Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: /EGXqi/ajYysYxGNH5HaWptkOBgA+liQvtqZ3SOiSbw=
Subject key identifier: 87:FC:23:11:44:AE:D0:29:49:47:72:46:75:A8:25:24:FF:41:60:36
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 0194BC730B60EC60A3133FC7145BA423DDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: d/xb8K8fXgDG0gL3cLNQRbtne3gelzlOh6mgdIW4Vas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0b:60:ec:60:a3:13:3f:c7:14:5b:a4:23:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=87fc231144aed0294947724675a82524ff416036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:4e:5d:36:07:b0:49:6d:0f:2f:2f:34:94:
92:1a:21:a2:be:eb:df:ee:89:fa:cf:e3:5e:36:7c:
f5:b3:17:b4:ef:a5:c7:1c:9e:18:f1:d6:ac:17:1c:
ac:ef:5c:af:0c:20:b1:7b:39:f2:72:fb:a2:ba:39:
6d:45:8c:28:c5:02:c8:9f:08:0a:b4:a7:73:39:50:
96:c1:b9:b6:3e:1a:22:d2:d9:69:37:f7:ed:d4:36:
9b:4e:8e:a0:cb:46:97:6b:c9:61:c0:24:fa:80:d5:
5c:cc:3a:c2:05:0a:38:15:32:da:31:72:8a:ae:48:
89:ee:c1:1a:97:dd:25:7e:fe:1b:84:84:c6:40:bb:
2b:f2:cf:4b:90:97:73:15:a2:91:ce:19:43:ea:bc:
61:1e:c6:5c:ff:b8:c0:f9:d9:0f:cb:92:ba:5c:89:
a8:cb:05:f4:b3:f6:4f:07:3c:e2:56:ce:02:ec:e0:
f7:4a:a2:7b:6d:7f:88:2d:6f:3a:d4:9b:d6:6a:32:
d3:f0:75:b1:3b:52:b4:ff:c7:6f:1d:d3:c4:ca:9d:
e0:3f:13:e9:4d:03:6d:16:bf:5e:2c:2d:34:63:38:
ab:8e:eb:b1:1b:b5:68:0c:15:6c:bd:64:ab:71:88:
91:8f:68:ab:23:86:08:9f:75:22:18:03:a3:de:27:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FC:23:11:44:AE:D0:29:49:47:72:46:75:A8:25:24:FF:41:60:36
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ab:8a:40:4c:86:7b:cd:bc:f1:90:49:e0:2a:28:a8:08:60:
bf:27:80:51:84:24:a8:be:a1:28:8c:e1:d6:69:68:ae:c4:3b:
ff:ad:45:11:e0:3b:eb:e1:ba:41:8a:95:c2:a5:3a:f1:2c:47:
fd:13:61:70:cb:24:37:71:38:d6:e6:10:1a:74:e0:7e:e1:a2:
51:2f:62:60:c1:4a:d0:67:9c:b7:61:8e:11:d4:4b:32:94:71:
04:39:6d:93:61:8e:1c:d3:20:9c:36:04:24:ce:91:af:5a:d4:
e3:b4:43:8f:62:9c:c3:62:6a:b7:8a:c9:59:44:24:70:be:f7:
99:08:44:d9:25:8b:11:c1:83:be:39:d3:4c:51:1d:06:50:4b:
9c:6a:13:ee:ef:7a:80:b2:04:d5:6b:7f:a9:fa:f6:5d:26:c5:
ac:f0:1d:90:38:d9:7a:18:78:98:24:53:1a:a7:44:e1:df:bf:
75:fd:bf:ca:2e:96:4a:49:14:bb:64:84:38:bb:8d:0e:f2:24:
b7:8d:10:7f:09:3a:4a:c9:64:b5:a4:78:74:36:fc:a7:3f:2b:
4f:63:ca:46:c3:86:95:f2:12:53:83:88:d4:44:3c:c3:a3:b8:
52:bc:ed:ea:fd:f1:8b:5c:83:5e:49:6d:08:d8:c9:7b:2f:cf:
72:e1:b8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:41 2025 by rpki-client