Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
File: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft (raw, json)
Hash identifier: GDSZAgv01p4lZOfjpCyodcSkUBzqJyn3nGcRx8iYRko=
Subject key identifier: 0E:0D:39:F4:C4:75:E9:F6:61:07:9C:7D:5E:72:11:25:1A:AB:35:B2
Authority key identifier: FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
Certificate issuer: /CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
Certificate serial: 0194BC050983D6132FC396C444EC621F36ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl (hash: vylFruElFhcKud/1fM6x8Nj2qhRuDf47jN17B7Rv7rs=)
2: jvYIR4cGI1xTBTMHiHmlslGT8ss.roa (hash: XYWrze0y1RSFOkB9yC9oozCL7v1si1KQCdXxbKpu5VI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:09:83:d6:13:2f:c3:96:c4:44:ec:62:1f:36:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=0e0d39f4c475e9f661079c7d5e7211251aab35b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:95:94:12:6f:0b:84:1a:43:17:6b:75:ec:
7f:d4:74:b1:fd:ee:37:c2:66:ab:a8:83:17:a0:73:
3c:74:ad:ea:52:d9:31:54:92:3c:8f:06:91:f1:43:
63:b5:f9:10:1a:5a:69:64:a6:6f:4e:a9:51:94:d1:
a9:2d:f3:a1:6e:56:74:dc:b5:59:08:b0:52:2e:7a:
ce:8a:ff:a1:f5:3b:d2:27:28:b0:ea:79:ee:88:5c:
91:f7:8f:3c:0c:be:e5:22:63:41:97:93:5c:1c:cb:
98:fd:3c:15:19:7b:54:c1:5c:c8:39:a4:62:8e:10:
0a:d2:71:ae:2e:bb:84:87:72:e1:d3:29:c5:a8:5d:
e7:82:fc:83:ed:f6:f7:54:64:28:ee:89:80:f6:15:
b2:cb:8d:64:20:a4:a7:ef:d6:19:c8:f8:69:44:36:
2b:b4:74:c9:33:57:f2:b4:89:c1:ba:69:b8:6d:57:
d4:5d:08:ad:56:ec:ad:12:c8:3d:29:b0:c4:ad:f7:
bf:ea:b2:60:d8:56:b7:12:48:b6:c9:5d:dc:1e:12:
63:ad:0e:ba:af:6c:8d:77:92:82:57:41:93:25:3f:
ef:bd:3a:b2:0c:27:4f:54:5f:9b:4a:64:47:6d:bf:
5b:ec:cf:f0:8f:18:2f:99:5b:c7:48:ca:66:7d:6f:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0D:39:F4:C4:75:E9:F6:61:07:9C:7D:5E:72:11:25:1A:AB:35:B2
X509v3 Authority Key Identifier:
keyid:FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ec:d4:10:5a:8e:72:8d:f8:da:78:58:fb:24:3c:80:2c:83:
25:72:03:e1:69:8d:5d:62:a4:44:97:4f:d2:da:d0:16:bf:64:
80:59:0a:3f:ad:a5:09:bf:43:2f:3e:70:44:a5:5c:da:3e:4f:
20:de:59:81:fb:7a:c1:91:eb:ef:61:84:76:29:a0:ba:53:be:
01:72:75:86:9f:fc:8e:63:fd:9d:a4:26:66:94:3c:d5:15:72:
f7:f9:01:a8:98:32:f4:79:65:1b:2d:38:85:d5:5a:5c:4f:43:
0e:d1:e3:43:b7:00:b9:57:dd:3d:83:57:e6:f2:42:a8:a4:e2:
e5:b0:d7:9e:7d:bc:a6:5a:f9:dd:0d:fb:73:d7:a4:dd:fa:ae:
23:2a:9c:17:0d:0e:66:8e:a7:46:b6:1e:f3:f6:28:3d:5f:94:
c5:c3:d9:76:d0:76:65:d3:0b:28:b0:92:a5:86:c5:27:35:d3:
61:b3:87:ec:d7:6a:92:c5:72:79:85:b8:a5:c0:c9:21:14:93:
71:a0:a6:5c:af:69:f5:2c:f1:37:02:a9:42:e1:df:59:5d:2a:
43:92:b9:e0:37:38:10:48:f9:91:59:c4:41:8c:3c:dc:69:c8:
af:f2:1c:36:f0:f3:cf:5f:90:6f:36:e0:92:2d:5b:1b:59:cf:
1d:c6:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:39:58 2025 by rpki-client