
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
File: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json)
Hash identifier: o18np3aIWpZ76MwL8JhTrKYPI540JUqtGz1ROoxdbDg=
Subject key identifier: CB:C2:42:37:E5:BF:12:E9:57:3E:F5:6F:EA:E0:81:3B:FF:0E:20:21
Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
Certificate issuer: /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Certificate serial: 0194BC72D72ADB2ED13B553AF81768D65281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
Manifest number: 04FC
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: fnMd/atP9zPQUCy52z/fwUN/dNPC+/sMXgZnr0V7FNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d7:2a:db:2e:d1:3b:55:3a:f8:17:68:d6:52:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=cbc24237e5bf12e9573ef56feae0813bff0e2021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:68:bc:c0:0a:f3:0f:53:a2:eb:91:07:c1:ff:
b8:eb:77:be:1e:c5:63:db:f4:33:0c:f1:51:11:94:
92:14:5b:48:9a:bf:77:76:98:64:22:1c:91:09:24:
0a:2e:cf:1a:ae:dc:a0:e4:fb:76:19:b8:0a:c9:d6:
2a:37:8b:bb:ba:12:47:8e:bb:15:2b:71:4b:0b:43:
75:24:3c:97:f3:1f:b6:8c:55:40:8c:19:ab:b9:f4:
46:ae:eb:ff:f9:ff:4f:51:a5:c5:20:f0:54:04:65:
01:cf:9a:30:ad:66:a8:a2:23:6a:7f:8c:9d:65:27:
56:fe:eb:f7:04:65:b4:d4:e6:91:0c:00:94:d9:82:
67:f0:85:62:ed:74:94:18:dc:5f:fa:64:b9:cc:bb:
99:b6:b1:c4:f2:70:79:07:71:1a:36:d2:64:dd:67:
27:d7:5d:10:89:c7:c3:59:c8:1f:3f:96:06:b2:e3:
bd:9e:ee:85:91:05:ed:9b:ff:75:25:90:47:6b:61:
6f:4f:8b:b9:bc:b2:db:3e:a8:3c:27:bb:97:cc:64:
64:ab:32:5b:5f:7a:b9:e9:90:d9:3e:81:6e:82:6d:
41:ce:6d:b6:aa:b9:5f:d0:93:0e:39:6e:d0:a1:26:
f3:58:66:59:21:a0:e2:f5:b0:3a:8d:5e:93:33:4c:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C2:42:37:E5:BF:12:E9:57:3E:F5:6F:EA:E0:81:3B:FF:0E:20:21
X509v3 Authority Key Identifier:
keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:af:5f:31:fd:22:6a:1f:0d:3a:5a:2c:cc:ce:94:4a:b5:e1:
50:18:bd:9b:20:9d:9e:2a:ce:35:53:ad:19:9c:3e:28:03:22:
03:27:14:80:8b:65:58:49:f2:96:5a:79:13:10:2c:24:2e:b7:
97:42:7b:5e:75:85:46:86:7b:a6:32:c6:1a:41:61:40:28:74:
b2:7a:e4:ae:6c:80:84:c0:c6:d7:c0:ea:68:43:30:fa:b8:66:
a5:5c:86:0e:4d:72:e0:38:9b:ba:13:55:cc:9b:7f:86:ed:b0:
9e:90:f8:b7:27:fa:91:2f:ee:aa:74:1a:88:b0:58:63:63:48:
bd:5e:a3:e9:73:17:5c:b9:ab:8f:4e:e5:64:b1:c6:b1:67:22:
7e:0e:89:ce:d4:a8:92:37:be:9e:20:68:df:1f:20:e8:cb:35:
e1:eb:26:0f:6d:6c:ed:a5:4e:0e:63:f0:b0:2f:8b:22:c9:3f:
c6:c4:0e:a0:2a:71:a9:4d:84:e8:9d:c0:59:ff:73:41:33:b6:
90:c0:8b:71:5f:60:2f:3d:61:e9:14:27:91:4c:e0:45:bb:55:
0c:59:39:59:da:5c:43:b8:a3:dc:15:62:4f:db:fa:df:43:b1:
bb:99:bb:fe:ce:c4:f6:40:82:83:c4:f3:45:20:55:46:cf:d2:
e6:ca:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:37:03 2025 by rpki-client