Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cf3e97-0792-4313-b19c-cc1f5a97870f/1/fhZGNHqf54Y0SFKKzFSzyj1DRA8.mft
File: fhZGNHqf54Y0SFKKzFSzyj1DRA8.mft (raw, json)
Hash identifier: jSfH3qhijVzxwfnieXNjdcExkHICy1DK7szaE8PymRM=
Subject key identifier: D9:53:F5:DB:11:D6:EE:37:7B:FD:15:AB:55:20:54:FB:0A:C5:2A:F8
Authority key identifier: 7E:16:46:34:7A:9F:E7:86:34:48:52:8A:CC:54:B3:CA:3D:43:44:0F
Certificate issuer: /CN=7e1646347a9fe7863448528acc54b3ca3d43440f
Certificate serial: 01951210DD72266FA79E5CBD5E7948FFE106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhZGNHqf54Y0SFKKzFSzyj1DRA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cf3e97-0792-4313-b19c-cc1f5a97870f/1/fhZGNHqf54Y0SFKKzFSzyj1DRA8.mft
Manifest number: 1071
Signing time: Mon 17 Feb 2025 04:00:49 +0000
Manifest this update: Mon 17 Feb 2025 04:00:49 +0000
Manifest next update: Tue 18 Feb 2025 04:00:49 +0000
Files and hashes: 1: fhZGNHqf54Y0SFKKzFSzyj1DRA8.crl (hash: OtAdAWSY5xTqPA8z2vlDySuVlx5uw2ZV3wLYtXeQXv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:dd:72:26:6f:a7:9e:5c:bd:5e:79:48:ff:e1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1646347a9fe7863448528acc54b3ca3d43440f
Validity
Not Before: Feb 17 04:00:49 2025 GMT
Not After : Feb 18 04:00:49 2025 GMT
Subject: CN=d953f5db11d6ee377bfd15ab552054fb0ac52af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:ba:56:1d:65:20:1e:fa:ea:a1:d9:31:92:
b3:90:21:13:df:42:db:3b:f2:46:b0:69:85:03:b6:
50:52:6b:7e:92:c2:59:c2:eb:c4:ea:51:84:5d:23:
32:ef:ab:7a:9e:99:41:4e:a4:7d:aa:51:c4:d1:bb:
6c:d2:6a:46:78:7a:06:0d:cf:f5:4d:2b:36:f7:b4:
f3:d2:a7:cd:53:5e:98:d3:18:c3:e6:d9:8a:8f:f9:
32:de:6e:0b:c0:e8:27:c8:9a:dc:e2:4c:d9:b2:e5:
b1:ef:32:a0:fd:2e:0c:9e:05:f8:6a:9e:12:da:1b:
2a:99:0c:ff:aa:d4:3d:2e:fd:b1:9f:6e:07:15:93:
ca:2b:c6:44:8e:69:e4:fd:93:b0:a0:8a:89:c5:f4:
e3:df:2c:9c:4d:03:e8:f6:2a:1c:74:16:65:b1:8e:
ee:9f:b8:f5:19:c5:cc:5f:c6:7c:80:e9:af:9f:49:
d0:fe:9d:9b:ef:d9:f4:39:15:49:00:17:06:da:cb:
07:f6:26:40:41:e6:10:80:c2:72:98:e0:72:8a:42:
20:92:a7:3d:b3:92:3c:1e:fb:55:25:b9:33:8c:4e:
76:63:3b:b7:a9:b7:cd:e6:f7:81:da:25:17:0e:89:
8f:57:d6:5c:e5:e8:e6:bb:53:b1:8a:ae:d7:94:47:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:53:F5:DB:11:D6:EE:37:7B:FD:15:AB:55:20:54:FB:0A:C5:2A:F8
X509v3 Authority Key Identifier:
keyid:7E:16:46:34:7A:9F:E7:86:34:48:52:8A:CC:54:B3:CA:3D:43:44:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhZGNHqf54Y0SFKKzFSzyj1DRA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cf3e97-0792-4313-b19c-cc1f5a97870f/1/fhZGNHqf54Y0SFKKzFSzyj1DRA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cf3e97-0792-4313-b19c-cc1f5a97870f/1/fhZGNHqf54Y0SFKKzFSzyj1DRA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2e:20:63:23:ba:cf:f3:ad:3c:0c:ab:9c:c2:f8:46:a6:f5:
b6:db:5c:5b:0c:85:d9:85:a1:fc:88:4f:53:ed:a3:11:80:b5:
81:7a:ad:84:4f:af:3e:f7:fd:42:48:65:ee:c3:7e:cd:a3:21:
89:66:27:c5:5a:6f:bc:87:50:09:3c:b4:12:5c:f5:77:04:2e:
3d:88:bc:7f:36:14:92:88:b5:8b:f6:b2:04:07:c7:23:47:69:
9c:c4:d4:7a:52:af:93:dc:f6:20:4d:5c:91:75:a2:c2:d5:07:
6b:45:90:a4:0b:62:ca:c4:e8:d3:88:67:85:d7:47:c8:fb:d8:
a3:60:7d:9c:46:db:0b:a0:2d:b3:c3:5f:af:e0:9a:3b:a7:44:
77:f9:e6:cd:a6:f0:22:a1:c6:91:07:99:ea:eb:9c:cd:70:57:
b5:3a:76:43:0b:68:61:c5:b3:18:1f:73:31:6a:1b:00:97:e0:
76:81:c1:2c:aa:72:f7:d7:66:a0:d7:62:33:e4:56:8b:d0:ff:
08:cf:7b:4e:ae:3a:e8:ef:cc:8b:e5:e2:76:53:b1:a4:5b:6f:
ec:4d:59:7b:f5:22:dd:12:7a:1d:d2:b6:56:f8:c6:2d:c4:57:
11:45:5b:ad:ed:17:15:9f:fb:8e:43:00:b7:8e:9a:d9:2e:e5:
a5:d4:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:41 2025 by rpki-client