Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File: F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier: 6xLBbvaiToL7dvgaHbTecEpqhWleOFsIt8hOItCf69U=
Subject key identifier: 81:98:5D:8D:7E:57:86:93:CB:6F:09:15:75:32:86:79:C9:DF:07:6F
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer: /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial: 0194BC7300A4576FFA5C9AC1F1F761DC214E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number: 0382
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: h8EPtDSg3VRdEPKlWL/J+yaPTVzo9HWe8B2M0EvMRwU=)
2: tQhQQED_2rbtgmsDxQqfycOcoj4.roa (hash: 7QkytynjV9fTl5bHPu2TPRokrjL3zXWtRN7glg7QEBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:00:a4:57:6f:fa:5c:9a:c1:f1:f7:61:dc:21:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=81985d8d7e578693cb6f091575328679c9df076f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:52:90:ec:b1:f8:70:3c:43:2f:1f:ad:a6:
6d:4d:a5:be:bf:1f:76:66:2a:9b:7a:45:80:27:57:
60:21:51:15:9b:ad:bc:f2:49:21:fb:9c:05:95:6f:
f0:2b:bd:54:c5:ee:ef:95:3f:ea:c9:a2:02:48:8f:
ed:7f:00:61:91:08:79:84:61:e2:60:64:02:bc:c4:
ff:f5:c5:1b:ea:ef:f9:3a:58:fa:0f:74:fa:4b:2c:
ed:82:04:a0:f1:d6:fc:de:10:34:8e:7a:20:52:ac:
fb:de:b6:22:81:56:ee:31:ac:04:62:d0:e0:aa:d7:
1f:d8:29:8d:79:f8:af:3f:e2:c6:23:a4:94:f3:9e:
fd:54:e9:21:a6:28:67:d0:da:fc:de:fe:6e:6c:66:
27:73:e8:63:da:14:a6:65:a4:81:5a:cb:00:a5:88:
e8:71:39:87:d5:04:d1:6d:93:82:45:96:4f:00:b5:
8d:69:e3:42:84:c1:70:a2:81:7f:63:16:53:f5:0a:
b6:c2:80:4b:6c:ff:d0:85:ef:e1:0d:80:88:46:96:
4a:e8:73:25:8b:0f:51:f3:d1:74:98:8c:39:a3:b7:
79:4a:5c:6e:dc:9d:64:2a:b3:89:88:bf:bf:c9:9d:
0b:2a:06:a6:7f:3b:43:b4:e7:ec:a6:d0:ec:db:5c:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:98:5D:8D:7E:57:86:93:CB:6F:09:15:75:32:86:79:C9:DF:07:6F
X509v3 Authority Key Identifier:
keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:05:4f:b7:c2:88:be:e4:d0:3a:a7:68:95:f8:90:25:69:d3:
87:36:e0:23:1e:7a:d1:fa:0c:96:f5:f2:95:cf:29:ea:14:67:
c5:22:02:c1:7e:6d:69:32:4f:77:42:1d:12:2c:bd:ae:3e:3a:
c0:de:51:0b:5b:e5:c9:a1:af:9e:74:e3:8e:fb:0e:02:64:aa:
f5:d0:50:a0:e0:3e:9d:d9:0d:a9:61:55:0e:ae:7e:1e:9e:75:
4a:df:e4:25:41:20:3b:e6:8a:49:b1:a6:ca:a0:2e:31:ab:ed:
e6:56:e9:cc:54:99:27:2d:7e:c1:ee:dd:87:e2:3d:0d:81:20:
b1:21:ab:ea:bd:27:f6:ad:b7:f2:b8:0c:38:0f:73:24:0f:56:
73:5c:55:41:ce:3c:c5:ab:4f:ee:d0:00:83:ce:a0:18:8a:85:
f7:ea:a6:c6:a2:ad:bc:0c:b1:5e:99:ad:d3:08:08:8b:f9:9e:
28:a6:e0:ab:c8:88:27:72:6b:e6:56:f8:3d:ec:b3:6a:f0:da:
2b:38:9f:38:be:2e:13:5d:58:8f:a5:fa:f4:c1:05:1f:cb:59:
3e:4e:a5:bf:c1:ee:f8:c9:58:6b:27:dd:da:dd:bd:b8:dd:99:
9d:1b:f4:a1:e1:bd:7b:d3:7a:d7:6b:d8:78:af:9c:2f:7d:ae:
68:23:e9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:03 2025 by rpki-client