Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
File: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft (raw, json)
Hash identifier: jrXqONcGu6/REIX55S62j5aTvjUvfl6XjUjhW276ThI=
Subject key identifier: 25:CD:F6:76:4A:67:87:81:C8:78:5F:B1:83:DC:A5:71:5A:22:97:20
Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284
Certificate serial: 0194BD4EADE082D7D0103F1DEC92374ED67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
Manifest number: 101C
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: GA0RPX0Ob2MlFQ2Rid7QsDPJvlM.roa (hash: 3tIOpxV3dFmPnHX5pAbw7q08MNAptrdhnPG7hgsjWKs=)
2: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl (hash: x/X8V/dnTan5bFuF+jvJombdZ34HuLm6zeLis0e4UzM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ad:e0:82:d7:d0:10:3f:1d:ec:92:37:4e:d6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=25cdf6764a678781c8785fb183dca5715a229720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8c:4d:2c:bf:8d:0e:75:b0:81:51:48:08:73:
0e:6d:07:85:96:ce:58:05:88:f6:30:e9:e8:e2:c9:
be:6b:4a:d1:00:95:04:69:56:24:57:05:56:3d:a9:
e7:4f:59:32:a5:68:03:e7:9b:10:80:32:fe:75:81:
ce:d1:73:e9:c3:18:32:55:ec:08:92:1d:42:38:0d:
38:3e:5b:74:0a:18:5a:b9:62:fa:2e:b5:2c:df:73:
87:c0:ca:90:de:44:cc:1a:63:0b:b2:5a:3d:e9:af:
ff:b9:c7:8e:31:d6:95:6a:e9:7b:33:57:b4:6c:56:
a9:99:b5:50:4c:56:c0:4e:7b:fb:c3:c4:8a:ab:11:
64:19:d1:1b:5d:7f:bf:13:ba:8a:dc:f1:90:b4:e0:
9b:8b:16:d8:45:69:a2:8d:89:53:52:ea:3b:9f:c4:
09:37:3b:80:4d:a1:f4:47:63:28:42:ea:f5:05:97:
12:14:ef:6a:44:21:39:8a:c6:97:c3:8a:8b:5e:37:
3a:ec:6e:59:d0:bb:15:ed:c2:b6:f6:2d:c8:fd:9d:
cf:33:bf:87:5a:49:79:b3:f5:8f:16:23:7d:a6:e4:
70:97:aa:1c:ae:3e:7f:09:75:e4:11:ff:3a:48:8b:
9d:56:df:83:69:0c:67:ac:7e:ff:71:c4:6f:5e:16:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CD:F6:76:4A:67:87:81:C8:78:5F:B1:83:DC:A5:71:5A:22:97:20
X509v3 Authority Key Identifier:
keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e7:97:f7:aa:b7:c2:49:44:c5:34:5e:17:b9:61:7f:19:a7:
2e:e6:95:9f:39:48:b7:51:57:a2:e9:51:05:9f:02:d0:23:d7:
ec:57:06:af:aa:34:42:ff:f7:4b:9c:fe:26:4a:cb:93:43:ff:
62:e2:20:0d:0b:1e:9d:0d:3c:ee:10:bd:1a:ee:8f:49:44:03:
16:f0:8c:b8:7c:e8:71:a5:86:ea:3a:88:3b:4c:bc:80:6d:c5:
0c:f4:67:97:3b:af:dc:5f:aa:e8:0f:e9:0b:c9:9b:44:e9:64:
b9:85:2b:38:a8:ae:32:d8:db:bb:10:12:1c:f7:69:58:cf:2f:
00:3c:75:f1:9b:78:63:a8:50:32:09:37:6e:d1:1d:7c:df:ae:
bf:1d:5b:ac:ac:f2:02:b9:07:6f:c9:68:c7:71:0f:d1:6a:0c:
8a:6b:75:a8:44:00:e1:d6:19:28:ae:33:37:be:d5:d0:09:0c:
8b:f7:75:92:3d:53:9f:98:2d:dc:e0:e7:1b:2e:3b:42:c0:01:
36:3e:50:fe:48:e5:29:61:44:05:e3:ee:bc:f1:6c:7a:0f:0b:
54:8b:aa:94:5b:8c:52:0d:ca:bf:8d:45:bb:0c:9d:c8:2b:2c:
e7:24:de:95:31:86:36:fb:2f:a8:37:ae:df:7d:62:de:12:b8:
1e:c1:5e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:35 2025 by rpki-client