Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: FutJq9MWAZu6HEj/yT/PNUj04U7sVfsLYLpZ8hOc0rY=
Subject key identifier: C1:AF:68:3D:B5:34:29:E8:3A:25:51:50:54:39:E4:C7:7D:C6:E4:ED
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 0194BCA9A837BC6F053E8B9FDF66015F8B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: Q/4dNdx175/DUp6iWbvToTv80fnej7/IoFblnV/Cgvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a8:37:bc:6f:05:3e:8b:9f:df:66:01:5f:8b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=c1af683db53429e83a2551505439e4c77dc6e4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:1b:9d:3c:ec:2e:42:f5:13:54:e2:5b:d7:
d5:87:a2:20:1e:c4:7c:7b:a3:5e:af:e7:92:76:12:
ac:85:0b:90:84:11:d7:08:d1:f2:ad:5f:a9:43:3b:
12:47:2b:ba:17:74:66:97:5d:38:eb:d3:9a:08:ca:
97:7a:81:6d:a8:d8:bc:b7:2c:4f:98:93:62:ea:32:
ef:08:a2:df:0a:77:46:96:50:30:5f:d2:61:00:44:
c5:b1:5c:2d:f6:60:03:20:1f:10:28:34:a0:08:ad:
39:b9:50:c8:3f:ee:6b:54:c4:2a:bd:9e:c2:87:ee:
bd:8d:08:79:df:b0:e1:ce:ed:f6:a7:b1:a3:9a:87:
f9:22:c2:55:1b:76:99:73:df:6f:0e:03:74:cc:e0:
c8:1a:62:29:4a:b1:c9:7b:28:ef:69:6c:3a:b0:cb:
52:96:5e:ad:f2:85:ea:bf:84:6b:29:ce:be:2e:21:
8f:95:e0:8f:9a:a0:a7:db:d8:8d:b2:7b:e4:aa:63:
69:ba:60:86:aa:0d:ea:a3:30:f2:31:56:e8:2d:86:
70:7b:4c:3a:39:13:7c:33:f1:3a:1c:db:99:26:90:
bd:2a:11:68:2b:34:69:8e:23:b0:b2:df:ed:67:90:
d9:97:0c:c7:ff:27:75:e8:50:1a:90:b9:77:59:55:
11:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:68:3D:B5:34:29:E8:3A:25:51:50:54:39:E4:C7:7D:C6:E4:ED
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:55:d8:cd:6f:82:fb:66:aa:a1:3d:09:53:27:1e:cf:fa:f0:
9f:c5:c9:eb:6c:ee:b6:d5:2e:e0:56:54:a8:d6:41:42:25:6b:
34:91:d9:2f:64:bc:6a:fa:85:42:b0:9c:e6:8c:d7:12:5c:38:
ce:bc:f8:6c:42:b3:d4:99:7c:25:52:b6:5d:cf:d4:ce:b5:82:
3a:9b:be:01:67:17:ba:f4:fd:db:3c:9c:9d:5b:93:a7:fc:38:
de:c1:f4:3e:4d:71:b7:4c:bf:5d:04:53:fd:9d:42:60:ab:c2:
1a:8e:24:0a:b7:b6:81:da:dd:36:e6:ea:99:9e:3b:ee:c4:06:
aa:83:8f:12:b9:5e:9c:db:cb:59:42:d5:c1:80:18:3d:32:cf:
ab:c8:54:72:03:58:c0:00:f6:f2:35:84:e0:79:a7:71:cc:e3:
e3:4f:cc:6a:04:e4:69:3a:3a:01:3d:e7:45:d2:65:22:3a:67:
d5:59:cf:b1:fe:56:9d:2c:cb:a3:26:06:66:41:39:5c:17:7f:
5c:19:1d:55:21:67:e2:77:ed:fa:55:5b:e9:02:0e:12:6b:0f:
08:2b:8d:3b:0b:ef:1a:4a:60:ee:21:a1:90:49:57:c1:89:93:
0d:48:1a:5b:7d:b4:05:10:90:d2:13:a9:60:ce:46:57:af:c5:
68:6f:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:49 2025 by rpki-client