Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier: Gmfnv8Qz1Ek6D8lWVvlEmzh2cWxIwjuxOWfsKGS8SbM=
Subject key identifier: 1F:93:F7:91:D0:13:3C:E7:CB:E5:7D:A1:85:C9:93:F3:44:F8:EA:B6
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 0194BC3C64439FFA7E98A1EB58464FD9E7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number: 0D5C
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: WmZZKdYuQDYjmfkIsWaJFKfQx0Eb7FhSw6LexNZ95Fw=)
2: _9tck5mtbi0xO7Fr7Y11NL5EZIM.roa (hash: UXCxozlRWrWF5uvq8QkTh0T+21/yBrNobwddT7TkTjM=)
3: ft2dBL2dxWtdVnnU4dlHVTXL4C0.roa (hash: HQtGMREFODQOAzloACeTixd5hA5RT+3n/TffbecMmN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:64:43:9f:fa:7e:98:a1:eb:58:46:4f:d9:e7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=1f93f791d0133ce7cbe57da185c993f344f8eab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:75:b1:05:d2:2b:e3:29:a4:ec:17:f4:60:
05:7a:5d:f2:f3:63:56:c0:f7:91:7d:68:bd:b2:af:
00:f9:dd:ec:23:d3:1b:8a:c4:5c:be:f0:ca:e1:4c:
0e:aa:b2:76:00:41:b8:1a:73:73:3e:c7:b6:6c:a3:
37:9c:3e:ab:ef:e6:4e:ee:e5:0f:98:70:04:ab:85:
00:5e:40:ab:57:8e:12:62:79:f2:3f:90:5f:91:2e:
49:5c:bf:6e:c5:77:2e:65:2b:73:65:ff:57:33:01:
6d:8c:2b:0c:7e:a9:08:a2:08:4a:c1:75:10:78:dc:
fc:48:ab:18:e3:31:4e:eb:5c:70:9a:8e:2a:6d:0d:
78:91:13:8a:42:ee:2c:ec:c9:e8:e9:8c:eb:f9:fc:
1d:ac:e0:a4:b1:ad:13:e8:14:df:b0:ca:d7:32:34:
e4:b0:1d:15:d7:78:23:14:54:ef:16:a6:a9:80:1e:
b2:77:2e:5d:d0:e6:9e:99:aa:10:c7:48:27:02:58:
fa:9e:68:3f:c3:b6:8a:e0:a0:fa:04:2e:b6:94:c9:
59:b8:29:63:74:89:ee:86:c4:70:7d:84:3b:2d:1c:
b9:56:61:0e:44:32:34:f3:ee:50:43:01:9e:2f:91:
0d:20:b1:2e:a4:bd:c9:e7:fa:66:07:bf:5e:52:23:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:93:F7:91:D0:13:3C:E7:CB:E5:7D:A1:85:C9:93:F3:44:F8:EA:B6
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:09:f9:a2:3d:b2:9a:b8:c5:7e:02:ba:eb:bc:07:08:9b:dc:
f0:49:0f:33:a4:1d:9f:4f:ef:c2:7a:69:d9:0f:66:93:34:43:
61:49:d0:6d:ac:1a:19:24:ea:4d:d1:3a:ad:2d:d6:37:e6:84:
7b:fe:98:19:1d:b9:88:85:11:44:2b:fa:56:44:97:3f:8a:c2:
ba:2f:cb:d3:6d:9d:02:69:63:26:81:2f:e5:55:dd:7a:5e:54:
8c:38:8f:18:8a:af:16:6a:79:d4:57:28:68:6f:72:5b:8f:b7:
e3:88:1c:06:00:6e:d9:36:8e:2d:22:2a:dc:3d:11:82:5f:2d:
81:46:c0:c1:39:91:75:e2:f6:00:6d:41:e4:83:4c:1f:13:9d:
93:b1:75:b5:a6:e4:cd:52:2a:2a:33:5b:f3:fa:82:41:77:91:
b3:06:54:b8:46:6e:77:d1:ad:ec:31:ce:f8:16:02:4d:79:d7:
76:97:f1:2d:e1:ac:6b:85:01:86:9b:70:8e:ca:e2:3f:7d:1b:
9e:01:05:33:e7:68:d7:33:88:63:49:32:cf:0b:59:d0:2c:7e:
31:36:f8:db:62:ff:69:90:f2:f3:41:35:3a:1b:8a:cc:9f:e6:
9e:63:c8:95:43:5d:37:10:16:55:06:51:c8:b2:a9:d6:73:33:
43:72:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:17 2025 by rpki-client