Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: B2+EitPKuEbA88FVFaH8L84/TxwKrcf7m1JjSbTE6Iw=
Subject key identifier: 42:F5:5F:AC:C4:13:C9:FF:F5:1D:B5:86:B7:56:70:2D:04:A4:6D:3E
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 0194BBCDBE898FEA1B2C797D51E445963EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 0B5F
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: sw4mrMkI1oFul3Lg0S5QLZDr75MoKQJ9jcA2L3wXQug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:be:89:8f:ea:1b:2c:79:7d:51:e4:45:96:3e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=42f55facc413c9fff51db586b756702d04a46d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:19:96:bc:01:a9:bb:ae:b1:3a:ee:4b:46:
81:01:64:c4:97:4c:dd:f4:ba:9a:c7:77:fd:3d:41:
fb:7e:1c:10:6c:0d:22:eb:19:48:11:a3:0a:aa:1f:
4c:af:88:62:b2:dd:f8:0d:57:42:87:e4:d6:a4:39:
7c:f0:b4:dc:af:35:24:91:77:cb:58:6d:e0:54:af:
08:10:95:fe:f7:80:ee:5d:6e:d1:8f:c3:12:66:8e:
83:af:13:e5:ee:81:90:1c:ed:b8:af:30:13:b3:7d:
d9:c4:69:b2:a6:48:8c:ae:cb:ba:0e:79:54:dc:3e:
56:71:15:f3:01:96:04:03:9a:67:08:61:5f:2d:11:
67:9e:c8:04:2c:b8:18:ef:5a:bf:12:1d:5c:11:fc:
8e:c0:d9:db:41:e6:cc:50:49:df:2c:bc:82:39:e3:
3f:68:41:d3:83:02:dd:39:2f:f5:b7:52:81:30:0e:
f5:8b:0d:52:2d:bb:03:58:5c:7e:e2:a8:ed:8c:40:
21:47:33:98:5a:0c:f2:c5:80:9b:4b:c8:e9:03:86:
5e:71:dc:5f:19:91:37:6e:35:56:c4:aa:46:22:7e:
f4:60:5e:74:e2:a5:bb:e5:01:fd:e4:83:58:31:76:
b7:76:2c:02:53:f6:a8:59:61:d1:a5:36:68:b0:7d:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F5:5F:AC:C4:13:C9:FF:F5:1D:B5:86:B7:56:70:2D:04:A4:6D:3E
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b6:94:93:01:35:5c:cf:13:ae:99:a7:86:1d:fe:57:11:4a:
3b:af:4d:9c:4a:ab:95:04:90:fc:64:88:77:ff:87:b5:99:65:
c3:41:16:8e:c4:85:9c:e2:90:f7:50:b5:c3:b1:38:7b:b4:8f:
d8:35:73:d3:c0:ed:83:80:b7:1f:67:33:b0:bd:74:81:49:7e:
c8:b6:c3:56:71:85:30:d4:d0:c5:24:08:b7:08:03:25:75:81:
a1:70:f0:e7:02:74:55:b8:db:0c:a4:ae:a4:4f:fa:1d:e6:62:
c5:a7:e0:97:85:39:7e:06:96:b2:3b:ac:d1:4e:fc:1a:09:64:
62:0c:0b:23:80:eb:c9:e8:88:f4:d3:d2:ff:21:4b:d6:04:6b:
e6:04:ba:e1:87:a4:60:7a:8c:8f:fa:b8:6a:e1:66:f8:c3:18:
57:ee:10:f4:ed:d4:d3:32:73:38:34:70:28:96:bb:aa:f6:03:
f8:06:77:76:fc:bb:54:f6:5e:a7:b2:0e:d0:6a:1a:63:56:e3:
28:b3:03:1f:7b:aa:41:eb:f2:4f:1d:9d:8d:6b:ac:ba:4e:74:
b2:ff:13:f8:15:84:24:04:70:ae:d6:5c:9c:d3:21:8a:4c:72:
8e:c9:ae:67:52:74:92:6b:30:a6:a3:9c:90:34:f3:3b:d7:57:
73:dc:91:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:12 2025 by rpki-client