Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/87tROvtQTgpc3KysWGRGJw5TqyU.mft
File: 87tROvtQTgpc3KysWGRGJw5TqyU.mft (raw, json)
Hash identifier: GGNRU2ANhf+IY4TJD/+gxUBiozoc55YcbOqHHt7UsGs=
Subject key identifier: 26:BC:C1:EA:7D:16:85:DD:65:FE:65:AE:0C:9C:06:2D:6F:81:94:22
Authority key identifier: F3:BB:51:3A:FB:50:4E:0A:5C:DC:AC:AC:58:64:46:27:0E:53:AB:25
Certificate issuer: /CN=f3bb513afb504e0a5cdcacac586446270e53ab25
Certificate serial: 0194BD8539781D5CEA07AA2046B88D294E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87tROvtQTgpc3KysWGRGJw5TqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/87tROvtQTgpc3KysWGRGJw5TqyU.mft
Manifest number: 013D
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: 87tROvtQTgpc3KysWGRGJw5TqyU.crl (hash: 0vmDEReSoeZNeDok+WXXfkcF/VZuWozPC1q/VP8rNAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:39:78:1d:5c:ea:07:aa:20:46:b8:8d:29:4e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bb513afb504e0a5cdcacac586446270e53ab25
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=26bcc1ea7d1685dd65fe65ae0c9c062d6f819422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:af:a3:bc:d2:20:f0:0c:fe:b6:a4:86:41:
37:44:84:86:76:bb:61:77:84:60:f0:e2:24:a2:61:
8c:23:4b:5f:49:20:ef:0b:e9:55:80:86:a3:cb:88:
2e:ba:7d:6b:71:a8:3e:6e:68:41:f5:50:73:85:38:
d8:6d:07:3d:a8:1f:96:8d:bd:2a:27:9f:c5:1a:c2:
4b:5d:18:4c:27:9e:4f:6b:52:71:dc:0b:29:95:32:
99:95:82:30:04:1e:9b:08:0b:19:0d:46:3d:75:f4:
54:14:37:be:65:11:a3:1f:a6:d0:1c:e1:6b:7a:05:
b0:d7:44:b5:4a:0d:43:d6:5b:2e:e8:f4:54:2b:f4:
5a:4f:8c:10:58:ef:04:81:2b:84:a6:23:50:a0:30:
91:13:7a:13:2c:ac:52:6e:7a:a0:7d:d8:01:af:68:
d8:ad:0e:f0:61:df:a4:8f:b5:68:4b:58:cd:fb:ab:
f2:d2:8b:84:c9:97:d4:1e:58:be:5c:70:db:b7:1d:
56:2b:1c:46:fc:ca:be:62:fc:67:d2:ec:7b:90:97:
04:29:2a:44:10:15:06:be:d8:1a:c6:47:73:40:7e:
1f:44:72:4c:a8:15:c8:b7:5c:e9:36:57:64:ed:e6:
3e:09:85:5d:aa:31:78:cc:8b:a0:fa:9a:4d:3a:80:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BC:C1:EA:7D:16:85:DD:65:FE:65:AE:0C:9C:06:2D:6F:81:94:22
X509v3 Authority Key Identifier:
keyid:F3:BB:51:3A:FB:50:4E:0A:5C:DC:AC:AC:58:64:46:27:0E:53:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87tROvtQTgpc3KysWGRGJw5TqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/87tROvtQTgpc3KysWGRGJw5TqyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/87tROvtQTgpc3KysWGRGJw5TqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:10:c6:ee:db:1e:7b:64:eb:3a:ec:ec:bb:26:83:de:44:cb:
a2:5d:f4:28:e0:02:10:95:6d:7b:d1:16:0f:31:00:5b:b6:1c:
14:7a:33:4c:f0:3a:78:76:47:12:ce:79:4a:da:21:ef:cb:96:
21:df:1e:91:ba:1d:02:ef:34:e7:18:7d:5d:3a:ea:f9:00:ae:
1b:a7:11:a6:19:f7:39:a1:4a:4d:d4:26:62:a6:d2:6d:85:c8:
2c:4b:ed:fe:27:d9:af:01:51:76:3a:58:e3:f9:85:66:8d:9c:
cc:80:f6:63:34:25:f4:d0:d6:f5:5c:d8:4a:14:53:6d:25:c9:
2f:35:39:46:21:71:62:88:3b:9b:c8:dc:f5:98:9e:f5:2b:92:
db:92:02:92:5f:8c:05:c4:2c:8b:40:0a:82:e6:39:0a:ac:b4:
ae:c5:ee:eb:f3:b4:86:c1:7c:01:71:26:b9:c1:35:e8:1f:5c:
f9:30:83:94:13:62:fd:c4:2c:49:74:09:ce:4e:1b:b3:d0:85:
25:ab:50:6c:de:67:d0:a8:bd:5a:45:57:d5:78:bc:65:41:36:
10:f2:8a:a6:63:25:06:93:6b:9b:7c:92:61:bd:98:4c:c9:a7:
27:ba:ca:78:5c:8d:df:c4:2c:8b:a9:de:09:05:ad:fa:cf:13:
c6:ae:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:50 2025 by rpki-client