Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier: cpN993RGsBoS6cPpyqaGbfByjkRma2Gw4b619IPl/iQ=
Subject key identifier: F3:E0:67:DB:62:38:9B:96:5E:14:91:C9:0F:C8:5C:5D:0F:84:1B:4E
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 0194BCA9D27192C1D63C7811D0476E9F7961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: QL9WzQwtLahnmApMuqheGASVH3PVSf7TCE2EQYNkmtU=)
2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d2:71:92:c1:d6:3c:78:11:d0:47:6e:9f:79:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=f3e067db62389b965e1491c90fc85c5d0f841b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:19:a9:dc:30:92:10:26:11:6b:6f:23:c3:
77:e5:cf:77:46:25:05:b3:cd:f2:ab:43:72:b0:2b:
cd:27:53:70:c2:9d:56:5c:9f:7c:32:fb:10:5b:d5:
39:ea:0b:a2:60:e9:8d:fb:cb:79:68:e7:41:3c:38:
54:d5:bb:69:db:0d:c4:3d:52:9b:ac:0b:b1:55:4b:
53:b0:b8:2e:25:5e:82:46:c0:10:99:51:4a:af:dd:
bc:95:f5:61:72:4d:11:77:fb:48:5e:8c:f6:37:f2:
d1:88:92:81:6f:16:2e:49:dc:fa:7e:b8:db:12:3a:
b0:74:6b:5f:e5:36:d9:bb:de:52:f3:02:c2:11:39:
09:07:b3:56:3c:8c:19:42:27:1a:e2:77:57:94:22:
bc:10:4a:c6:18:f1:64:0f:ea:f2:5d:3a:1d:4b:ff:
d7:8d:98:c8:63:aa:ba:a8:13:b7:14:88:82:92:b0:
79:a1:44:23:84:89:2c:61:dc:d0:f6:73:b8:ea:a8:
26:65:30:4c:d4:f8:7a:50:ec:f6:d7:6e:68:43:18:
5c:a3:4e:e1:fd:a7:c7:5e:ad:6d:51:f3:54:0d:b8:
e3:34:e9:5a:a0:21:7d:40:b0:51:e8:16:5d:8f:8d:
7b:52:3b:8c:64:9e:8e:99:62:79:0c:0b:ac:5c:51:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E0:67:DB:62:38:9B:96:5E:14:91:C9:0F:C8:5C:5D:0F:84:1B:4E
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ea:38:98:aa:67:ce:f5:c8:79:dc:95:b1:b0:db:54:f0:a3:
33:64:cf:41:de:a0:29:c6:71:e7:fd:1e:6b:9b:cf:31:9e:fb:
20:ec:17:4a:26:48:79:67:d3:54:c8:f8:65:6a:1e:f1:db:19:
d3:1f:d4:e7:3d:0f:28:d7:ff:3d:da:59:b8:f5:86:6f:41:12:
6c:08:33:ff:12:84:46:80:85:06:90:dc:f1:0f:7b:75:39:7d:
36:2c:b4:d0:8c:39:74:4b:da:1b:5a:a9:05:01:f7:4f:a2:9b:
b8:20:4b:3c:5f:ac:cd:99:b2:f5:45:16:7a:86:6e:93:46:63:
c4:d2:8e:5b:bd:68:52:c8:b3:be:2a:a7:de:e3:4f:39:a5:57:
e7:d8:0e:05:e3:80:1c:f5:31:21:30:30:16:e3:cf:b8:c4:42:
09:c7:03:d9:22:70:64:f7:94:3d:0a:fe:76:74:74:d8:81:31:
c2:bb:ea:78:39:a6:6d:10:db:e4:6e:28:74:02:b3:e0:fc:f2:
88:c7:c5:0f:d4:ae:22:27:88:12:32:b8:5c:43:cd:f7:6c:85:
d1:e1:e0:c1:ae:2e:51:78:b2:65:8e:eb:fc:6c:73:7d:26:7d:
1a:82:8f:99:e5:05:b2:13:65:f7:86:21:02:a2:62:6d:a4:e3:
ab:a7:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:22 2025 by rpki-client