Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier: uV6V855QXiAURfrYHIbdBDqlBzrvxed/OArcP7JFf04=
Subject key identifier: 28:80:B0:56:C7:E2:87:F8:12:4F:52:FC:EA:B3:02:C2:2C:BE:CE:31
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial: 0194BD1783BFD5C43C8539635648FA3641E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number: 0CBC
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: YQ8ELOgLDVWQjwDB5nVeVVYvm1jLSSkkP7m+jp6L0Bg=)
2: cOp1cqfBELUzDJ5OCVCcFEeZSnw.roa (hash: TeUirEuTA43EYVzOUWEt62Nw9bA/6GjvRc1N3Wwsl64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:83:bf:d5:c4:3c:85:39:63:56:48:fa:36:41:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=2880b056c7e287f8124f52fceab302c22cbece31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ff:26:df:86:a8:22:0a:37:b2:a3:1b:1e:ef:
c6:50:12:fa:57:8b:29:d5:b3:6b:a4:fd:82:63:d8:
23:c9:6c:c3:8d:34:7c:b8:f4:be:ef:b1:10:09:df:
10:ce:d4:67:c9:fd:6a:2c:17:54:4c:f1:91:c3:51:
ba:5c:94:4e:35:58:7e:55:e5:b5:49:0c:1e:6a:38:
e3:05:be:50:43:8e:54:4b:a7:3b:6a:bd:9f:bc:e0:
f1:e4:3d:c3:fd:f8:e4:14:72:07:ba:82:75:ad:5b:
e1:ab:cb:70:36:fe:fe:79:3d:8f:01:9d:ae:2c:a0:
c6:2c:2c:0e:73:a5:7c:bb:a6:6e:b3:83:c8:92:e4:
23:92:13:b6:3f:1a:2e:43:9b:ea:cc:07:da:b7:ec:
5b:ce:e0:02:89:6e:3c:f9:12:6d:af:ca:49:d8:b0:
64:88:42:14:57:9d:ac:26:f4:f2:fc:b8:88:32:dc:
aa:f4:f1:98:62:ff:ad:bb:1c:89:db:b4:59:1c:b6:
c9:88:8c:90:c4:7e:72:bb:3e:a0:7b:ad:d0:3c:59:
b2:b3:46:93:19:b0:33:31:37:2f:9b:47:56:fa:de:
6d:f7:6a:37:f6:e0:50:74:04:e6:61:03:49:a0:63:
00:7f:01:18:9c:5e:4e:65:59:7b:77:1e:86:79:1c:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:B0:56:C7:E2:87:F8:12:4F:52:FC:EA:B3:02:C2:2C:BE:CE:31
X509v3 Authority Key Identifier:
keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6a:39:00:9a:4e:6f:cf:a7:26:52:ae:5e:d5:a3:67:6f:84:
2d:21:d5:39:40:72:d9:0d:a0:5a:83:27:5f:a4:8d:21:2b:5c:
60:be:8b:bf:a3:ed:0e:8f:0b:1f:fc:6d:d3:7f:65:f7:cf:7a:
14:24:9a:05:af:f4:e6:27:a8:51:e9:ec:f2:46:d6:8b:5c:d9:
d4:15:ce:5f:a4:57:0d:24:e9:3d:96:cf:33:a8:16:41:ea:19:
14:ab:6f:42:2d:dd:4a:a7:ef:41:02:09:2a:71:1b:98:2e:53:
f4:dd:44:4c:c6:9c:2d:dc:7d:7b:3a:4a:6f:d5:4d:e9:02:75:
1c:0e:b6:b6:7a:f3:23:32:a3:b7:6a:f5:48:8d:75:70:e6:8f:
9c:e7:62:7e:37:f5:ac:03:f3:2f:7e:9c:45:b3:e5:f5:f8:6f:
44:e2:34:c6:95:88:4d:60:1c:ee:12:45:e7:6e:9a:ba:3a:32:
bb:29:ec:a0:13:33:60:2d:30:08:7c:8c:aa:cc:c5:91:a1:30:
11:48:15:c6:cb:ff:b1:0e:1a:38:bf:40:d1:f5:b1:bd:f1:f6:
18:8b:4b:66:b8:b6:50:de:42:3c:30:9d:fc:04:31:50:42:65:
74:4a:a3:8a:90:0e:55:d7:db:0e:d1:b7:34:57:71:51:91:6a:
f7:7b:07:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:52:22 2025 by rpki-client