
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File: f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier: XkRjTzrMLLynyRK59BVf78fyWZdrRXbAhzgC1sbw6hs=
Subject key identifier: 8C:01:5E:89:87:7F:64:2A:7A:C5:28:FB:86:29:48:15:54:9E:7E:19
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial: 0194BC3C20A25B0348766CBD1988104F9A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number: 016B
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: eItRvNzQdyJIguIwW1307zWXwvvnyI3EpifdlJ2UpPA=)
2: siHg6lFmHbPgHoNeW2SywiubJmo.roa (hash: kskpJxlnZ+nR3C+TNiBxn+yry8UEOs9uLt7Ezmifj5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:20:a2:5b:03:48:76:6c:bd:19:88:10:4f:9a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=8c015e89877f642a7ac528fb86294815549e7e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:c1:c1:6b:c7:39:5c:e3:c0:2b:85:28:68:
48:97:4d:af:4f:14:91:4c:29:fc:84:44:57:fc:94:
a2:50:91:9a:e9:17:bb:3e:d9:71:b9:77:1e:07:86:
36:cb:a9:28:8b:6e:91:30:f5:85:5e:a6:5a:4c:97:
26:eb:b3:42:8c:a3:2d:ca:c6:9a:d8:dc:f3:60:d4:
ee:05:55:12:35:c1:a1:85:e4:f9:a7:c7:c2:4d:b5:
2a:78:a6:67:fa:13:0d:96:2a:b2:ff:8d:1d:ec:48:
16:8f:41:a7:ea:ed:26:4f:74:4f:a1:f2:a0:57:6a:
54:86:86:5e:19:52:8d:8c:95:29:09:da:48:37:a3:
68:0f:8f:b9:4a:a3:e9:0e:83:55:36:3a:6e:5c:94:
78:48:a0:e3:e4:d8:89:53:6f:9c:23:62:85:d8:66:
dc:33:7c:ba:8d:f9:7d:84:f6:ad:64:ce:2e:7d:e1:
ab:f5:35:ec:c3:be:fe:f9:e1:20:b3:99:d6:5b:a2:
21:7d:bc:12:9b:78:50:97:90:da:f1:7b:13:f3:0c:
95:50:3f:e8:8f:10:a8:be:8f:d0:3b:5e:7e:0e:20:
10:93:57:6f:e8:06:73:6e:0b:c2:96:32:48:cb:a1:
a6:28:6c:1b:97:8f:ea:83:9c:d8:8d:49:05:b4:c7:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:01:5E:89:87:7F:64:2A:7A:C5:28:FB:86:29:48:15:54:9E:7E:19
X509v3 Authority Key Identifier:
keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:91:d2:ac:b1:88:4d:c0:48:c7:54:49:2a:06:29:96:d6:81:
e2:f8:16:2a:8f:dd:95:3b:da:88:50:df:fd:85:28:87:18:b9:
a0:6e:bd:93:4f:5e:10:e9:52:2c:52:88:41:df:74:1d:94:65:
14:5f:00:f1:54:00:fb:c1:2d:03:ac:15:74:73:c3:e8:22:97:
87:8b:42:1e:5b:86:50:73:97:40:9a:af:b7:fe:39:4b:ed:16:
07:69:ca:e0:2a:6a:49:5c:aa:c6:ff:8f:97:0f:8b:68:13:a8:
39:2d:b5:40:f7:65:a1:a9:05:af:2d:41:41:24:2d:e8:4d:01:
05:a5:d3:04:62:d1:a7:3e:0d:66:dd:0b:fa:9b:ed:65:de:9d:
96:5d:f6:41:30:73:95:1d:11:16:c6:ba:78:f8:2c:c2:b9:f9:
45:ac:a7:fc:83:e4:0c:35:0b:af:b1:d0:62:d8:eb:b1:db:ee:
e1:6b:5b:0f:51:ce:a9:34:26:3d:cc:96:f2:cb:cd:3b:70:79:
13:eb:8a:0f:a6:ec:cf:09:5d:87:29:c6:75:7b:29:64:54:2f:
56:fa:56:7f:c6:97:14:af:20:70:bc:69:b0:84:a0:ff:1f:5e:
c0:41:8f:d2:74:e5:f5:1f:86:37:28:54:8d:4e:1a:76:01:bd:
a1:02:1b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:41 2025 by rpki-client