Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.mft
File: f-M2aJct_7fshiiujDwmvt4cq5o.mft (raw, json)
Hash identifier: YHyMHpXD9LMSSCJ50qUR2K24byVMCDqlKMAZJEN/wcc=
Subject key identifier: C8:D2:FE:A4:B4:95:66:0B:53:CA:5B:0E:A0:08:8A:37:52:69:55:88
Authority key identifier: 7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
Certificate issuer: /CN=7fe33668972dffb7ec8628ae8c3c26bede1cab9a
Certificate serial: 01941BE9B75D18351343569D57FF1AB236C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.mft
Manifest number: 0B87
Signing time: Tue 31 Dec 2024 08:51:29 +0000
Manifest this update: Tue 31 Dec 2024 08:51:29 +0000
Manifest next update: Wed 01 Jan 2025 08:51:29 +0000
Files and hashes: 1: f-M2aJct_7fshiiujDwmvt4cq5o.crl (hash: bpNxMT8BtgOHXvWoBgrw3nUYX8sbrflF1+NlNegzyds=)
2: mvSuRnlUGIQwSNRheNVeNZDvF6w.roa (hash: 4e9WL3x4GPpPNgODsDJEgT7/9wVK9UmRqC0HQvIpImM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1b:e9:b7:5d:18:35:13:43:56:9d:57:ff:1a:b2:36:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe33668972dffb7ec8628ae8c3c26bede1cab9a
Validity
Not Before: Dec 31 08:51:29 2024 GMT
Not After : Jan 1 08:51:29 2025 GMT
Subject: CN=c8d2fea4b495660b53ca5b0ea0088a3752695588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:ab:71:7b:9d:99:12:b9:3e:02:e2:1b:80:
84:c5:88:c8:5c:56:d4:43:8d:d9:a1:fe:e1:94:ec:
5a:5a:2e:b6:d5:9d:be:41:aa:36:2a:24:e3:67:62:
70:71:8f:d3:a7:5d:e0:7d:30:57:f7:3c:e2:75:84:
dd:d7:74:8b:a3:88:b3:c5:b1:2a:1b:0b:e2:fd:bb:
bd:ec:bb:d0:cc:11:b6:db:6d:b6:1e:2a:30:9c:dc:
91:63:57:60:92:e3:0f:da:f9:90:5a:6c:a6:18:44:
37:54:b8:3f:4c:24:43:e8:65:3a:02:9d:e2:47:ca:
ab:7c:47:78:69:9e:81:91:5e:7b:61:d9:65:db:a5:
a5:c7:13:a4:e5:d8:59:5f:fa:de:77:07:32:20:c9:
d9:67:bf:96:d3:12:ea:91:a1:14:4d:f7:ed:b2:ca:
61:8d:8f:3e:00:c7:fc:2a:74:ff:d1:28:5e:79:f3:
08:71:9a:f6:b1:b0:ec:c3:c9:b4:81:bf:b1:61:bf:
d9:08:95:bc:19:ad:98:45:c4:77:cf:31:55:b2:b7:
f4:cf:f2:b3:6d:ee:cb:17:c3:95:9c:20:85:9e:f1:
88:19:e8:92:3a:aa:05:51:c7:7f:2b:05:f7:67:fa:
df:0f:d0:c1:25:5c:f5:a9:10:04:7f:1f:82:04:9f:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D2:FE:A4:B4:95:66:0B:53:CA:5B:0E:A0:08:8A:37:52:69:55:88
X509v3 Authority Key Identifier:
keyid:7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:89:a4:a7:b3:45:a3:e5:08:99:56:6a:be:1c:25:6c:88:e2:
21:d6:fa:0c:a5:cd:65:b1:fa:94:06:06:3c:02:b9:01:43:c9:
ab:dd:d5:55:61:4f:90:e5:87:5e:5b:e5:0e:3f:ec:c0:63:ff:
ef:74:b6:75:07:c3:fc:26:ed:98:86:09:7e:18:ba:b2:39:a8:
97:bc:31:89:94:25:63:16:e6:7d:69:df:d8:8d:33:c8:54:9a:
8d:13:18:6d:67:9b:6f:8a:32:0a:06:d8:cf:a0:70:88:1d:66:
fc:52:d5:76:95:ee:f8:e7:a0:94:75:c2:36:38:0d:42:34:72:
18:d6:58:e4:ec:b1:d0:34:d5:4e:04:55:7e:6c:b6:66:c3:79:
3f:a0:c2:ad:92:b6:07:0c:eb:39:69:49:0f:ea:da:0d:f2:cc:
8a:5c:5b:ec:0f:3d:64:9d:43:bc:7b:fe:ec:ca:ca:bc:e8:63:
93:7f:5f:91:f8:1a:78:83:e4:09:d5:7c:96:63:b0:32:fe:03:
b0:82:b6:6c:5e:e6:28:eb:af:f6:c6:f7:40:09:fb:0f:1a:1c:
60:4a:d0:60:09:8f:03:42:7f:50:dd:c2:72:d0:f9:24:96:f0:
d8:c9:b1:c2:11:31:24:c4:7f:8c:bf:43:fb:f5:ab:db:9b:ea:
33:37:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:29:29 2025 by rpki-client