Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: 3Yg+hcPazv+scZgmj/bD13nDVRF5e6sIxfaQhfHVZCY=
Subject key identifier: 5D:E9:E9:3A:EC:65:C7:AA:58:B8:18:50:A4:C1:01:13:6F:A8:F1:7E
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 0195E1595F2887D285A297FB16EA3593F4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 07F1
Signing time: Sat 29 Mar 2025 10:01:25 +0000
Manifest this update: Sat 29 Mar 2025 10:01:25 +0000
Manifest next update: Sun 30 Mar 2025 10:01:25 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: rCDggCbTct3HyiUOs08nTG2upeEOE4deeM21G8PkT1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:5f:28:87:d2:85:a2:97:fb:16:ea:35:93:f4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Mar 29 10:01:25 2025 GMT
Not After : Mar 30 10:01:25 2025 GMT
Subject: CN=5de9e93aec65c7aa58b81850a4c101136fa8f17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:32:2a:93:e8:be:52:27:3a:1f:cd:0b:91:
a9:f2:eb:04:37:dd:e0:df:45:53:b8:3f:a5:2b:6c:
37:b9:60:f9:73:fd:0e:45:2d:70:f8:e3:fc:e0:41:
6c:2f:72:b5:85:c6:67:78:da:77:75:fb:fa:39:ac:
ca:f3:3d:7c:cb:64:c2:23:47:2c:8a:91:8e:6c:d2:
dd:18:ac:c5:19:4e:7d:50:70:a2:06:ed:11:7d:3b:
ec:d5:b3:3e:a3:58:f6:bb:87:30:6d:d5:88:99:8a:
29:40:7f:a0:0d:10:6a:41:4f:dd:a8:4a:3b:af:9c:
db:88:23:93:ff:3d:e3:cd:be:65:47:d5:99:ff:90:
64:74:73:73:52:6c:12:05:e5:76:4f:92:a0:de:6b:
9f:a3:f4:fe:92:8d:1d:65:e5:aa:29:a8:b6:d2:c6:
88:f2:40:22:e1:43:cb:80:74:99:4e:4e:70:8e:d1:
4d:02:0d:4d:22:9c:a4:84:7a:99:29:75:a8:05:e6:
a9:03:b8:fe:d8:8a:6d:69:e1:42:e0:27:64:b8:b6:
40:6b:ab:7c:cc:65:09:c5:dd:fd:3a:2c:50:aa:5f:
2d:81:8c:9b:d4:1d:98:23:f8:3a:87:ce:3b:45:a7:
75:75:6b:ef:28:39:68:89:3a:f2:e6:b0:c8:5f:2b:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E9:E9:3A:EC:65:C7:AA:58:B8:18:50:A4:C1:01:13:6F:A8:F1:7E
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:42:9a:ed:98:80:c4:c1:3d:fc:d7:ef:1c:7e:50:81:b0:ce:
33:90:a1:7c:fb:7e:ee:bd:e9:36:1c:70:8d:87:8a:56:f1:14:
98:ea:fb:0d:89:df:69:0e:7c:94:85:5c:ea:12:b5:d2:64:55:
c3:87:bf:a6:8a:f9:3e:83:59:05:31:9a:9f:4b:69:8a:9d:7f:
52:ce:fa:6b:91:6b:f2:b3:ef:56:ba:56:2e:34:a8:32:a2:63:
9a:75:03:4d:d5:25:56:fe:21:95:33:de:7c:eb:f6:02:99:3f:
3a:35:cc:eb:d4:c3:a9:00:10:a5:4b:7a:f7:8e:45:a6:31:f6:
47:9d:c1:bf:28:c7:75:fe:98:13:39:69:c0:43:32:f8:20:a9:
52:c4:04:36:14:26:dc:c0:d1:fa:40:0f:7f:98:aa:b9:7c:32:
76:51:a9:25:1c:d7:4e:13:5c:da:c0:8b:14:58:f0:0c:e9:ae:
1c:6a:51:04:5b:b7:99:50:44:b3:c3:6b:98:ce:70:79:a9:16:
95:ae:cf:e4:ae:ec:4c:16:bb:ae:8e:cc:fb:3a:52:93:36:b8:
8d:82:96:6a:c5:b1:8a:04:5c:b0:e6:7f:b7:c1:cb:b8:85:d3:
eb:6d:13:d5:a6:ce:2e:b7:89:f3:00:f5:62:28:a2:42:a6:5c:
d2:25:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:48 2025 by rpki-client