Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
File: 1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft (raw, json)
Hash identifier: BU2+WBdxTS3V/nzeB9x3LFlSJwcwUBhNinA+202j2u4=
Subject key identifier: 40:54:09:B0:F3:69:3D:D0:8B:DE:14:58:B3:4E:CA:7B:45:13:EA:CB
Authority key identifier: F9:F7:C7:7B:CE:45:48:7D:EE:7F:AC:03:89:A6:F7:4D:BC:3C:3C:01
Certificate issuer: /CN=f9f7c77bce45487dee7fac0389a6f74dbc3c3c01
Certificate serial: 0195A38D64EAADE5835E5FF65A1988B82FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
Manifest number: 0A63
Signing time: Mon 17 Mar 2025 10:01:47 +0000
Manifest this update: Mon 17 Mar 2025 10:01:47 +0000
Manifest next update: Tue 18 Mar 2025 10:01:47 +0000
Files and hashes: 1: 1-ffHe85FSH3uf6wDiab3Tbw8PAE.crl (hash: lw2ytUVrgC3ryICfvBVMvT5RjCgwYdNOCPeNJGgqBo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:8d:64:ea:ad:e5:83:5e:5f:f6:5a:19:88:b8:2f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f7c77bce45487dee7fac0389a6f74dbc3c3c01
Validity
Not Before: Mar 17 10:01:47 2025 GMT
Not After : Mar 18 10:01:47 2025 GMT
Subject: CN=405409b0f3693dd08bde1458b34eca7b4513eacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:22:6e:c0:79:92:2f:db:d0:1f:16:20:23:
6f:6f:8c:b9:7e:f1:16:1e:ea:d9:d7:70:40:aa:df:
98:5c:7d:2a:96:2f:b4:7f:36:3b:96:21:37:c5:b9:
a4:98:a1:8a:9b:1e:fb:86:de:ff:3d:6b:bf:1c:ab:
b5:7d:29:eb:ce:a7:d1:74:37:e2:f1:96:b1:c5:54:
84:ec:8b:6a:34:66:5c:48:2a:1e:fe:ac:e7:be:f1:
71:a6:fc:c3:da:a2:47:0c:47:66:30:1f:42:0a:db:
ad:9c:f3:40:1c:34:dd:b4:4a:5a:67:01:2f:1c:4c:
97:c0:1d:a0:03:cb:7e:4f:27:a2:45:5f:50:bc:0d:
1e:b0:3e:a2:fc:96:d3:6e:ae:4c:cd:09:31:44:2b:
dd:ee:3c:3b:1b:9d:fa:12:ce:92:87:d0:34:3b:20:
e2:b6:e7:68:90:da:c1:75:f4:4b:42:a3:59:27:60:
24:56:50:d4:ca:d1:44:38:35:f0:83:e7:3e:ea:5c:
2b:c8:b9:0f:e2:9e:06:21:af:23:f0:8b:be:39:51:
a7:2b:b7:2f:a1:45:4f:11:da:74:c0:40:d0:cd:58:
5e:c8:c5:af:35:c4:cf:22:0d:76:5b:35:56:85:b3:
3b:ea:c5:c8:58:5b:22:29:e0:d9:25:67:f6:d2:b4:
b3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:54:09:B0:F3:69:3D:D0:8B:DE:14:58:B3:4E:CA:7B:45:13:EA:CB
X509v3 Authority Key Identifier:
keyid:F9:F7:C7:7B:CE:45:48:7D:EE:7F:AC:03:89:A6:F7:4D:BC:3C:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:19:24:2e:c8:d9:53:ac:c7:49:d6:9a:23:d5:f9:ba:d1:6b:
9f:49:b3:d2:3f:90:59:0e:d4:27:89:e3:45:f2:a4:6f:da:cd:
a6:d0:a1:5d:a8:1b:94:2d:80:ae:25:c9:cc:5a:9d:97:91:5d:
7f:19:e4:5b:c3:45:51:15:70:3d:ca:f8:38:a5:99:9f:b1:51:
85:3e:fc:a3:4b:a2:df:b7:d1:7d:49:52:4c:89:06:aa:cb:3d:
e7:91:89:eb:c1:a5:f9:81:60:2b:bf:e0:ce:c4:2b:f0:47:38:
6c:01:fb:5d:11:89:19:66:59:4a:55:68:3e:55:c9:59:21:67:
61:2a:0a:fd:c7:9e:21:d6:66:39:99:be:2e:97:eb:21:1c:1a:
3b:ab:a8:9a:b8:e1:e2:db:5a:89:9b:83:85:51:72:e9:30:fb:
d3:53:7d:52:d8:fe:79:99:46:6d:ae:0a:23:42:fe:35:39:80:
06:0a:8f:4e:aa:84:a4:2e:da:f0:e1:c2:3d:8e:65:33:9c:08:
de:e7:11:0a:1d:f6:9b:7b:02:48:be:68:ba:aa:07:f1:c1:1a:
1f:88:69:f1:3f:48:5a:b2:f6:5c:ee:52:b2:9c:db:25:33:3e:
f2:55:1d:86:32:94:fb:8c:2e:59:0e:35:e3:52:d4:b8:70:26:
00:9e:4a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:38:33 2025 by rpki-client