Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.mft
File: F1aQfnINPe6fr34YLz2ejmIe3II.mft (raw, json)
Hash identifier: 2RYLVkiTBpbCZpKTVmrr0IGzsp/NeLEp8bAziHVec6I=
Subject key identifier: 93:57:BB:E7:02:4F:D9:D5:76:BA:EC:E3:F7:DF:FE:60:CF:11:D6:C1
Authority key identifier: 17:56:90:7E:72:0D:3D:EE:9F:AF:7E:18:2F:3D:9E:8E:62:1E:DC:82
Certificate issuer: /CN=1756907e720d3dee9faf7e182f3d9e8e621edc82
Certificate serial: 0195F8F3F12D896F43CAE45CF950074B058B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1aQfnINPe6fr34YLz2ejmIe3II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.mft
Manifest number: 113B
Signing time: Thu 03 Apr 2025 00:01:31 +0000
Manifest this update: Thu 03 Apr 2025 00:01:31 +0000
Manifest next update: Fri 04 Apr 2025 00:01:31 +0000
Files and hashes: 1: F1aQfnINPe6fr34YLz2ejmIe3II.crl (hash: 2mwgIpyq6fK+irg2Xvu7YTals/O2hvPNvcSChH/TslA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f8:f3:f1:2d:89:6f:43:ca:e4:5c:f9:50:07:4b:05:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1756907e720d3dee9faf7e182f3d9e8e621edc82
Validity
Not Before: Apr 3 00:01:31 2025 GMT
Not After : Apr 4 00:01:31 2025 GMT
Subject: CN=9357bbe7024fd9d576baece3f7dffe60cf11d6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:56:d1:88:5a:cc:c8:32:f2:a3:6d:77:e0:
d3:02:4b:bd:d8:37:c8:8d:8e:56:37:8e:de:f0:a6:
7b:78:f3:e1:f9:ea:09:83:4b:25:08:bc:8b:6d:84:
03:6b:7d:f5:18:77:cd:90:fd:8f:23:47:22:78:50:
e5:3e:ab:af:d0:47:02:dc:e2:65:64:18:90:99:cf:
24:c0:ab:14:c3:48:55:76:66:8b:d6:60:03:41:d2:
c7:57:3f:79:44:be:a0:97:63:01:cf:3f:ff:b7:ea:
93:d2:68:a1:17:6f:5f:f1:31:cf:4d:6e:c7:62:2c:
47:cb:41:84:3f:5a:bf:07:4d:fb:55:8e:dc:1b:0e:
45:61:24:0e:66:2f:e4:51:8c:fd:18:b4:24:91:86:
ca:d1:82:fd:74:29:9b:a4:9b:78:6b:7b:6f:17:b9:
9c:22:7c:58:df:2f:f9:72:51:9b:85:ed:b7:0b:6f:
b3:02:37:42:3a:52:ae:04:80:e4:e4:0d:d0:61:d5:
de:c5:31:48:bd:e0:4a:88:cc:d4:fd:a7:29:94:75:
14:35:33:f4:37:4a:6a:a1:ab:77:db:d5:9d:42:3f:
4e:13:1a:28:c7:0b:a5:7f:4a:5d:06:74:ff:a0:48:
19:9e:14:72:6b:f1:23:50:62:ea:84:0d:c9:c7:25:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:57:BB:E7:02:4F:D9:D5:76:BA:EC:E3:F7:DF:FE:60:CF:11:D6:C1
X509v3 Authority Key Identifier:
keyid:17:56:90:7E:72:0D:3D:EE:9F:AF:7E:18:2F:3D:9E:8E:62:1E:DC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1aQfnINPe6fr34YLz2ejmIe3II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c4:aa:0a:71:f8:30:be:b2:7a:5d:6d:47:32:6a:cc:85:76:
55:0c:28:25:f8:82:28:98:5c:94:f6:3c:a1:6f:ac:77:86:49:
42:21:2a:a2:a1:f2:05:e5:15:57:21:53:be:fb:84:95:11:77:
f6:c9:85:86:0e:a4:1c:03:11:50:a4:58:cf:8c:38:49:38:15:
36:6e:79:82:63:c2:1c:81:bb:2c:79:05:e0:ca:7c:f4:7e:18:
eb:b1:b7:db:ff:41:c5:59:50:7a:64:bc:70:78:54:52:5c:0f:
42:56:ab:6f:f6:24:67:7a:42:8e:9f:f1:a7:f7:26:8c:1c:8a:
03:59:c8:10:d9:69:4a:48:78:e9:88:9b:42:f7:0a:44:de:1f:
e6:72:18:f0:dc:4d:68:ba:26:a2:4a:5a:e3:c6:50:12:f3:55:
98:a6:8e:94:c3:d5:29:62:13:1f:8d:a5:62:5f:3b:71:c4:be:
7d:f6:bb:f7:ee:e9:2b:f9:19:50:4a:f3:6a:01:19:75:a6:d3:
83:fe:b6:d7:8f:b7:5e:b1:3a:b6:dd:73:35:82:74:ff:53:4e:
29:1b:c3:1a:25:19:55:5c:2e:a8:8c:02:50:50:a4:7e:3e:9e:
1b:80:50:e0:d3:7d:9b:a4:4c:74:6b:ad:92:72:f3:4f:03:fa:
d0:4f:ac:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:08:21 2025 by rpki-client