Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: utOqopK0fyfVJBAMlLgAo/UFxF2UjSwVtGXF489y64I=
Subject key identifier: EC:8B:82:2D:25:4E:BF:85:3C:1B:67:F9:26:F8:DC:1E:F1:85:A2:00
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 0194BC3C83647D20E438F59D4B254D2F7472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 2A
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: MHpjNGz9G8Fu6GIBUHIXDP/JY1FuqQya+hIEo/zZDzU=)
2: 8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa (hash: dXBSN3fOQjIFRZdnOkkO5RCbLu9iQTdXwdnJOOh0Gjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:83:64:7d:20:e4:38:f5:9d:4b:25:4d:2f:74:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=ec8b822d254ebf853c1b67f926f8dc1ef185a200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:7e:9f:35:56:d5:69:be:2f:ca:c3:fe:f4:
50:77:db:c6:93:a4:a7:2b:ad:bc:ee:f6:23:7e:62:
83:f6:ce:2d:98:9c:ee:f6:33:8c:99:5d:e7:3a:41:
69:70:02:46:bb:1f:eb:e3:e7:cb:40:c8:a8:30:5e:
72:b2:39:e8:6d:bf:ea:09:6b:2d:cc:83:81:66:5d:
57:11:1b:ea:a9:e7:49:f5:ff:df:c2:32:72:1d:3b:
a5:93:50:23:33:6c:61:68:ab:91:c2:17:97:fd:e5:
49:5b:ed:c9:56:85:24:94:6c:e2:c1:42:a6:fb:ce:
20:cb:e7:80:c2:3e:7d:d0:63:4d:1a:18:83:7e:48:
d9:8c:6b:07:77:e4:cb:e8:a1:e4:0c:98:7c:24:13:
73:2c:e5:2d:e5:f2:22:5e:1c:5d:f3:5f:47:86:af:
18:b5:32:37:4a:76:6f:af:4c:f2:74:a7:53:92:c2:
43:5a:31:3b:fa:20:50:1a:2b:dc:0e:1d:11:59:9a:
37:fa:6c:46:f7:75:f2:51:d7:c7:31:9b:d7:48:15:
60:ca:dc:87:66:37:39:75:1b:95:67:c5:5a:d4:8e:
81:a8:aa:65:06:1b:8e:10:2e:f1:53:00:02:ee:a1:
0d:d2:59:d9:00:80:06:a4:92:a6:af:b4:b0:03:58:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8B:82:2D:25:4E:BF:85:3C:1B:67:F9:26:F8:DC:1E:F1:85:A2:00
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7c:48:4a:91:a8:6d:b2:63:43:5d:5e:1b:81:bb:7a:df:79:
28:4b:8e:27:22:16:68:22:7e:e7:22:d5:ad:29:b1:43:de:59:
25:a9:54:48:d6:88:6c:9f:04:4d:f8:3c:84:7c:6e:0a:c8:fc:
8d:8b:cd:9c:94:ad:96:59:69:1c:f3:94:5d:fa:72:ef:e5:48:
c2:db:70:9b:be:d0:b4:2d:fb:ba:bb:64:5d:4a:59:00:cf:a3:
f2:bf:f6:25:59:a5:96:8a:89:0d:d9:16:f7:ed:80:38:6d:2f:
e6:b0:a6:52:db:95:aa:2d:5b:fa:74:c3:11:cc:ff:e4:61:8e:
2d:dc:16:50:45:7f:9e:66:9e:04:6d:97:3c:e2:44:71:ec:2a:
1b:42:23:53:1d:d0:09:e5:91:29:2f:a7:af:3f:29:e7:49:cf:
dc:fe:b1:ac:6d:0c:21:aa:f5:cf:38:0b:5e:2d:e5:d4:df:2f:
67:6e:7b:6f:45:65:e2:8b:b8:8c:64:4c:49:cb:48:5b:69:2d:
6c:9d:d3:b1:5c:3e:db:35:22:1d:64:32:9b:37:f4:01:d6:d7:
96:c9:49:16:5c:67:85:70:9f:37:15:88:16:80:bd:dc:96:d6:
4e:53:a8:6b:bd:c4:c2:ce:bb:fb:87:1d:b5:eb:5b:3e:40:ad:
82:b7:18:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:13 2025 by rpki-client