Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: k8tkKYBT9aNsF+pjGwoK8uZRavljbwClPhPE4k0M36o=
Subject key identifier: 94:40:B7:08:9A:F4:AE:35:E1:41:26:C3:ED:E0:68:D4:DC:64:3B:06
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 0194BC3C2FB8B4B5A061DEE3FD5772A59249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: Pr9RN5XTU/dHAk3q+yZYgusSNwNWC9LQsnncYIhMwSI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2f:b8:b4:b5:a0:61:de:e3:fd:57:72:a5:92:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=9440b7089af4ae35e14126c3ede068d4dc643b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:bd:2c:76:7e:4b:e8:a6:77:1c:87:bf:ea:
2d:1e:6b:25:fd:f8:2b:b5:78:84:a3:ef:5a:77:12:
10:f9:d7:0e:1a:7d:f4:52:8a:2f:da:c1:56:4d:97:
f8:71:ba:62:d6:5f:02:d7:33:d2:81:c0:70:70:1a:
e9:20:82:a9:4a:c4:aa:97:6d:5f:ce:e1:b1:42:cb:
a8:db:36:a9:32:10:a6:1f:20:82:6f:20:77:49:cd:
a9:d2:9d:e6:b0:bd:d0:e7:c2:eb:18:5a:4c:76:a1:
09:bc:f6:a7:07:a5:cf:8b:0f:65:02:53:a5:f3:bb:
0b:b1:0b:e4:56:85:56:45:d4:38:e9:d6:d1:0b:71:
66:b9:12:21:67:24:23:58:84:38:68:86:ef:a0:f5:
6a:8f:d2:c7:88:10:09:d7:fa:53:fc:c7:67:b1:cc:
dc:a9:c2:67:29:ad:00:2f:f6:a2:c6:11:bd:96:4b:
eb:9a:90:f9:75:1c:a5:4d:0a:fd:46:8c:fb:80:00:
ae:c3:78:b4:4a:6f:70:70:89:ca:97:dd:43:df:4c:
62:a8:5a:f0:24:aa:01:8e:c3:5d:4f:a3:a6:c9:b7:
5b:e0:84:67:05:4d:49:99:27:e7:5e:f7:09:cc:e0:
64:04:f7:aa:4d:71:6a:ce:e8:d7:8b:90:7e:2f:89:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:40:B7:08:9A:F4:AE:35:E1:41:26:C3:ED:E0:68:D4:DC:64:3B:06
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a6:4c:22:40:cd:86:b0:2d:45:52:ca:78:3b:ab:9e:90:c6:
cb:81:62:67:4c:31:18:42:e8:9a:9c:0c:e6:3a:68:04:98:1e:
00:8a:73:6b:70:2f:2a:9f:83:b6:7f:4f:1c:39:9e:82:34:a1:
66:0c:76:b8:c5:3d:b9:5d:41:95:96:ea:08:0f:ad:47:72:a3:
28:6e:9b:d6:c0:b0:f2:6d:e6:eb:05:40:59:86:98:86:29:04:
50:ef:5b:88:18:b6:66:f3:74:ad:6a:61:ff:3e:b4:03:2b:73:
dd:7c:0d:b3:58:2f:65:77:6b:79:be:de:b9:57:c6:7a:0c:bf:
e9:f4:c4:87:46:ae:b2:55:ee:35:01:9a:21:ab:65:71:a8:11:
c2:86:31:4f:1f:2d:11:1f:63:2b:69:7b:f7:92:62:a9:80:85:
e9:fa:57:27:7e:dd:98:b8:77:3e:b1:bb:36:22:ad:53:c9:38:
79:d6:ea:57:c0:3d:2e:d6:e2:f3:62:e2:b1:b6:04:39:5b:4b:
72:c4:5d:6e:9b:ea:e7:31:23:60:3a:69:8d:44:24:7c:9e:78:
aa:a8:7f:a9:a0:e6:43:9c:11:73:a1:ef:99:34:22:bc:85:5e:
25:28:fd:54:3e:e5:8c:a1:0f:67:12:23:2b:82:28:80:ae:86:
30:f3:fd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:41 2025 by rpki-client