Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier: jUfugQConssf7zIV97iOnT8kJY9U647eGhbNJjzWXGg=
Subject key identifier: 51:81:FC:C1:7D:82:AF:A5:C4:6B:02:7F:A4:65:F8:B3:8E:DB:1C:33
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer: /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial: 0194BD17BF2C2A6614F6330EAD66B07B6D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: ly9wLPtSfuMXSoog+gBCAZReIEFszWO9b8n3WC7fBFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bf:2c:2a:66:14:f6:33:0e:ad:66:b0:7b:6d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=5181fcc17d82afa5c46b027fa465f8b38edb1c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d4:75:02:5e:72:44:97:0f:a1:2c:33:05:ed:
b1:35:dc:72:3e:4d:88:04:e3:5d:47:b9:18:d1:d7:
9e:d6:be:cb:04:cf:df:76:be:b4:1f:ca:df:9a:4e:
35:c0:9c:15:6a:d2:29:c7:a5:a9:59:28:6f:b0:ba:
b0:b5:45:ca:be:ef:5d:09:6a:47:35:be:17:51:52:
14:e9:09:2a:ec:b0:c9:84:76:e1:82:e5:c6:16:00:
91:af:d5:9e:c9:5d:d5:fa:92:e1:21:81:8d:da:bf:
f2:d2:a9:a6:24:6f:48:ec:8d:75:21:43:84:3f:6d:
7c:cb:5a:1a:f1:56:0d:f8:94:72:8b:16:5c:48:78:
0a:fe:cd:f1:e8:c2:21:9a:8c:dd:34:1e:9b:85:1a:
7a:c6:6e:fd:fc:39:35:d0:e5:31:20:c0:d4:2f:0f:
2f:c0:dd:1a:c1:65:c2:31:f7:47:92:c1:0b:b6:c4:
6e:5a:13:bc:e4:43:b4:57:12:45:b1:21:97:55:09:
4b:59:57:e6:74:97:60:83:e0:60:fe:49:39:f7:04:
20:d6:e6:c2:1b:3e:b3:dc:23:d4:a8:40:43:6d:71:
2a:61:98:3b:1a:ca:87:9e:ce:0f:cb:04:e7:84:d4:
ac:51:e6:b7:31:d5:8d:32:08:43:ed:ca:f3:35:fd:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:81:FC:C1:7D:82:AF:A5:C4:6B:02:7F:A4:65:F8:B3:8E:DB:1C:33
X509v3 Authority Key Identifier:
keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5f:05:5c:b2:90:34:2f:fa:0b:e2:42:da:2b:48:f5:91:97:
c6:ee:e1:60:38:df:a7:18:69:1b:cd:0a:ff:69:d0:c2:21:34:
61:5b:63:8d:0b:e5:30:f1:58:82:dd:1d:df:d2:db:e3:ff:ac:
7f:fd:fe:90:5a:a4:e3:39:4f:18:c2:0d:e1:2b:e7:e8:b4:e8:
45:4f:c0:ca:38:16:6f:95:ca:26:80:8c:ec:a1:87:8b:be:f7:
bd:8d:c3:f8:06:e2:60:fd:99:83:47:0c:b7:2f:ee:3f:18:01:
ad:3e:ff:81:63:2f:35:1d:27:fb:ae:a5:bc:70:e0:f6:d2:9e:
62:98:eb:79:24:44:03:76:4c:50:2d:5a:05:81:c7:98:a5:4d:
bc:2d:0d:16:79:20:7e:7d:54:8f:02:67:fc:11:bc:eb:d6:25:
5b:ee:69:0a:e6:f8:e5:ed:23:8c:a7:a1:39:9b:9f:3c:63:12:
01:f1:57:1f:34:bf:eb:26:48:bd:74:47:0e:ff:e2:be:7d:b5:
1f:23:33:84:b5:6d:97:28:a2:7a:90:4d:61:37:62:bc:35:fb:
9f:9b:70:2d:19:3a:10:ea:af:4c:1a:5d:1e:7b:fc:ff:c0:e3:
ce:5d:a9:1d:8f:f4:7b:cd:10:40:f7:7d:b1:95:1c:b8:84:ba:
25:18:27:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:35 2025 by rpki-client