Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier: OTA1eBg+D6tPvDb9XWDK97DudiBmTMieTenN3+32sCI=
Subject key identifier: 64:5A:6A:CD:AF:65:58:A5:D7:47:FA:F8:EC:B3:8E:6E:3B:DD:D6:40
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial: 0194BC729470B42644DD5381AA0A1FB960EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number: 1299
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: GZwIlnG7LAliVs4utiSm2K38polDh2B4JoknYejeiUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:94:70:b4:26:44:dd:53:81:aa:0a:1f:b9:60:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=645a6acdaf6558a5d747faf8ecb38e6e3bddd640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:94:6a:5e:5c:d3:22:9b:fb:41:0f:55:36:
b8:54:42:0c:93:87:e7:5c:c3:88:56:06:2c:c6:ad:
57:b8:53:3a:ac:b3:b3:c8:f6:26:a8:63:f7:05:62:
f2:61:5e:07:4a:10:ca:5e:79:40:5a:2e:c0:2a:b4:
aa:d4:9d:f2:6f:3f:60:51:fb:31:92:77:a2:a5:79:
1e:8c:3a:64:83:54:af:d6:be:60:9d:6d:3b:d3:66:
c6:0d:41:d0:4b:20:52:91:d1:f3:cc:22:51:a1:a2:
14:f2:67:40:70:d3:cc:b6:50:c3:01:d0:13:43:16:
e9:56:0b:bb:44:8d:33:97:68:9f:88:8d:d6:b2:b2:
a7:e9:68:49:8c:e4:b5:4f:b6:7e:28:0d:75:03:2c:
ea:a2:65:0a:7d:a0:da:c3:59:1c:15:b0:30:a7:be:
8b:df:d4:80:ab:85:14:86:22:e1:6a:c0:e7:a0:c1:
ca:14:61:73:51:d5:7c:c5:89:d1:30:71:6e:ee:2d:
a2:a6:f3:e3:9b:ce:9f:f7:af:60:dd:89:96:07:86:
a2:5c:c7:3c:bd:29:b5:d9:37:9b:59:32:f4:f1:7f:
45:08:96:e3:72:37:d9:f3:83:d4:37:f9:57:d2:ba:
70:70:56:ab:18:6c:10:6f:dd:15:71:68:07:d7:94:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5A:6A:CD:AF:65:58:A5:D7:47:FA:F8:EC:B3:8E:6E:3B:DD:D6:40
X509v3 Authority Key Identifier:
keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:df:6c:42:43:4b:72:4e:b5:76:fe:1d:75:64:1f:09:9f:b2:
ba:b9:79:d3:ff:5d:0c:30:6f:03:53:3a:b2:bc:43:67:91:d2:
57:c0:97:ab:7d:e7:50:81:82:ea:7f:a1:4d:fc:b4:ed:68:95:
13:c9:0b:cb:87:07:24:f6:90:24:ef:9f:13:b4:cc:5f:11:32:
96:cb:29:1b:58:db:f5:ad:63:37:3b:d8:0a:70:7e:f6:2f:e7:
33:01:e0:b6:44:6e:3b:71:42:dd:e1:91:eb:2c:06:a4:ab:84:
a5:43:5e:e2:59:b5:8d:70:71:39:ed:d0:72:d2:81:d3:47:09:
cd:3e:62:26:5d:82:24:db:90:2f:c1:25:72:bd:a6:7b:fb:7d:
86:ae:75:32:2c:dc:36:17:9a:4d:db:b5:b5:69:1c:c3:0b:30:
e3:30:e8:f5:4d:82:04:ab:e9:73:dd:79:26:93:bf:c2:aa:2e:
93:e2:29:2f:d7:d5:77:29:db:29:4b:66:1d:8c:73:6e:79:ee:
46:14:70:dd:79:1e:6e:5b:fa:8c:c8:f5:ef:82:15:47:2c:f9:
3a:2e:3f:80:7a:75:06:ac:5c:da:c0:87:b2:63:87:68:f5:03:
ba:52:38:2a:8c:99:c0:e7:89:7d:94:b3:2e:90:e4:b8:84:19:
92:1a:d9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:52 2025 by rpki-client