Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: jdRYPgSfzWjSEcJI0FaL5GlTZM3gONpXwlyITzLrcbw=
Subject key identifier: 2C:D8:81:70:FE:AC:8F:42:63:E5:46:D7:82:7D:02:FC:B9:6F:22:38
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 0194BD17D5D6E997B2F96F9EA3E01243B68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: IY1HEdrsealj2Pd1NoMLLeajGjqjrYnnlGxP/qxAQ00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d5:d6:e9:97:b2:f9:6f:9e:a3:e0:12:43:b6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=2cd88170feac8f4263e546d7827d02fcb96f2238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:62:1b:ea:32:d7:5e:21:20:99:6d:bd:da:
60:05:4b:49:b8:56:4d:c2:03:1c:9d:47:40:24:7f:
4a:92:1b:b3:47:00:15:42:bc:65:41:c0:54:62:79:
d1:6f:7f:10:cb:ff:90:d5:7a:56:40:c1:71:c8:f0:
f5:0e:6f:81:4f:de:8b:6a:ba:16:13:95:23:d6:e8:
bb:25:03:af:54:5a:8f:fa:7f:03:ad:ef:77:ed:0b:
9e:f9:52:1f:3f:89:1e:6c:7d:6d:54:0d:0f:4f:7b:
72:03:cc:a9:c9:e6:37:4a:9c:47:65:2b:56:72:ef:
2f:7e:92:25:2b:13:01:dc:60:a4:39:d6:50:42:84:
32:05:67:0d:87:ca:75:20:1a:57:2d:97:82:df:bf:
eb:08:5e:f9:81:9e:cb:55:a6:39:d7:3b:07:2f:f8:
fe:8c:75:2b:e3:cc:72:18:0a:f7:6e:2e:fd:65:2a:
35:cb:7a:37:00:07:ab:0b:3c:5e:cd:a0:21:ec:a6:
be:10:0c:dc:83:f2:3a:c6:f7:49:02:b3:5e:ec:b3:
d6:8f:e4:bc:85:53:98:51:07:04:81:c7:89:c8:7b:
2b:e6:1f:ad:41:23:40:40:75:39:c8:0f:74:7e:35:
25:9d:9d:05:a7:a2:bf:5e:1b:2c:ba:5c:fe:79:e4:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D8:81:70:FE:AC:8F:42:63:E5:46:D7:82:7D:02:FC:B9:6F:22:38
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:85:0a:da:dc:da:bc:dc:19:0b:9c:4c:7e:84:73:ab:27:ae:
25:09:f1:3b:a3:f0:ec:9b:66:09:a0:4a:1a:9a:06:f9:e9:f3:
ce:a7:d4:81:4a:89:57:d1:26:84:65:ba:9c:9a:26:a4:1f:72:
11:00:70:1b:5c:f2:50:ac:f4:f6:0c:ca:cf:a0:7e:c3:9b:b7:
2c:01:c7:bb:d5:2c:51:34:8f:ea:7c:38:2d:33:bc:02:98:a8:
2a:6d:9b:bd:87:80:4e:c8:6f:10:b5:79:49:6a:b8:d9:5c:f2:
55:1d:64:93:94:68:4f:1b:12:16:57:be:29:af:36:85:96:56:
11:14:98:ee:be:c5:5b:36:f2:06:25:eb:05:f6:49:05:e9:fc:
66:45:c3:c8:e5:bf:50:e0:48:a7:a1:f6:31:19:d8:cf:9c:13:
e3:b2:90:a5:3c:10:b3:05:e3:0c:0e:85:08:99:22:fc:b1:ba:
8a:85:c4:1f:0d:96:f2:d8:29:54:64:1e:ff:c1:f1:fb:b6:37:
b7:cb:6f:78:fc:8f:b7:f7:c1:f4:66:98:45:54:64:1a:31:62:
a9:b1:2f:0b:5d:ec:67:37:2b:ab:0c:75:d2:ec:61:37:df:90:
4e:4c:14:d3:10:e3:ab:fd:64:a5:ea:1d:34:d7:73:31:7e:02:
2f:63:13:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:11 2025 by rpki-client