Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
File: FXaJHPKx2OxWwDvHqW3pWKDgADI.mft (raw, json)
Hash identifier: 3a9FTOUPPr/bGRbzcws8RY0mr6dRaf95CMQryZc2W0k=
Subject key identifier: 0A:DB:BF:E1:3F:91:6C:85:23:2D:64:33:92:8C:24:1C:5D:BA:BE:A2
Authority key identifier: 15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
Certificate issuer: /CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Certificate serial: 0194BC72DB08DF3250B39FE542574777085E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
Manifest number: 01D3
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: FXaJHPKx2OxWwDvHqW3pWKDgADI.crl (hash: 4ALICnQs4X9BFvefxHR/xCVJnEbVavV9+6/kNspUB4o=)
2: pkUWU7hoqn1MoMfV_e6H2-KJHtM.roa (hash: pNc3IO7oSLkfW6eqPtj4TJMlIbS8z2hqWPYZAIIHzEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:db:08:df:32:50:b3:9f:e5:42:57:47:77:08:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=0adbbfe13f916c85232d6433928c241c5dbabea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:1f:64:25:15:5c:5b:c2:c6:d4:97:bc:f4:
14:ce:54:0f:1d:21:bb:35:6e:68:4e:01:f2:c6:81:
eb:08:c2:10:fc:3e:f6:bc:dc:57:55:8e:ad:df:b2:
40:1b:1a:69:64:7f:e1:74:5a:31:2e:13:dd:39:99:
fc:57:89:b6:3c:bc:d2:77:37:16:10:3a:d2:92:20:
7f:e1:d2:b3:99:7c:d8:b3:47:35:af:61:94:f4:6e:
09:8e:5d:3b:e8:b0:90:f1:f3:3f:a4:0f:f6:9f:76:
ac:cd:8a:0c:3d:a2:67:cb:b8:4c:05:36:40:fa:72:
f6:2a:0c:28:d9:e3:77:93:56:65:d1:45:84:8d:f9:
c4:20:19:6c:bc:02:98:e8:43:b5:d0:39:08:40:1c:
0c:08:13:34:36:71:c7:ff:c0:d1:eb:9c:c0:1c:cb:
c1:c9:e7:cb:e0:74:8e:0a:df:7f:b7:fb:52:1d:7a:
9e:b4:dd:77:58:f1:79:21:6c:d3:ef:a1:43:4c:a5:
e1:36:89:b7:9e:d4:68:a2:c3:de:ab:28:dc:99:14:
b2:37:0c:e8:67:5b:52:3b:5c:64:56:ca:c4:94:a2:
66:1f:c6:ca:ee:fb:61:db:63:9c:32:5c:d5:a3:36:
1a:fa:c6:f1:64:01:24:1c:b2:6b:3b:ec:67:6d:cf:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DB:BF:E1:3F:91:6C:85:23:2D:64:33:92:8C:24:1C:5D:BA:BE:A2
X509v3 Authority Key Identifier:
keyid:15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a9:48:77:63:7d:05:43:5d:79:86:ea:71:cd:63:02:a2:70:
0c:2c:08:f3:95:72:aa:0b:f5:b7:76:d5:9e:c6:8b:03:43:f9:
8c:dd:42:02:61:c6:dc:e7:e6:fa:b9:43:18:c0:54:dd:af:c0:
db:da:b4:1f:04:83:73:7c:a7:78:8b:da:7c:0f:0c:53:de:53:
80:58:34:e3:c5:dd:be:8b:68:63:be:88:de:ad:23:95:17:c2:
67:5a:b2:ce:3f:91:1b:04:52:32:a0:f5:08:48:33:53:91:b7:
3a:a4:4b:e9:8f:45:af:73:46:f1:dc:1d:f8:6f:c2:20:20:0e:
e1:c7:56:d2:e7:35:08:52:e3:15:89:09:01:b6:fd:20:0a:37:
4c:72:e9:ed:0d:74:74:68:83:5b:5a:f1:a5:72:01:66:c8:2c:
e0:15:99:5a:0d:57:a8:0f:dd:0d:8e:3a:a3:9f:84:2f:77:ad:
56:dc:0a:16:f6:c6:53:78:cb:79:c7:39:a7:00:6c:e1:72:67:
63:68:7b:7c:30:64:ce:f8:41:17:de:02:ba:45:fc:52:ae:bf:
e1:f2:e3:63:85:96:42:b1:40:8d:bb:7a:a6:74:77:7e:61:c2:
fc:49:fb:3d:c9:5f:c9:55:d9:fd:e7:89:da:dc:0d:ec:32:28:
c6:87:88:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:20 2025 by rpki-client