Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.mft
File: s1IytLD6jIPU_4wSROhk67yt1os.mft (raw, json)
Hash identifier: j9Yq5QjEe/U387+ylNq4bPQvPMnaG8N9y7gkUJp4XXk=
Subject key identifier: 63:F6:36:D9:A1:52:33:B1:2F:35:74:4B:5C:85:7A:27:1B:D9:84:4C
Authority key identifier: B3:52:32:B4:B0:FA:8C:83:D4:FF:8C:12:44:E8:64:EB:BC:AD:D6:8B
Certificate issuer: /CN=b35232b4b0fa8c83d4ff8c1244e864ebbcadd68b
Certificate serial: 0194BBCDEBD172F3BFDDD135162753B65F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1IytLD6jIPU_4wSROhk67yt1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.mft
Manifest number: 0EA1
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: s1IytLD6jIPU_4wSROhk67yt1os.crl (hash: uvdzKuDsF9fVzv88hBjtzXYFtP09yh5QRfuGPR1njTA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:eb:d1:72:f3:bf:dd:d1:35:16:27:53:b6:5f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35232b4b0fa8c83d4ff8c1244e864ebbcadd68b
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=63f636d9a15233b12f35744b5c857a271bd9844c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:77:a7:52:b5:b7:05:e2:33:8d:c3:0c:d4:
d4:1f:be:96:b1:35:f0:82:99:8a:4f:6d:65:33:fd:
e2:a3:d6:28:1b:82:63:b2:fa:af:ee:54:bb:ad:6e:
d3:9a:74:f7:eb:3d:1f:ff:50:21:c3:5f:91:19:03:
9a:8d:a3:1b:de:ca:17:9c:9e:3f:9c:d0:6b:25:47:
fb:c6:cd:0e:66:39:0d:40:ea:8d:2d:77:9f:49:7a:
69:98:be:66:e5:de:bc:15:24:98:e3:07:d7:12:12:
e4:81:d4:18:70:e5:60:a2:4f:68:6a:56:80:74:df:
b8:18:46:9d:24:33:27:03:f4:60:df:26:3a:7e:e8:
ff:41:a8:54:5e:e6:51:61:2c:14:65:95:38:01:b1:
48:69:77:e5:a9:35:03:5c:eb:7a:b8:97:8a:c9:0d:
0e:58:dd:ab:34:df:cb:cf:7b:fc:c5:04:a9:b4:de:
63:f6:54:b3:37:7c:13:9a:bd:06:65:24:8f:9c:d1:
25:e3:4e:a3:1f:f8:29:3d:eb:f2:69:e0:86:42:98:
26:ca:32:a1:30:d5:65:47:2e:59:cf:cf:e5:8d:fd:
1d:af:75:88:d9:fe:01:bc:ca:68:5f:88:eb:5e:3b:
70:6b:7c:84:70:d7:c7:6f:39:22:23:be:23:8c:22:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F6:36:D9:A1:52:33:B1:2F:35:74:4B:5C:85:7A:27:1B:D9:84:4C
X509v3 Authority Key Identifier:
keyid:B3:52:32:B4:B0:FA:8C:83:D4:FF:8C:12:44:E8:64:EB:BC:AD:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1IytLD6jIPU_4wSROhk67yt1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/s1IytLD6jIPU_4wSROhk67yt1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cd:e6:0e:ca:b0:a3:20:1c:bc:76:6c:8c:2d:d8:20:21:8d:
05:51:a9:df:2c:65:3e:dd:5f:30:63:dc:8a:de:a3:97:20:68:
a3:59:2d:51:c0:fa:04:d7:c2:81:c7:f5:3b:1c:d8:07:ea:b1:
cf:8b:89:19:52:af:44:27:54:23:b9:aa:be:00:1a:29:8e:a4:
60:1b:da:f0:f6:f7:b1:6e:a2:44:f0:ae:39:e6:60:3e:75:da:
bb:21:cb:75:94:2c:c7:52:cb:f3:4b:1f:71:b8:71:ad:17:93:
c1:e5:37:0f:4f:44:ae:9c:d0:5b:8c:17:c5:ad:d1:45:a8:b4:
cf:16:d0:f5:7b:59:84:16:a8:4e:c6:a5:72:ae:09:37:c6:b2:
e8:47:58:eb:56:69:75:0b:00:91:a5:c2:71:c4:cf:07:f0:98:
ff:20:88:dc:b4:17:ab:6f:bb:11:15:0a:c2:c4:39:1d:2c:29:
80:65:19:ee:98:9f:ee:61:43:e9:60:79:7a:75:c0:d5:9f:bf:
71:6b:19:2a:6e:79:63:46:c9:72:7b:ae:eb:cd:38:a4:e0:e9:
09:af:29:e1:a5:2a:97:26:a3:87:b0:cf:3d:42:94:2a:f1:df:
20:5c:dd:cc:91:84:03:6f:88:59:a0:4b:8a:28:aa:9c:f2:c0:
3c:e4:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:03 2025 by rpki-client