Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File: _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier: zHNwNEtmI6mbzVF5J8KpFbHPkcB5Q6Bi/y4QxllheGk=
Subject key identifier: 88:57:C4:BE:5E:B5:8F:AE:5D:0F:71:B1:FC:C6:7A:E5:57:20:E1:AD
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer: /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial: 0194BCA9A5F6160AD7C1475045F1F52E902A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number: 059D
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: L9A0UecfbSOBkVwY2CMTX+IxwlHKODWAZqsMfraTToI=)
2: wbsu-F9aDLpOh1E-iGGerHKMETE.roa (hash: 4WuiCYXkI7bOEQ/qzC3UfWfQ5q7CLtdWh5T4lSpp9Nw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a5:f6:16:0a:d7:c1:47:50:45:f1:f5:2e:90:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=8857c4be5eb58fae5d0f71b1fcc67ae55720e1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:63:0c:8f:f1:5a:e9:e1:f3:8f:6f:50:c1:
20:70:c0:d1:7e:66:08:7f:1e:a7:cd:50:36:1f:b4:
b3:92:5e:f7:d8:ef:d8:45:10:37:e4:41:35:06:95:
b9:24:4e:56:c4:9c:5e:f5:c6:2c:50:28:24:c8:cb:
21:c4:75:07:ec:7c:06:6f:1c:d0:8e:10:19:ff:58:
e9:10:a6:54:e2:e6:4e:11:96:f9:0c:2b:70:30:86:
63:c5:4a:3e:d8:ea:ca:46:b4:84:db:80:a9:9e:1e:
43:8e:c5:29:99:29:cb:0a:c6:54:d0:b2:71:1c:db:
f6:5b:c4:ce:ec:2c:17:82:b4:d5:b4:3b:1c:bc:ed:
91:d2:a0:dd:57:64:d1:26:31:b7:60:36:9e:97:6e:
33:49:44:18:71:1a:87:32:83:46:0c:3f:e8:39:d9:
6e:4e:2a:52:89:02:f1:6a:dc:dd:6f:df:b7:90:cf:
ee:40:57:60:d1:33:17:56:d2:56:c0:40:d7:8b:3e:
79:1b:a8:73:fb:20:1d:c6:32:a3:d5:66:61:04:ce:
98:7f:cd:6e:3e:bf:0c:54:9b:45:d8:8e:8e:12:a3:
1e:21:a1:50:c5:47:1d:6d:43:2a:e9:7b:20:c0:82:
cd:0b:32:4b:ad:f8:66:e8:2f:1e:50:df:ea:7e:72:
ad:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:57:C4:BE:5E:B5:8F:AE:5D:0F:71:B1:FC:C6:7A:E5:57:20:E1:AD
X509v3 Authority Key Identifier:
keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:83:ad:6e:3c:76:1b:55:47:a4:0d:93:a8:24:ee:80:b2:f7:
23:ac:73:6a:04:f5:c8:aa:ea:92:a7:75:2d:79:e7:e3:12:6b:
f7:b4:db:aa:15:66:f5:a3:48:7a:42:0d:f9:ce:98:9d:33:2f:
98:a3:c5:b3:7a:17:10:ad:c3:22:72:64:d7:f4:8e:56:da:5f:
8c:93:f0:11:4b:be:23:97:78:58:d4:9e:41:da:5a:43:e9:19:
53:2a:a7:34:fc:0e:8b:d9:b7:60:0b:1c:3d:aa:44:56:eb:ee:
e2:ca:31:f2:04:b2:94:c2:76:1e:44:eb:0f:bf:d6:5c:11:9a:
d8:d3:c3:0f:b1:e7:d3:77:38:9b:da:fd:4d:90:6f:78:fd:fb:
02:6c:22:65:0c:d7:e9:e2:ec:17:d3:54:0c:6f:bf:2c:b2:56:
71:8d:72:86:cf:39:57:30:9c:67:eb:d5:b6:3f:c2:ab:4d:c7:
08:d7:ba:58:c7:c2:41:0d:1e:34:03:f3:cc:69:d8:c1:e0:a5:
32:9e:35:31:4d:d2:b8:21:c0:9d:f5:f3:aa:80:16:46:af:70:
08:3c:5f:c9:42:79:92:83:99:30:fe:63:76:dd:6e:8f:e1:3c:
b4:aa:4c:a6:48:a7:f9:ed:53:d4:48:da:ee:f3:89:2b:68:00:
b6:17:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:34 2025 by rpki-client