Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
File: FSj8hxfpGa4HJhquKNjIRWTIpxI.mft (raw, json)
Hash identifier: JMYm4J4oX8nZbeBVvdTEmx0lugHhBQwTdjrjzJEby8Q=
Subject key identifier: 4E:00:25:8E:E4:0A:8F:AA:AB:1E:2F:FB:5B:ED:54:E2:A8:4B:2C:14
Authority key identifier: 15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12
Certificate issuer: /CN=1528fc8717e919ae07261aae28d8c84564c8a712
Certificate serial: 0194BC728BB0E35573B86EF46F7BC6F83DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
Manifest number: 0D8A
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: FSj8hxfpGa4HJhquKNjIRWTIpxI.crl (hash: xC+R0Rp/R0RFYo2bw7+JB2YjGbeSzfpCrc7CLGjfIyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8b:b0:e3:55:73:b8:6e:f4:6f:7b:c6:f8:3d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1528fc8717e919ae07261aae28d8c84564c8a712
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=4e00258ee40a8faaab1e2ffb5bed54e2a84b2c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:b1:22:f4:5c:13:04:b5:33:9a:83:a1:7f:
3d:4c:84:23:ef:aa:cf:5b:d7:86:7b:d9:28:32:33:
04:2c:11:55:d8:97:8e:75:40:cc:3e:c5:fd:c4:55:
fc:02:e5:10:b5:5f:26:a3:65:0f:d1:4c:41:c6:5f:
86:bc:0e:f6:19:96:37:96:55:0c:93:15:aa:0b:e9:
88:f6:d9:30:92:eb:c1:63:7c:38:27:4c:27:f9:a3:
6c:b6:8c:e2:e9:84:71:be:b8:83:d9:ba:02:8b:b5:
d3:a2:ef:08:b1:c6:14:86:23:ef:66:fb:99:04:cc:
cb:22:7a:dd:e4:b8:15:42:2e:66:be:6e:32:30:1a:
77:c4:3f:4d:a7:60:f2:92:d6:d5:63:9b:1d:cf:eb:
47:0d:59:09:68:98:bd:b7:9c:bd:62:a5:7b:7d:b5:
f4:3e:ac:f2:97:6b:3f:c9:9e:e7:98:da:53:82:53:
a3:4b:34:5d:e3:bf:63:58:c9:77:7d:77:ec:0c:fc:
17:d4:f4:1a:bd:e0:69:5f:ba:cc:24:1b:09:3c:3f:
e6:c5:9f:17:39:4d:97:d4:00:85:84:d4:f3:72:f5:
68:58:01:d2:09:7a:2d:89:af:64:63:93:89:f4:de:
ad:70:a0:51:f2:ec:c1:7c:05:ef:95:e8:b9:58:b3:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:00:25:8E:E4:0A:8F:AA:AB:1E:2F:FB:5B:ED:54:E2:A8:4B:2C:14
X509v3 Authority Key Identifier:
keyid:15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cb:e2:b7:7c:03:41:23:6b:50:a2:3a:52:6b:db:1a:5a:f9:
3b:f4:bc:d3:4f:dd:21:19:fb:74:d2:7f:c9:be:65:69:16:7f:
1e:b2:e6:87:d8:01:0a:f3:1c:fe:5e:da:d4:02:7a:29:56:fd:
46:39:da:f9:07:bc:30:6a:3c:da:ad:f1:ae:ee:a9:08:a5:2a:
d9:e6:6b:45:1c:93:43:f6:b1:eb:ba:c7:01:b0:e5:55:8e:e3:
33:40:d6:ed:bb:2f:d0:4c:e4:b3:cb:1e:6c:7c:51:cc:d5:5c:
bd:23:4c:a3:ae:3c:00:17:4e:bc:d6:aa:ff:3f:62:e6:5c:40:
5b:66:6c:e9:82:60:f9:85:0f:65:8b:ef:9d:30:b0:c3:11:28:
5f:04:9c:21:31:ef:19:c7:d7:36:0d:cc:c7:b7:54:00:5b:22:
50:ff:77:04:2c:f4:c9:01:91:bd:51:2c:2d:06:16:bf:16:6e:
0c:ce:7b:ad:b8:c3:66:b1:9f:bf:16:9c:b5:ac:8b:26:e0:a1:
fc:d3:e5:03:3f:65:bd:3b:b0:70:74:e0:8c:7f:b1:57:16:1c:
76:15:62:9d:77:7f:b0:ce:b8:c3:79:80:36:ff:d7:a2:47:b5:
88:ab:45:13:2d:3f:ed:8c:59:4f:35:63:b0:2d:24:79:a3:47:
a9:f8:ba:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:32 2025 by rpki-client