Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
File: FyROqUT-mGNME2MDjuMdVDVpkmE.mft (raw, json)
Hash identifier: vlhSBbLf5gYCqXa5v5xUQTNtw/IxHt7XEFW++vF73ts=
Subject key identifier: 28:30:2B:77:12:FE:8B:F4:24:78:50:B7:A6:02:52:40:B8:95:EE:01
Authority key identifier: 17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61
Certificate issuer: /CN=17244ea944fe98634c1363038ee31d5435699261
Certificate serial: 0194BCE0C268791C16B9BFCE58ED536F3848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
Manifest number: 1E
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: FyROqUT-mGNME2MDjuMdVDVpkmE.crl (hash: s3VhJkhxZ8A+HgZU1iQB85esqFDXjLcYwRAWD5D2+E0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c2:68:79:1c:16:b9:bf:ce:58:ed:53:6f:38:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17244ea944fe98634c1363038ee31d5435699261
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=28302b7712fe8bf4247850b7a6025240b895ee01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:cb:42:0e:4e:09:34:7b:d7:de:b4:9b:d1:
ee:c1:c2:f8:e9:f0:83:d8:e3:d7:5b:e6:62:4a:2c:
ef:45:c1:eb:7d:fe:66:eb:a6:7f:28:0e:1c:45:9e:
9a:86:56:b2:63:de:fa:91:82:06:f4:9f:14:4c:04:
87:ba:1f:a9:6e:5e:46:aa:90:44:03:82:5e:89:ad:
40:43:16:05:96:68:81:db:74:a3:50:64:f2:7f:3f:
78:65:d6:65:44:1e:52:1f:54:90:b9:b7:76:89:5a:
9d:23:f2:a7:35:14:de:2e:9f:b1:b1:89:1d:1c:ab:
d9:a0:bb:d6:6d:fb:65:5b:c9:4b:74:f7:3e:e2:19:
a3:75:42:36:7d:fb:4c:ae:36:09:39:94:e9:05:05:
95:e1:a5:7c:65:0d:24:35:24:92:91:40:99:b3:da:
48:15:00:05:9a:8b:8d:e9:76:d8:c4:97:c4:3d:1c:
fd:62:57:1d:ab:c3:8f:cc:42:1f:8b:69:48:fb:60:
c2:db:20:3c:08:b6:d8:2e:69:d9:f9:50:f7:24:8a:
58:a5:b3:b6:5a:61:53:ad:95:35:b0:5d:3f:b8:35:
9d:01:6d:2a:ce:f3:35:c2:ff:dd:fe:5f:b5:f4:85:
fa:b1:af:b4:04:6e:81:07:0d:f5:2a:03:18:bd:0a:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:30:2B:77:12:FE:8B:F4:24:78:50:B7:A6:02:52:40:B8:95:EE:01
X509v3 Authority Key Identifier:
keyid:17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:26:80:ba:ce:24:bb:59:f6:b8:67:73:9f:e6:ea:66:ad:02:
c7:62:04:61:8d:ed:8e:77:97:4d:ca:86:d8:63:c3:14:fa:30:
42:10:ec:08:8d:c3:e9:0f:1b:98:24:da:64:8e:49:26:76:93:
6f:41:55:be:f7:f3:8e:da:67:6e:44:49:9d:7b:b3:22:97:cd:
f1:52:89:f0:65:54:87:57:fc:9c:a6:e2:1d:68:db:49:e8:a1:
a7:45:4d:bb:c8:38:8c:47:eb:58:3a:e4:51:0a:38:c9:69:37:
66:61:28:a4:23:79:76:ec:24:ae:7f:b1:e9:f3:9a:c5:3b:5a:
e7:2d:66:3d:62:fc:14:ad:e7:64:8b:74:f4:7c:ca:db:30:28:
8a:9d:99:63:f8:56:31:ef:e3:65:e9:74:2f:0e:af:74:1d:97:
d1:eb:1b:24:00:58:12:11:17:1c:36:db:9e:3a:78:57:0a:0a:
f8:23:48:a8:6b:72:da:0f:08:38:b4:5f:56:a7:86:81:f9:4d:
a6:2f:d3:ce:2e:36:e3:56:56:a2:15:e5:41:97:97:cc:ca:53:
69:3a:93:85:94:ae:4e:f8:80:b9:f5:32:8a:ce:ec:b7:91:b4:
f3:f2:69:d8:05:77:00:0c:0b:52:a5:26:47:50:a5:15:a5:63:
39:58:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:24:49 2025 by rpki-client