Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft
File: Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft (raw, json)
Hash identifier: pm91ORO/SoCi2VtEj8Z0qMkFO1l1rbdyfWRNDmbRYyQ=
Subject key identifier: B6:DB:DA:F5:A7:A7:60:05:84:EA:5D:34:B0:D9:15:CC:13:AE:39:1A
Authority key identifier: 31:FA:64:AD:DC:B0:F8:65:80:C3:88:91:23:41:CC:47:C3:9C:4A:ED
Certificate issuer: /CN=31fa64addcb0f86580c388912341cc47c39c4aed
Certificate serial: 0193B4F2D631CD2D00DBEADE12AEE437215F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft
Manifest number: 0FBD
Signing time: Wed 11 Dec 2024 09:00:33 +0000
Manifest this update: Wed 11 Dec 2024 09:00:33 +0000
Manifest next update: Thu 12 Dec 2024 09:00:33 +0000
Files and hashes: 1: Mfpkrdyw-GWAw4iRI0HMR8OcSu0.crl (hash: hENc/HceKcnAikn6OAJ0xjpaHijRK/5dgdox956vc7w=)
2: WMOOVbk7Uebp-iaKkKyYnBiO2pM.roa (hash: shY40U0YGGXazGAleAZcB0VSaW+qjHKVi//G/l3HNTg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b4:f2:d6:31:cd:2d:00:db:ea:de:12:ae:e4:37:21:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31fa64addcb0f86580c388912341cc47c39c4aed
Validity
Not Before: Dec 11 09:00:33 2024 GMT
Not After : Dec 12 09:00:33 2024 GMT
Subject: CN=b6dbdaf5a7a7600584ea5d34b0d915cc13ae391a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:d1:09:c7:9c:a4:d1:8a:13:c6:36:20:05:
5a:cb:d8:4a:ba:1f:9b:55:ca:5e:73:13:b9:2e:ee:
06:e7:68:3b:7b:56:45:09:30:39:42:dc:85:83:98:
cc:a7:98:23:0d:02:87:fc:b8:a2:9a:b3:c1:a7:91:
5e:4c:02:53:bc:38:e1:98:73:de:72:ac:3f:91:9f:
98:7c:c9:ce:e2:d9:a4:10:72:aa:95:02:94:21:ad:
83:95:b9:51:79:c2:6b:0b:74:a6:b4:21:0c:85:7d:
3b:b1:ca:3e:2c:d0:db:91:65:d1:f8:86:e4:8b:97:
a1:07:e0:37:c4:0e:f9:5a:e0:66:3a:2f:7e:60:45:
df:a3:44:85:73:4e:ad:98:d7:75:6f:40:79:08:bc:
b5:eb:26:a4:48:aa:cd:93:2a:5b:78:33:4a:53:5a:
f4:12:85:df:4c:bf:1b:91:f9:4d:86:a0:61:cf:43:
59:4b:60:62:df:73:c7:1f:13:a7:9c:ab:7e:3e:4a:
da:1f:f7:ea:fa:8f:a1:2e:b5:fe:dd:0e:9f:78:be:
8a:47:a6:b9:ee:54:76:a6:ea:af:8e:f6:4e:86:e5:
99:40:f3:d3:26:1d:25:51:38:38:34:14:85:94:cb:
06:65:7e:b7:94:f9:5f:17:dc:b1:f0:06:3c:cc:a6:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DB:DA:F5:A7:A7:60:05:84:EA:5D:34:B0:D9:15:CC:13:AE:39:1A
X509v3 Authority Key Identifier:
keyid:31:FA:64:AD:DC:B0:F8:65:80:C3:88:91:23:41:CC:47:C3:9C:4A:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:84:7b:f2:73:61:86:8e:f7:c7:7d:2e:03:66:fd:6e:e1:02:
db:22:ae:9d:16:ca:44:6e:d6:0e:41:fc:0d:f2:9a:ba:3a:ba:
a5:14:47:a5:65:72:ac:c4:df:50:a2:f3:03:61:b5:74:40:9a:
ce:08:2b:52:e3:7c:ee:13:c2:1f:10:6a:9d:d1:22:d4:51:9f:
4e:7a:8a:fb:95:79:eb:b2:22:68:ee:f6:4f:99:fd:25:d6:80:
e6:64:72:95:0f:97:4d:92:e5:51:62:d7:2d:cc:fc:ab:3f:d9:
00:39:99:be:64:d6:f1:d2:c8:60:e6:2b:1f:a7:97:26:86:0a:
0a:57:ce:20:b0:98:d9:ba:08:3c:32:af:90:8a:1b:6d:c3:80:
8f:0b:74:4e:93:3f:d5:62:4f:1c:2b:dd:74:d4:49:95:b4:0f:
f9:b2:3b:54:0a:48:d0:0d:12:e4:5b:47:2f:ad:ed:f6:59:48:
4a:1e:48:39:7d:e2:dc:da:8e:1f:ab:37:42:45:9a:5a:c8:11:
a5:67:d7:7f:38:90:45:69:8b:fe:c8:0f:a5:4b:b0:6d:1b:4b:
37:3b:c8:fe:6c:d8:b8:b8:72:40:12:db:8a:22:4b:b4:65:e6:
ab:83:8f:b5:48:70:e1:8c:f2:70:7b:a2:e9:35:db:94:68:a1:
7c:1b:32:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:09 2025 by rpki-client