Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
File: f3BJpbLfBi_E4RlYQGU8P1kgySE.mft (raw, json)
Hash identifier: mv7I9w1LSzNrPo18FDAbumFE5j3+TKG8MGhPJQpUCQw=
Subject key identifier: 0A:98:0C:1A:85:E5:65:CF:E9:3B:B7:37:F7:6A:16:3F:B1:7E:62:4F
Authority key identifier: 7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
Certificate issuer: /CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Certificate serial: 0194BBCE4EF920E5F1FA2EB09CC9F731F37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: f3BJpbLfBi_E4RlYQGU8P1kgySE.crl (hash: p21h0x/2axRYEFWX1v/6QFcy9lgcAuMS8aCq3X9mh0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4e:f9:20:e5:f1:fa:2e:b0:9c:c9:f7:31:f3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=0a980c1a85e565cfe93bb737f76a163fb17e624f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:b2:56:79:fc:36:6b:df:57:95:12:0e:3f:
f1:0d:b0:3b:eb:fa:95:67:e6:41:1c:f4:b0:37:0a:
9a:7f:5d:2b:8a:24:7d:42:c6:07:41:dd:fd:3a:df:
d7:39:8a:8b:97:e5:8b:8b:ee:cf:95:a7:7b:7e:de:
c5:40:cd:7e:15:f6:d6:62:22:3c:17:10:fb:ce:95:
23:9b:8e:f5:3d:28:06:b3:51:4f:cc:74:eb:54:33:
17:61:29:ed:18:3d:b0:80:d0:58:2e:0d:b7:6b:13:
14:80:92:31:7f:59:16:d2:b9:70:c0:0a:a3:d1:a9:
dd:7d:a1:44:e1:d7:4a:75:91:b4:dc:0a:a4:87:79:
37:3d:e5:30:da:74:c0:21:f2:bb:26:29:5b:6e:48:
24:6b:56:fe:d6:e9:d6:2c:83:9a:c5:7a:8a:8d:b4:
d0:1e:1e:ab:d4:8b:0f:55:de:d5:72:ab:99:ed:68:
f5:4a:b3:f5:6c:7f:eb:72:44:b6:d0:ec:5d:6a:3b:
9a:a8:38:4b:80:12:e0:03:4a:eb:61:2c:b3:6a:b6:
83:79:98:76:18:8f:ec:3f:6d:f0:d3:56:68:0d:05:
3c:0f:2a:87:63:c1:8f:9b:38:84:60:57:28:c9:22:
4f:30:7c:ea:06:96:7c:86:91:31:81:45:29:92:15:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:98:0C:1A:85:E5:65:CF:E9:3B:B7:37:F7:6A:16:3F:B1:7E:62:4F
X509v3 Authority Key Identifier:
keyid:7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5e:09:d0:9e:07:ba:e2:2e:ed:68:a4:b8:5f:48:92:6d:d9:
c7:09:b5:ac:42:3a:38:76:2a:b7:a9:da:be:29:bc:e3:93:d6:
da:68:c4:6a:9b:0a:39:43:7a:6c:4b:c2:ab:76:ea:9a:7f:fd:
fe:87:66:d8:3f:19:36:26:e4:e6:b9:f5:ed:5a:c7:be:32:09:
c0:f8:5b:c6:7c:30:1b:96:3b:66:bd:ee:43:b9:30:8c:16:de:
06:0a:92:73:61:9d:43:a1:17:fc:38:e7:e9:be:28:fe:2a:9a:
82:a9:4a:31:6d:06:be:32:90:49:4b:6d:d9:13:db:46:81:50:
ff:02:1f:86:cf:af:61:6b:8c:64:25:9d:4f:c3:42:34:b9:d7:
ea:e7:38:be:ab:3d:71:b1:aa:c0:84:56:db:68:84:57:31:0d:
ec:c4:c8:84:d2:69:ea:54:81:cb:2c:3a:aa:90:be:24:ab:47:
bd:d9:16:76:01:4d:1d:80:08:49:27:af:4f:ce:57:b7:6a:b4:
f9:c9:53:08:27:72:26:9a:53:0b:c7:2d:3e:89:89:62:72:ef:
1d:3a:0b:10:ed:b7:e9:f2:70:35:e0:64:e6:6a:61:dc:f5:4b:
ad:81:fd:1c:16:19:df:ee:ae:73:9d:5e:05:fe:4f:54:d2:b7:
85:fb:47:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:19 2025 by rpki-client