Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier: 69UTJKUYC+D/Xwlc4/BvbZZiX0ftPjQRagYMgg9UZ3E=
Subject key identifier: B5:7A:E3:58:13:4E:98:52:60:D2:01:1E:E5:49:1C:A5:42:9C:8F:B1
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial: 0194BC7333ED4253D89E34CD9AA0AE266B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:54 +0000
Manifest this update: Fri 31 Jan 2025 13:00:54 +0000
Manifest next update: Sat 01 Feb 2025 13:00:54 +0000
Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: Y/TCjOaRRAb0kpe1jUJTZOwGUPhEx4iKR2QnE6z987U=)
2: DYi7F6e5pGT8BUg7LPKGmN6_EDw.roa (hash: i4XKBDV9uWZ8rdo9xvJHenErvD+Z3AjDvUvgRz1NJaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:33:ed:42:53:d8:9e:34:cd:9a:a0:ae:26:6b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Validity
Not Before: Jan 31 13:00:54 2025 GMT
Not After : Feb 1 13:00:54 2025 GMT
Subject: CN=b57ae358134e985260d2011ee5491ca5429c8fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:22:e5:71:d8:27:45:ee:d8:30:f1:a6:e1:
78:74:7c:e5:d7:c5:b1:53:a6:e0:ca:39:b0:8e:4b:
cf:af:ba:97:37:1f:1f:d7:68:0f:75:2b:ae:a0:14:
10:02:65:fa:84:b7:5a:0b:2e:be:b4:23:d4:b5:21:
65:03:4d:eb:61:fc:76:9b:80:92:a1:af:0e:3d:f8:
aa:18:07:c8:a9:5d:31:37:2f:b4:c0:a7:48:22:e0:
71:4b:70:76:72:e7:f7:15:21:ff:7a:06:5c:14:2c:
80:67:3a:62:fe:b3:47:ba:39:0a:75:5b:c9:53:7c:
f7:b2:d5:1d:fa:15:91:94:76:09:4a:5e:93:69:ab:
d4:28:5d:e5:0d:43:ef:db:08:c3:3f:3a:95:8b:a8:
ee:3f:bb:35:43:2e:60:bf:57:fd:6c:47:a7:fd:ac:
53:82:0d:fd:3a:bb:84:d9:11:fd:cc:b0:85:2d:9b:
6d:27:69:6a:d1:70:85:3b:9a:8d:2a:58:3b:97:ce:
b2:ac:cd:de:26:a6:76:af:0e:59:b8:35:2b:d8:f7:
3d:4d:10:03:f4:36:db:52:a8:c4:4d:3f:fe:13:12:
a6:38:4d:ac:88:14:04:64:01:bd:82:05:3a:07:cc:
93:50:e8:55:21:b9:df:a6:1a:41:88:ce:fb:7d:95:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7A:E3:58:13:4E:98:52:60:D2:01:1E:E5:49:1C:A5:42:9C:8F:B1
X509v3 Authority Key Identifier:
keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:74:7d:6a:0f:b0:a5:4b:03:b2:33:52:2c:7c:47:6a:b0:65:
78:9f:b5:c8:60:28:eb:93:41:77:49:0b:2d:7f:4e:0a:55:cf:
ed:37:32:85:cd:b3:b6:5a:2e:ae:30:f6:26:d0:df:bf:fb:d3:
78:a1:f8:40:38:b6:18:0d:43:b4:a1:d5:cb:3c:21:36:0f:0c:
ca:b8:c7:9e:26:60:09:31:6b:19:8f:6e:bb:3e:bd:c0:58:57:
5e:e3:6a:da:48:b2:38:5d:13:bf:79:16:ca:84:a3:e6:a9:27:
3c:b5:05:75:b5:46:e9:dd:36:63:a6:0d:1a:f7:bb:dc:02:0d:
80:2c:aa:c5:ae:71:2d:e9:10:f2:3a:c4:76:21:55:93:66:16:
c9:21:fc:05:a6:20:02:d1:c6:5c:04:ea:1b:fc:8f:87:fd:a8:
0f:90:f2:6f:90:43:b8:f1:31:ed:7d:56:8f:70:b9:91:fc:18:
29:10:c3:77:31:f0:b4:4a:d3:64:e3:95:9b:a2:85:07:f3:8e:
30:0c:44:9d:cd:89:36:0d:cd:97:a0:0a:91:e4:02:6a:35:6e:
7d:d8:97:cd:8e:58:55:e4:85:93:3f:df:a1:65:95:b9:bd:45:
48:1b:6f:0c:da:3a:51:87:a1:f5:79:96:66:95:b2:81:21:9a:
17:f3:43:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:24 2025 by rpki-client