Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier: pBCuyEXjPbd2vbmDIQXV6ejXGicBtZ2Fbe0zxHb5/W8=
Subject key identifier: 36:3F:4D:2B:FD:7C:3B:D4:BE:6F:FB:5E:18:43:AE:22:D9:DC:8F:E4
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial: 0194BCE0E01375A04A5015E9867D5B4BB148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number: 01A2
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: hxScJ4RpoSFuiLua1OC4imUaNTuP3F5hOFT0P75HPdw=)
2: zVisEWOE63cgJitrBEvJgl69e3s.roa (hash: XbX4/gD81xbjCKcZpF0h9K2QmjSBOOrAtln50jZvE7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e0:13:75:a0:4a:50:15:e9:86:7d:5b:4b:b1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=363f4d2bfd7c3bd4be6ffb5e1843ae22d9dc8fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:fe:e2:1c:85:c2:06:2d:c3:f8:32:5a:5f:
34:d9:9b:ca:eb:31:67:36:78:21:8f:82:c2:7e:c1:
a7:63:98:7e:f0:ba:18:83:90:a4:ea:07:0e:e8:95:
46:eb:80:86:93:91:83:7a:98:db:5f:47:c8:6f:af:
45:58:94:e4:d9:80:88:e2:e9:e0:36:35:69:9e:49:
8a:a4:a9:5c:14:2b:3f:18:7b:d2:93:53:68:8a:31:
01:3b:58:58:d9:7c:2e:3a:8b:8e:f5:05:44:6b:3a:
3b:de:22:31:10:65:78:74:ae:99:a4:37:7a:d2:45:
86:a1:b8:ee:e0:1f:30:6c:29:a5:6a:9e:2e:a6:2e:
e5:6f:1a:e2:a0:f8:70:42:dc:90:f3:20:61:cf:ec:
1e:c2:5b:68:37:88:ad:77:e2:89:e4:0b:97:24:58:
c5:a2:41:93:94:d1:bc:3d:33:7e:6b:d7:97:a1:fc:
73:91:9d:a1:fd:3d:15:9b:eb:9f:58:55:d2:b5:12:
d9:7a:11:3d:6c:cf:5b:bc:53:f3:30:eb:ef:93:09:
cd:fb:38:c0:66:43:4c:20:47:34:74:09:c6:d5:29:
05:d5:a6:47:d8:63:1c:08:63:ac:70:b1:13:77:43:
9e:9b:aa:b2:a0:ed:a8:4c:2f:37:51:b1:bc:29:2d:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3F:4D:2B:FD:7C:3B:D4:BE:6F:FB:5E:18:43:AE:22:D9:DC:8F:E4
X509v3 Authority Key Identifier:
keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:62:12:56:c6:1e:ee:89:59:06:47:73:75:30:d6:51:91:a5:
3d:0a:ce:4c:63:06:e2:dd:6b:0f:8d:e8:9f:8e:04:00:29:e9:
97:5f:50:3d:f9:24:53:4e:7a:06:95:88:3f:62:91:9c:4b:28:
95:f0:20:cf:ce:b9:c7:eb:fc:46:56:ef:71:b9:80:3b:c4:9a:
35:e9:59:bb:c9:23:35:aa:4e:c8:22:e8:bf:ed:a1:89:58:82:
e7:ad:ea:d1:d5:ac:41:c0:3e:39:95:41:d6:52:1b:4a:33:f5:
6e:c9:32:30:79:71:b4:8c:94:ac:8c:99:80:c4:97:b6:b6:e4:
3c:37:e5:a3:68:c0:a4:ab:54:b7:00:8a:47:f6:97:8e:d8:60:
8c:a0:7c:e5:d1:ee:36:3b:ba:4c:b9:a3:44:3e:7a:6f:a2:72:
91:e0:c5:07:5a:48:71:a9:1d:9c:f0:d3:4f:55:f8:c9:e4:46:
00:35:ae:79:a6:30:fa:25:c7:7e:35:03:4f:26:d1:3a:d7:bb:
93:29:0d:9b:9e:3d:19:39:35:9a:e5:e9:82:42:da:7d:04:8e:
04:0b:1e:52:8f:89:e4:e6:f8:db:35:16:f1:df:da:e4:c9:02:
fd:73:9d:ad:84:e8:d9:4d:98:e5:c3:9c:f4:83:c4:05:23:64:
d5:0a:8c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:23 2025 by rpki-client