Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
File: _JfnqMJOB2HT5dydVjmLxH0m08A.mft (raw, json)
Hash identifier: nae5JK5zi/Sf5yOPVWK6R4hAbThZhhUkPRj0NxLwwEc=
Subject key identifier: 90:7C:60:DF:6C:DD:10:B0:F8:85:39:62:97:A7:76:BF:58:44:4A:99
Authority key identifier: FC:97:E7:A8:C2:4E:07:61:D3:E5:DC:9D:56:39:8B:C4:7D:26:D3:C0
Certificate issuer: /CN=fc97e7a8c24e0761d3e5dc9d56398bc47d26d3c0
Certificate serial: 0195881578DD207816698430C8DCDC94B35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JfnqMJOB2HT5dydVjmLxH0m08A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
Manifest number: 03C1
Signing time: Wed 12 Mar 2025 02:01:03 +0000
Manifest this update: Wed 12 Mar 2025 02:01:03 +0000
Manifest next update: Thu 13 Mar 2025 02:01:03 +0000
Files and hashes: 1: _JfnqMJOB2HT5dydVjmLxH0m08A.crl (hash: tDf48ipmXNE4zmSMzEZzcHbU9P6mH4aoKqQVqOdS8oo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:15:78:dd:20:78:16:69:84:30:c8:dc:dc:94:b3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc97e7a8c24e0761d3e5dc9d56398bc47d26d3c0
Validity
Not Before: Mar 12 02:01:03 2025 GMT
Not After : Mar 13 02:01:03 2025 GMT
Subject: CN=907c60df6cdd10b0f885396297a776bf58444a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:18:68:0e:64:96:f1:46:0f:26:9e:45:ed:37:
17:17:49:26:9b:1a:cf:0d:99:45:c0:f9:b4:61:53:
77:97:f3:79:a2:40:45:e7:0d:d8:3c:df:eb:38:cf:
8d:17:f5:f8:e9:73:65:f2:31:1e:1d:57:13:5a:84:
61:57:f9:98:c4:c5:92:bb:4a:68:94:14:cb:97:71:
4b:35:11:e1:d6:24:6a:ef:32:e5:2a:86:48:30:cd:
f2:ee:16:9f:2f:d9:51:ac:75:ce:c0:ab:6a:03:9a:
63:15:9d:ef:01:44:fd:2b:b3:82:0c:1f:16:00:b2:
18:55:ab:5e:6f:7c:a5:f1:71:6d:58:4f:01:07:7d:
77:0d:2d:ea:fb:5e:cf:16:0f:1f:27:2b:12:35:07:
a9:08:a0:ea:75:4e:7c:b8:6d:81:fb:18:c7:47:34:
8c:e1:67:87:44:0f:d6:99:98:9d:ae:eb:e0:0f:79:
cd:58:c0:68:22:8c:ef:0a:97:6d:7b:3d:98:e7:7e:
d8:d7:65:e6:85:fa:5a:6f:dd:fe:2d:6b:24:5c:87:
8f:94:6b:c8:ae:22:d5:7c:54:e2:2d:7c:bd:dd:09:
c3:00:38:29:0d:0b:ad:10:56:71:19:5a:5a:3c:83:
3b:a5:bb:49:32:49:ba:53:57:b0:58:ad:c5:a2:ad:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7C:60:DF:6C:DD:10:B0:F8:85:39:62:97:A7:76:BF:58:44:4A:99
X509v3 Authority Key Identifier:
keyid:FC:97:E7:A8:C2:4E:07:61:D3:E5:DC:9D:56:39:8B:C4:7D:26:D3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JfnqMJOB2HT5dydVjmLxH0m08A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1c:a1:b0:c6:36:da:02:c4:97:e7:e7:0f:a9:a1:53:59:1a:
78:a7:4e:2a:63:a3:47:4d:3c:02:53:9a:e9:5f:17:36:85:61:
d2:a8:32:00:ed:4a:e4:fd:fc:36:93:7b:9e:a5:1a:d1:73:12:
5c:a5:ab:60:0d:c0:6b:06:18:7e:b5:56:a3:ca:ef:4f:ed:7c:
90:a0:cd:d1:e6:d5:c4:3f:17:4a:bd:d9:d0:9e:c8:c4:9f:9d:
1c:47:28:71:b2:f7:81:e2:0d:fa:9f:3b:7b:1a:86:e8:65:83:
93:47:1d:41:f7:d9:ed:8d:07:9e:55:76:22:b7:35:6f:09:b0:
f5:8f:10:c1:ea:3f:8c:37:7e:55:07:13:cf:44:60:2c:aa:79:
18:69:d9:92:12:89:a3:60:68:74:54:b9:48:0d:36:6f:82:71:
65:5b:22:9e:01:97:d6:b4:4b:99:1c:0b:72:c7:de:fc:47:93:
ed:d6:e8:91:bd:7d:37:ab:f6:61:7c:6f:01:7d:6c:68:9d:d1:
a7:74:d2:95:51:5c:b7:96:b0:e1:45:24:54:4c:43:56:45:94:
07:8d:63:64:2f:e4:47:09:4b:74:a4:52:9b:ae:ad:33:2d:3e:
00:72:74:0c:7a:e0:24:47:c8:0e:de:46:3b:94:b0:ee:30:cc:
b5:62:46:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:41 2025 by rpki-client