:4b:be:3f:3f:86:
84:45:0c:47:e3:39:95:ed:8f:a1:14:18:e9:68:7d:
ff:23:99:c0:11:1b:29:53:25:3f:a2:3f:71:ec:ca:
58:1d:ce:21:b4:36:e3:a5:78:60:43:b6:a8:d0:73:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B9:6E:60:D2:34:5C:B5:57:BC:39:C8:89:67:88:F8:42:9C:72:F6
X509v3 Authority Key Identifier:
keyid:47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e2:3e:d0:fd:ae:6d:7f:b5:04:fe:bb:ef:b9:6b:d5:71:9d:
89:ae:85:0a:59:69:b8:38:eb:8f:d7:d3:52:b9:4b:df:10:b8:
ee:74:eb:5d:40:6e:8c:99:17:37:bf:0d:b5:66:74:19:9b:c6:
66:00:92:da:f2:83:e1:5f:d4:a4:91:ae:81:db:75:f8:87:fb:
30:9b:8a:ec:29:45:42:45:54:75:41:82:cb:17:74:ef:c8:79:
67:39:b4:79:52:18:36:f9:ca:2c:3b:de:3c:bb:02:6c:fb:69:
a1:45:93:8d:d1:8b:4d:af:f9:3c:08:76:4e:1e:ae:c0:85:8b:
1f:ac:a7:34:3e:20:4e:30:da:9f:16:7e:24:c3:07:21:d9:d1:
67:45:26:d2:6a:6a:7c:7f:55:c6:fd:05:3f:0f:b1:7f:b4:f0:
80:fb:a5:85:58:3a:9a:8f:65:18:0b:3b:34:8c:98:06:37:55:
60:83:e2:53:55:91:24:42:02:f7:a8:0c:ef:8c:8d:04:ee:7e:
3c:54:59:0e:21:64:8a:96:9c:33:67:49:05:24:a4:85:05:e7:
32:13:0f:63:2f:0d:ff:76:e6:14:26:72:a1:4f:0d:b0:45:d4:
36:11:3f:93:89:47:79:bb:80:49:cf:d8:7c:58:01:01:60:9a:
18:83:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:36 2025 by rpki-client