Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier: vehRONOJT2zD/7n1y4eAjsf2sLN4v97zj39ZmqsK1Bc=
Subject key identifier: 53:E9:AA:6A:9B:E6:A7:8A:08:A9:0C:59:9B:84:6D:30:68:B0:BA:98
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial: 0194BC728E3AB99469122165B378B22D0A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number: 08D8
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: VY76zaVvBCiRjxXlKxEmR+xQoV2e2nOH5IT4Pr7ZHJs=)
2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8e:3a:b9:94:69:12:21:65:b3:78:b2:2d:0a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=53e9aa6a9be6a78a08a90c599b846d3068b0ba98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:b6:8c:23:ee:ad:91:59:28:b9:ef:cb:74:
89:76:b8:42:68:a6:43:7b:58:3a:d4:15:82:5b:9c:
ea:5a:7f:c8:ad:08:10:69:ad:b5:a4:92:42:c6:5c:
82:c1:23:e9:32:b8:33:30:09:19:e8:60:f4:d9:7f:
85:b1:39:1e:fb:9f:91:42:09:8a:2d:98:89:2b:1c:
f2:22:4b:81:ac:2c:f3:58:d7:42:a7:f0:cf:2c:ca:
d7:55:87:f3:bc:ec:8c:4d:c2:33:b8:dc:8e:3a:d7:
87:61:3e:9f:dc:16:cd:9e:aa:86:21:f0:d7:c9:ad:
dd:5d:c4:ff:2b:22:9a:21:a6:24:72:ec:f6:c2:3e:
55:24:d6:5c:8c:9b:a5:25:5c:0a:c7:03:43:d4:60:
b9:e9:39:f9:5a:f5:b2:df:89:68:eb:0d:7c:33:ac:
04:f8:db:0a:bf:28:64:b2:64:b4:da:37:2c:f1:0f:
27:ab:23:97:c8:68:ba:8b:22:de:7a:2f:ef:5e:e2:
9f:00:cf:8b:2c:77:5b:ce:2a:c2:73:5b:cd:df:31:
61:f9:4d:00:72:ac:73:97:14:dd:7b:70:a4:5e:2d:
b2:15:3c:19:45:ae:58:6b:d9:ee:6a:55:03:3c:af:
43:8c:08:86:27:24:58:59:7f:b0:3c:0a:a8:00:54:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E9:AA:6A:9B:E6:A7:8A:08:A9:0C:59:9B:84:6D:30:68:B0:BA:98
X509v3 Authority Key Identifier:
keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1e:ea:74:4c:87:ba:78:10:fe:96:f2:60:39:56:3f:dd:ad:
e8:38:af:a2:ce:b6:b4:c2:f8:01:3f:88:09:81:50:59:48:cc:
a6:1b:04:94:0a:73:04:1a:a2:00:d8:cc:52:4e:49:d3:2e:7d:
8b:45:46:89:3b:bc:54:99:28:b8:be:34:24:50:f3:f4:55:4b:
02:e4:22:95:3c:16:c5:fd:f0:71:bb:c8:48:0b:b4:4b:53:d6:
bc:0c:bc:ff:15:a3:a9:b8:7f:0f:8d:88:9d:b6:80:12:b0:e0:
1e:e6:85:c5:57:8c:b4:d9:e0:f1:d2:eb:1a:6c:93:4f:a9:a4:
16:b9:a2:28:f6:4e:d2:63:ac:c1:6d:ef:76:6b:f7:01:49:bd:
02:04:20:9b:af:d8:de:86:7f:61:00:bb:ab:23:5a:7d:c7:2a:
a7:27:1b:21:94:1e:e3:b5:e7:c3:01:83:3d:41:9b:5f:47:4d:
42:fd:80:af:57:42:bb:d2:0b:d0:4d:7d:5e:d0:d7:db:69:f5:
79:fc:cb:a1:b7:b9:16:cd:c8:a0:ee:4c:65:54:00:4a:9a:78:
e4:34:a1:9a:2c:79:76:a4:3b:41:ae:70:92:1d:06:50:62:cf:
26:88:54:90:87:d1:56:4e:c0:68:8a:b2:fb:11:8b:d8:b4:d1:
c8:53:0a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:01 2025 by rpki-client