Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier: b1CAaAC22BOqP0fKTYRBnFsIfQML8TBypP/Q0Kyf6hw=
Subject key identifier: 32:B4:16:35:33:12:9B:60:4D:17:31:98:C6:DB:55:13:6B:D2:58:EA
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial: 0194BC72C7BC05BC994045E42A79C2AA1828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: pLiWxuX+MyqpeAO3so/eqrbZIdnOr3dFyqDRZPUE2to=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c7:bc:05:bc:99:40:45:e4:2a:79:c2:aa:18:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=32b4163533129b604d173198c6db55136bd258ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:11:8e:53:24:47:65:6b:c2:06:7e:0a:2d:
9b:a0:e9:1d:5a:bf:2b:c7:82:f8:29:ee:3f:1a:46:
0f:7f:b4:bc:03:3e:78:06:9b:85:6c:5b:dd:c9:96:
b8:98:4a:06:4d:2f:66:f3:ba:10:b0:d3:61:73:2f:
65:2c:ca:bf:e5:5f:56:24:c2:ad:2f:22:b1:da:65:
8f:e3:06:f8:2f:c2:08:9f:57:fc:b7:46:f8:81:8c:
7b:4d:a3:d4:05:90:b0:5a:6d:db:92:35:0a:58:f6:
e9:e6:1f:b3:42:f2:47:35:88:68:80:ff:42:d1:69:
f8:4a:8c:46:2b:01:76:fc:5c:e5:e8:02:c9:4e:3a:
b5:b7:ed:2f:19:a0:ec:8c:0e:14:44:75:6f:f0:c7:
29:ed:7a:d7:f7:b7:f2:69:52:1f:d5:a1:7a:a2:43:
71:bc:4d:d9:ff:cb:63:9a:4c:63:1a:31:fb:30:b4:
3a:46:fa:cf:13:68:a3:7d:b7:34:f0:fe:2d:5a:21:
83:fa:e7:80:c6:d6:e4:70:78:02:c8:ff:e5:ce:be:
bb:f6:8c:d0:28:eb:e5:12:1e:e6:c5:55:c2:81:b2:
ff:e3:04:36:47:94:0c:cd:94:2f:75:e9:dc:df:7b:
a5:4c:90:49:6e:c2:03:87:24:3f:a3:2e:a0:40:e3:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B4:16:35:33:12:9B:60:4D:17:31:98:C6:DB:55:13:6B:D2:58:EA
X509v3 Authority Key Identifier:
keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6b:1d:3d:41:da:44:fd:b0:56:7f:08:ab:ca:b1:08:3c:16:
8a:a1:d2:e6:d7:b4:08:0b:4c:85:54:dd:e5:c6:ea:73:66:5e:
b8:af:f0:7b:e6:b7:d4:98:4d:72:a3:0e:e7:7e:1f:a9:7d:ce:
f0:ba:83:1b:8f:b7:36:7a:fc:bb:04:87:4c:7d:27:21:64:ed:
95:8f:de:0c:70:2e:58:8b:70:65:a4:1d:03:cf:eb:45:97:ae:
29:cd:d8:8f:14:17:81:38:7f:50:de:82:d1:76:e4:5d:34:3c:
f3:ce:de:a8:45:20:63:4d:fc:34:29:2f:81:e8:6e:9b:4d:ba:
2e:e1:61:fd:c0:39:b8:32:dd:4d:20:00:9a:c6:31:7e:f6:52:
b7:59:b2:9a:ff:de:4f:ca:ae:ba:6d:b3:3d:fb:3e:2e:63:ad:
69:fc:60:52:46:a1:d0:68:51:e9:ce:d7:7f:88:e1:1f:52:9d:
dc:2f:20:e8:18:bd:04:1f:34:97:6f:d8:f2:65:87:24:47:72:
a8:74:9a:22:29:6a:3f:e0:82:e2:b0:c2:df:d4:fc:df:67:e9:
36:d7:ff:51:f1:8e:48:b0:cd:c2:19:7f:88:4e:6a:c6:b5:1b:
d8:17:dd:9f:77:de:16:90:e7:54:d1:b6:1f:ad:4d:8b:24:94:
64:b9:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:08 2025 by rpki-client