Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: HKtgGeOGYIWqZW05wGOfwcr+oYTdpLr77XuQHjbKxSA=
Subject key identifier: 63:85:7A:FF:F1:FF:55:10:F9:76:79:42:B6:E0:35:10:7E:6D:1B:C2
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 0194BCE0C51872FD47FA1D3820DA1A5DFD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 016D
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: 0aywYTi5Sc6yVfxfBxLpHYbIDYs.roa (hash: XltTkT+5iNEXCHy8WnwN+9b+D1DDxHii8Hapue8Rijw=)
2: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: 8zn47oKi2zhnVL4axAdPaMnBZk6P3UUrsRKs/e9eLgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c5:18:72:fd:47:fa:1d:38:20:da:1a:5d:fd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=63857afff1ff5510f9767942b6e035107e6d1bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:59:db:24:b6:ec:f1:88:6d:12:f4:36:6e:
15:00:95:fe:3d:57:ea:50:49:36:16:75:fb:7a:06:
9e:f2:c6:e0:74:fa:17:2a:31:20:42:30:45:4b:53:
9f:c6:9d:7b:1a:19:38:e4:a4:4b:1a:a4:e3:bd:f1:
75:5d:99:c6:a9:7a:5f:73:02:8d:17:a9:17:ed:97:
73:90:3a:3e:94:16:5a:02:90:bb:ce:89:35:cb:af:
2f:50:c2:36:73:bb:5b:14:70:ec:51:98:ce:3e:67:
4e:50:67:25:b6:44:33:90:42:99:4e:7d:61:1d:85:
d2:9b:3e:f3:2e:b6:9f:01:a1:09:40:d4:9b:19:fb:
97:81:20:4e:b2:df:1c:87:43:9d:4b:c8:26:64:88:
4a:bc:88:1f:fc:ba:1f:e3:ad:e4:a2:10:5b:56:20:
c5:a6:8a:29:61:50:3b:c3:4b:83:60:41:83:82:a7:
c5:ca:4b:ee:52:a5:c5:7a:71:5b:7d:ae:55:6a:36:
b4:02:7f:3d:cf:b4:96:4b:dd:f9:10:2b:99:5d:23:
7b:7d:1d:9c:bf:b9:fe:2c:6e:76:e0:8e:27:d9:47:
41:96:d4:e3:16:fa:a9:ef:10:6e:b4:b5:ea:50:6d:
9a:76:d7:c2:6b:f8:5a:00:a0:7d:67:1d:24:d0:8a:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:85:7A:FF:F1:FF:55:10:F9:76:79:42:B6:E0:35:10:7E:6D:1B:C2
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6c:cb:f9:a9:97:68:68:f4:5b:7e:34:08:12:e4:2a:43:7a:
7b:d5:64:10:d2:f6:c4:10:d8:d9:e4:2f:35:5c:03:e9:c3:f9:
82:72:e8:40:f8:c8:aa:bb:6f:95:15:a4:dc:84:fd:a8:12:c8:
74:32:c8:f8:72:74:ce:f5:4f:46:e4:ae:37:d6:ba:f0:e6:59:
8f:8b:c2:3c:60:75:27:9c:4f:3c:78:24:81:05:15:44:34:d0:
70:69:08:bf:f9:d7:4e:9c:82:88:9a:9f:c6:eb:6a:38:79:a0:
29:76:25:f5:ac:85:e3:c1:db:f7:0b:29:f8:d7:d7:bb:16:ee:
58:ae:13:58:72:21:46:39:88:5a:99:eb:2d:dc:31:4b:8b:c1:
b7:15:33:cb:84:ac:1f:36:32:73:6e:fa:d8:fb:0a:b9:f8:2a:
8d:4e:d7:3d:3a:18:64:a1:5f:ac:11:02:36:10:8b:05:02:7b:
c3:77:8f:d7:c4:a3:98:d0:25:ec:9c:b3:81:db:6b:bc:d9:91:
b8:a7:dc:44:de:ed:ff:62:b5:aa:9f:9e:5b:7f:4f:ad:6a:e4:
9e:4e:11:1c:68:e7:c1:c0:d5:5f:b9:d5:33:40:67:33:ec:98:
1a:a2:3b:cb:18:ce:74:cf:8e:82:5e:66:73:c5:64:9c:23:8d:
c1:55:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:47:46 2025 by rpki-client