Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier: SxtQhE0ufo9irtnFi9OjuzTixGOg4DahNfqlcNaenyE=
Subject key identifier: 24:9B:2A:8D:8F:2F:29:A7:6A:BF:DB:02:AB:00:AF:0D:AB:14:20:2E
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer: /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial: 0194BC3BE9C1F1C612949E1861139A7F7E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: 8r0lL4X9KlkgvUbQ0f/lG4growsb2xCReDQa0J+eoiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e9:c1:f1:c6:12:94:9e:18:61:13:9a:7f:7e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=249b2a8d8f2f29a76abfdb02ab00af0dab14202e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:0d:02:3b:ad:ee:95:56:1c:0a:1a:34:2d:
6b:f8:e4:9a:c3:35:d0:1b:bd:b4:31:88:59:d3:b0:
14:7c:70:49:13:0b:eb:83:3a:23:cf:56:ee:ef:ec:
51:9c:43:03:c9:d1:54:d4:6e:27:cf:a9:1c:0a:f7:
16:a6:91:74:b4:db:f4:9f:3c:e1:ad:e5:de:19:68:
70:6f:14:cc:97:8e:36:55:b8:24:2f:33:5a:dc:ac:
01:3c:79:cf:ba:a0:ad:4e:88:3b:1e:19:78:89:27:
52:0a:4f:92:71:1e:41:2e:ef:29:db:4b:d0:d8:22:
e4:3b:2e:4a:33:56:14:64:fe:c8:34:4c:d0:ef:cc:
7a:2f:76:ff:20:d4:56:a0:9c:b4:83:ed:e9:dd:8e:
bd:16:04:bc:ca:74:60:95:49:76:e2:e7:bc:58:b4:
b4:72:68:c2:ea:a2:ff:28:4d:44:76:0b:79:6d:8c:
36:bf:3c:a3:1f:92:8d:c6:d8:5f:63:0b:ac:65:8e:
9a:08:bd:f2:1d:e9:b0:89:3e:e5:2e:07:10:88:8f:
87:bc:80:ce:bf:bb:93:29:6b:d5:17:d5:7d:df:a3:
57:dc:71:db:f6:ce:51:08:25:75:1f:f4:b2:a6:b7:
a5:3d:fb:b3:90:3d:73:d7:4e:1d:98:28:04:0b:16:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9B:2A:8D:8F:2F:29:A7:6A:BF:DB:02:AB:00:AF:0D:AB:14:20:2E
X509v3 Authority Key Identifier:
keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:84:6f:ac:82:e3:5c:de:9d:db:52:1f:8a:bd:f1:d2:8a:55:
88:0f:18:70:4a:55:00:1e:50:f2:d5:ab:33:1b:60:df:5e:e3:
b0:28:2e:bd:ff:cf:46:4d:5c:27:d3:53:3b:e2:86:a8:cc:39:
78:2d:5b:37:59:84:e7:65:94:c6:c1:a6:a3:3f:3c:30:5d:ee:
51:59:0e:ee:c7:aa:00:53:57:06:83:f4:64:76:8d:87:bf:37:
c8:93:ca:47:d1:ea:3e:ce:9d:80:a7:28:f5:2b:e7:2c:3c:2e:
fe:1a:09:f2:5f:20:9b:a8:71:ce:d8:22:95:b8:89:6b:43:8f:
6c:30:48:b5:3e:2b:93:dd:10:5f:22:9e:72:c1:72:7a:ae:32:
12:6f:0d:bb:0d:f4:9d:61:cd:9c:3d:c0:98:06:16:c4:e7:cb:
55:82:ef:a1:0f:58:d5:11:40:87:a5:a8:d4:23:90:1d:0e:30:
4c:e5:82:37:67:0e:7e:66:4c:b2:0f:09:38:3d:e0:ec:d0:8e:
36:f6:b0:80:2e:2d:f7:06:47:6a:69:f0:ee:ad:35:ad:ff:3e:
4d:92:d1:ff:98:92:d7:1c:3b:8a:44:a3:32:cd:e1:85:9d:62:
ca:39:cc:cc:47:4f:fd:62:74:72:11:15:ec:d2:47:83:7e:b6:
14:ac:03:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:07 2025 by rpki-client