Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: YiAsYvCk7NOGJPAFj1cWOaxCnuoo8WQ+ch8gM5XJyYk=
Subject key identifier: B9:F7:59:EF:31:F6:AE:6C:CB:84:61:82:50:A3:28:E7:F4:3D:89:CD
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 0194BBCED9842C77EBE09E276079D6E4EA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: aeUVfqYhRRPEWItRQUZaLpRACTlYWWs+6sDBm/cEOxw=)
2: Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa (hash: sx9n+qGnhP0I6sp10kmNLeGSUg0Fv6GPJl7WmFjWTnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d9:84:2c:77:eb:e0:9e:27:60:79:d6:e4:ea:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=b9f759ef31f6ae6ccb84618250a328e7f43d89cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:3b:a8:b7:0a:ce:93:28:39:55:f0:1f:5f:
d1:59:77:57:4f:93:1a:c9:01:3b:74:b9:92:97:b7:
b4:b5:10:64:7d:3f:6e:35:9e:68:a8:d7:2c:6a:79:
c0:be:8d:7d:33:aa:48:87:b9:cb:99:9d:31:d8:97:
f5:04:8f:46:25:bc:58:c6:35:87:4f:81:cf:00:ed:
ba:91:a9:5c:b4:78:52:61:6f:1d:19:06:4a:81:c4:
2a:80:fa:6d:93:2b:fa:18:00:d1:87:06:a5:b5:b2:
50:ed:c8:15:1a:c9:cf:e7:67:b2:a5:7b:4b:10:da:
1a:a6:e9:cb:a8:6d:fa:b4:7c:32:6a:db:b3:0e:31:
84:6a:27:f2:6b:bd:97:d3:ee:1a:db:55:0d:fa:d1:
fe:01:cf:f4:ba:d0:6c:da:fe:d9:38:a9:43:e1:48:
ee:34:6e:ff:89:0a:48:d8:9b:99:e5:7d:1a:06:0a:
af:e0:07:9d:1e:8e:38:ec:7a:e0:91:27:ba:19:e5:
c7:1f:86:ed:46:8e:3a:f4:89:5f:81:21:f9:76:48:
6f:82:bf:cc:35:20:e7:4b:0b:18:08:f3:39:dc:64:
7b:33:ba:62:3f:d8:d2:e4:1b:c2:6a:9b:a6:d2:d0:
9b:4c:2c:41:a1:42:ee:03:40:bf:9c:9d:5b:76:88:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F7:59:EF:31:F6:AE:6C:CB:84:61:82:50:A3:28:E7:F4:3D:89:CD
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cd:cc:d2:c6:f4:c9:18:b6:25:2e:18:23:e3:20:2f:12:25:
40:28:6f:7d:5b:09:30:47:cb:05:ce:46:d3:0d:6d:ec:c0:8d:
f8:6f:ff:fb:59:17:75:49:78:5a:72:53:70:21:a6:f2:b3:8e:
71:f0:80:ba:00:ec:b1:86:e3:32:48:6d:98:25:2c:79:a1:95:
6a:5f:7b:95:28:2f:ac:3e:e8:4b:3a:fe:85:20:9a:8c:f3:8d:
d9:04:4e:23:32:9d:48:31:24:a5:1e:e0:df:24:c2:1c:ec:ef:
64:65:10:a5:8b:85:b9:ee:98:ab:f5:0f:09:7d:2c:68:78:c7:
87:32:5f:3f:fa:9a:f6:6f:57:d0:99:a7:73:f1:c7:b7:d9:48:
55:4d:bb:c4:cc:47:38:de:c8:17:cc:31:29:92:ed:2f:5d:49:
7b:c3:e3:54:f6:3e:13:c4:b6:86:84:ac:0d:b6:04:39:7a:17:
ee:4b:7f:ea:f9:a6:17:bb:7a:d1:59:a5:97:57:df:fb:68:04:
aa:9a:de:74:1b:ae:7b:a0:69:26:ff:33:c2:b3:08:cd:aa:87:
43:ce:a7:2c:10:ff:1c:82:6b:ce:71:e1:19:15:a9:fe:24:08:
d8:98:85:bc:7a:c5:b0:76:e6:83:dd:28:49:b7:e9:e1:0a:61:
d9:65:f8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:16 2025 by rpki-client