Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
File: fqigEMxtfJMg4BLqHR424KdhwTg.mft (raw, json)
Hash identifier: hN1hpgM6GWow29wI5E9H/iEnqySkXbztnd9JKen5brw=
Subject key identifier: C3:8E:33:EF:97:0F:15:46:F0:F3:05:E8:6D:91:EA:A1:F8:12:88:22
Authority key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
Certificate issuer: /CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Certificate serial: 0194BC72DC251CC850D283BC71409035F582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
Manifest number: 0409
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: fqigEMxtfJMg4BLqHR424KdhwTg.crl (hash: YNECxvKBZww7JAPLXUC1NTrpEHbQYO3r2Q8DHwk5m+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dc:25:1c:c8:50:d2:83:bc:71:40:90:35:f5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=c38e33ef970f1546f0f305e86d91eaa1f8128822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:4e:99:f5:a2:fd:9e:bf:e1:56:6c:c6:80:
ab:79:9b:32:e9:4b:54:a2:f4:5d:42:2e:54:3a:b5:
03:fd:a3:41:ae:e7:d6:b3:81:a0:b2:ef:73:28:03:
8b:af:f6:e1:3c:65:22:55:cc:29:eb:3d:dc:88:ac:
78:9a:c1:2f:9d:dc:89:2a:9d:db:0c:0b:6e:4c:f9:
fc:e4:cb:a4:04:b8:19:37:c2:58:c4:f3:7a:cf:2b:
7e:ae:37:56:3a:ac:40:df:3f:ad:c6:e8:0f:d7:ae:
b2:a5:ce:7e:39:f1:79:20:55:0e:ad:87:a8:4d:27:
92:68:75:5b:2f:b6:a6:a1:e1:f6:56:c3:af:a5:52:
52:1d:bc:05:ca:b8:0f:f3:d9:aa:24:92:3c:cc:8f:
e6:d2:c4:a9:0c:99:f6:bf:bb:2e:fe:83:03:0f:94:
15:92:0f:fd:96:70:7d:d5:aa:d6:3f:ef:59:21:4f:
6c:97:df:a8:f2:40:16:07:88:db:54:12:a7:45:a1:
69:34:0a:b9:c5:54:bd:92:4d:7a:a5:cf:24:bd:42:
2c:5b:13:b6:a3:09:e9:a9:8c:65:ce:21:ec:69:d1:
f9:51:dd:0b:cb:3d:f6:a1:bc:c2:39:7c:1a:82:8a:
3e:06:fd:b2:c1:d3:10:25:2d:b6:42:95:54:9b:6a:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:33:EF:97:0F:15:46:F0:F3:05:E8:6D:91:EA:A1:F8:12:88:22
X509v3 Authority Key Identifier:
keyid:7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:95:14:af:f6:58:5c:12:50:55:a0:55:b3:08:8f:43:0c:40:
9c:77:77:25:80:2b:e7:0d:b0:80:6f:a1:74:d7:36:8d:2e:23:
34:88:3c:cf:7c:e8:a5:98:f5:b0:62:51:de:61:1d:51:54:7c:
09:e7:36:03:80:34:c6:3c:39:cc:f3:0b:4b:05:4d:e7:a0:63:
c0:35:18:06:7f:ad:30:d3:55:ae:54:b8:39:74:8d:3d:ae:cb:
b2:a7:b3:04:4e:54:13:aa:15:9a:9b:52:5a:76:5b:b3:53:47:
6f:5d:c8:53:28:ad:09:82:d0:e6:ef:73:f0:ec:6a:66:c5:2e:
0d:c8:14:58:4b:f4:65:12:25:23:f0:8e:98:ba:52:1a:94:32:
fe:de:57:80:a6:e2:7c:97:ec:03:5c:af:66:6a:15:9c:91:1e:
14:52:fb:75:0c:7b:e0:88:4a:3d:3d:12:0a:3f:35:52:6d:62:
95:eb:3b:d2:a2:e9:5e:c2:c7:b2:b3:8f:49:d6:1c:8e:85:8a:
d1:0b:7a:3b:55:37:c5:cf:7e:02:c4:7b:c3:85:aa:d3:fe:0d:
ae:41:11:64:f5:d6:b7:da:04:c1:5c:9f:5b:95:3f:86:f7:f6:
21:a4:49:20:7d:df:6d:21:fb:00:57:b1:43:7e:3d:5d:f4:cc:
0b:0d:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:31:13 2025 by rpki-client