Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc17f1-226f-44c0-89de-09a2397ea70e/1/1--wDSD9mRut1fJhhJLi48PMTd8k.mft
File: 1--wDSD9mRut1fJhhJLi48PMTd8k.mft (raw, json)
Hash identifier: hHKRUEVwQ4mv1LMUm18bXXwAX9fLtkoVDOkL/Crfiqs=
Subject key identifier: A0:98:26:F8:0B:26:23:E1:83:76:3F:24:CB:1B:AD:4F:98:5E:BB:25
Authority key identifier: FB:EC:03:48:3F:66:46:EB:75:7C:98:61:24:B8:B8:F0:F3:13:77:C9
Certificate issuer: /CN=fbec03483f6646eb757c986124b8b8f0f31377c9
Certificate serial: 0190D9750FCB6A8B83249072A26E613B21A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--wDSD9mRut1fJhhJLi48PMTd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dc17f1-226f-44c0-89de-09a2397ea70e/1/1--wDSD9mRut1fJhhJLi48PMTd8k.mft
Manifest number: 71
Signing time: Mon 22 Jul 2024 08:00:45 +0000
Manifest this update: Mon 22 Jul 2024 08:00:45 +0000
Manifest next update: Tue 23 Jul 2024 08:00:45 +0000
Files and hashes: 1: 1--wDSD9mRut1fJhhJLi48PMTd8k.crl (hash: 173gtgUqPovn8vT/GSFPAvQ3ROAITbWxCV57zqWgA2o=)
2: DbVq6xWXv-eEd8PDPZaoR6snBW8.roa (hash: Brx0um0yMaElKwxirIRhN/peLwE6hM6XjhfQWZ8UsOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:75:0f:cb:6a:8b:83:24:90:72:a2:6e:61:3b:21:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbec03483f6646eb757c986124b8b8f0f31377c9
Validity
Not Before: Jul 22 08:00:45 2024 GMT
Not After : Jul 23 08:00:45 2024 GMT
Subject: CN=a09826f80b2623e183763f24cb1bad4f985ebb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:8e:98:6e:9b:dd:eb:d7:aa:9f:ee:33:ff:
6d:1c:80:db:f2:b3:59:d2:ba:7e:58:e4:79:ab:52:
a7:e4:74:10:42:81:11:4b:c9:b6:42:66:fd:c9:0f:
47:99:a1:dd:12:50:68:0a:c8:a3:8d:fa:85:57:d6:
17:02:48:a0:c1:87:11:dd:0e:6e:7f:d2:94:1f:1c:
99:13:07:27:15:35:07:c1:fb:fb:32:a0:14:ed:1f:
45:5c:03:aa:5f:0a:00:1c:7f:d3:e2:0a:16:91:f7:
f7:29:ec:30:a0:46:3c:e5:7c:39:78:6c:cb:8a:92:
7d:f2:56:2f:11:77:73:d1:55:6c:ed:b2:12:a5:07:
4f:85:e5:a5:e4:ad:96:bf:d9:f6:e5:d2:b0:89:c3:
44:ec:c7:03:31:e4:b6:02:48:3d:01:00:21:f8:de:
79:a7:a1:df:f8:94:e4:c6:d6:f3:51:30:96:18:66:
f7:23:11:f3:77:23:73:a0:1a:eb:fb:b0:22:0e:77:
cc:91:fe:9c:73:27:e3:57:cd:79:37:21:26:06:88:
58:b0:2e:73:26:74:9d:2d:a9:18:98:2a:79:31:fe:
ef:10:fe:77:58:23:91:41:5c:a6:d6:ab:b8:ef:34:
79:2e:04:58:e6:2f:75:1d:09:0d:d3:db:61:1d:70:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:98:26:F8:0B:26:23:E1:83:76:3F:24:CB:1B:AD:4F:98:5E:BB:25
X509v3 Authority Key Identifier:
keyid:FB:EC:03:48:3F:66:46:EB:75:7C:98:61:24:B8:B8:F0:F3:13:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--wDSD9mRut1fJhhJLi48PMTd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc17f1-226f-44c0-89de-09a2397ea70e/1/1--wDSD9mRut1fJhhJLi48PMTd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc17f1-226f-44c0-89de-09a2397ea70e/1/1--wDSD9mRut1fJhhJLi48PMTd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a6:02:25:84:79:ec:bc:e2:da:0e:4b:d9:4d:5a:df:31:6f:
8c:50:6a:db:bb:27:45:6e:99:04:e3:90:b3:5a:c9:81:9b:6a:
c5:a1:c6:f9:a4:ae:35:f6:1d:32:5e:f5:9f:e1:30:f6:de:40:
cf:2b:55:15:cb:79:d0:3d:4a:e5:27:2e:0c:ed:55:ec:a1:ec:
69:b9:11:94:aa:e9:55:41:df:58:39:49:bb:31:50:13:8f:5f:
fd:e6:bb:b8:6a:3b:f1:5e:7a:d9:23:31:87:9e:c1:d1:f8:8b:
db:d2:a6:1a:d5:c6:3e:a1:da:79:bc:32:5c:da:2c:ec:63:fb:
26:5f:dc:a6:37:b3:d2:b9:dd:ba:b9:71:0f:8a:7d:4f:f1:5d:
78:e0:2a:8e:bf:95:2d:fc:80:b8:7c:1e:f8:b6:63:99:4d:1f:
a9:d5:24:74:c9:9a:de:c9:d9:2c:e1:0c:27:76:f0:11:d2:30:
f8:26:ce:d6:9b:1a:c8:c9:ce:31:9c:f6:11:ce:98:49:3b:d0:
26:8a:e8:be:b6:42:e3:a6:cf:95:43:4b:87:3b:08:59:e4:47:
1f:6f:d3:e5:77:45:60:75:68:bd:26:db:c8:ab:14:df:a8:2c:
0e:f1:db:22:eb:38:2d:36:72:37:51:20:a7:5e:74:52:a1:41:
28:71:df:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:16 2025 by rpki-client