Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: JCSu/U9wg0AWxe9WB23npituw4oq4Kboee5Q9l+3CFI=
Subject key identifier: 2E:D4:AB:23:A4:3F:8F:60:24:EE:1E:30:1B:B1:D5:40:2D:4E:8D:FD
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 0194BD178E51B1AAE050D1D528CE232C09A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 0131
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: 86Iwfi9tWo71+iFD0hYZ13XJYDSLlpEkRIj6Vn/Xj5k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8e:51:b1:aa:e0:50:d1:d5:28:ce:23:2c:09:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=2ed4ab23a43f8f6024ee1e301bb1d5402d4e8dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:b3:97:82:af:cc:95:17:c3:94:07:d6:43:
e3:d7:cd:28:26:85:8f:69:58:99:31:59:70:95:02:
35:07:9e:c2:7b:ab:7c:c8:68:bc:47:48:b7:10:3f:
c2:dd:69:f8:4f:6c:54:d5:80:1f:3c:86:f3:8e:0b:
1c:7f:b8:d9:2a:f6:24:7d:93:1c:d7:27:a0:d4:01:
30:50:83:00:8e:36:9a:03:49:d4:70:04:11:8c:31:
30:37:9e:e3:8b:bd:23:e2:8c:ae:b7:a9:31:c9:b0:
40:ba:2c:8b:09:ca:b9:31:f0:72:83:8d:1e:f1:58:
d8:41:f8:78:9b:b9:e7:c5:11:94:8d:98:a1:6f:7e:
dd:c6:e8:bf:bf:ff:7b:70:08:f1:80:07:d4:d0:55:
1a:c1:04:8d:c8:7f:4b:37:01:67:09:1f:24:c5:01:
00:0c:3b:af:40:62:34:fa:e5:c9:6f:97:d4:e1:5c:
fd:34:d1:70:12:cd:4b:8b:3d:f4:e1:81:32:42:c3:
82:9e:3d:e6:d8:7f:0d:83:00:97:99:00:66:2f:8b:
da:99:63:1c:65:54:ab:ab:b2:52:f0:dd:ff:1c:04:
3f:2b:28:7c:35:64:0e:f6:a8:ab:a2:41:e5:ec:57:
26:7a:7c:b1:aa:32:05:ce:e6:a2:b7:87:a5:54:2c:
4d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D4:AB:23:A4:3F:8F:60:24:EE:1E:30:1B:B1:D5:40:2D:4E:8D:FD
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:be:0f:83:f3:7d:e7:f3:42:65:98:e9:46:c6:85:3b:1c:40:
0a:7d:86:97:17:c1:ec:b3:dc:d2:45:d2:b6:36:89:c5:47:e8:
ee:47:e4:be:a4:1f:06:10:9a:30:7c:da:ab:70:b2:6d:0e:9c:
6e:65:31:d1:30:67:a3:66:0b:67:2a:9e:b5:7d:90:ae:02:74:
fb:c2:38:6b:35:36:cc:e4:e5:fe:18:84:9a:45:5b:7b:2e:3d:
fd:32:7a:b1:54:35:c6:58:19:d3:4a:f2:7c:eb:dc:3a:35:27:
31:d0:77:04:1e:53:9a:bd:73:b5:82:38:9f:cb:fc:06:c2:51:
b4:4c:da:01:1b:17:73:9c:4e:ff:be:94:a2:88:bc:6f:6d:ed:
33:57:58:5e:5d:b9:cb:49:1c:a4:b3:35:22:5c:2a:78:38:fc:
92:1d:e6:3f:ca:73:29:6e:06:ec:8f:ed:95:7f:94:4a:77:cb:
b8:8e:d7:22:cc:96:a4:57:0f:6f:a3:e3:03:a6:09:45:41:d4:
f1:fb:df:8d:6b:94:b9:61:3d:bc:11:91:6d:03:e4:e1:b2:6c:
2f:b5:d4:0f:0c:08:00:1e:f5:de:24:e7:fa:76:3e:bc:33:91:
0f:fb:1b:b7:a3:73:f0:7b:06:83:ab:38:62:b8:a9:6a:3a:05:
fa:49:02:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:11 2025 by rpki-client