Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/87tROvtQTgpc3KysWGRGJw5TqyU.mft
File: 87tROvtQTgpc3KysWGRGJw5TqyU.mft (raw, json)
Hash identifier: s1DsaUg8X5pfxneH+H1JFySOA+66DcZOX8d2dM4KjwE=
Subject key identifier: 9D:47:E3:25:2B:C9:BF:98:6C:2E:DC:9D:A4:81:98:2E:31:67:1D:B9
Authority key identifier: F3:BB:51:3A:FB:50:4E:0A:5C:DC:AC:AC:58:64:46:27:0E:53:AB:25
Certificate issuer: /CN=f3bb513afb504e0a5cdcacac586446270e53ab25
Certificate serial: 019559F29B6EF678C9FB6D23FB7D2DD64202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87tROvtQTgpc3KysWGRGJw5TqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/87tROvtQTgpc3KysWGRGJw5TqyU.mft
Manifest number: 018E
Signing time: Mon 03 Mar 2025 03:00:26 +0000
Manifest this update: Mon 03 Mar 2025 03:00:26 +0000
Manifest next update: Tue 04 Mar 2025 03:00:26 +0000
Files and hashes: 1: 87tROvtQTgpc3KysWGRGJw5TqyU.crl (hash: Oeg8UDl3RgOggcGSuG9B89toHXRezjMPmvlSzShouyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:59:f2:9b:6e:f6:78:c9:fb:6d:23:fb:7d:2d:d6:42:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bb513afb504e0a5cdcacac586446270e53ab25
Validity
Not Before: Mar 3 03:00:26 2025 GMT
Not After : Mar 4 03:00:26 2025 GMT
Subject: CN=9d47e3252bc9bf986c2edc9da481982e31671db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1f:b9:29:e7:3e:3b:db:47:67:4b:ad:0b:43:
91:c8:36:4d:48:13:1f:a8:f0:99:26:c6:92:2c:ad:
fb:f3:d4:aa:3b:6d:68:61:98:3f:ed:47:2f:3d:8e:
80:53:cb:b0:b4:5f:2c:8d:f8:05:29:15:0e:aa:1f:
d4:ef:a0:6c:a6:bf:09:36:c8:38:1c:fe:09:31:e9:
11:0d:41:cd:7e:13:72:9d:ae:83:2d:c6:11:06:34:
f5:8a:4c:3a:37:52:d3:68:7e:e8:7a:11:8f:d2:55:
10:3f:91:c8:4b:51:00:79:91:fb:68:f3:8a:c7:75:
6a:cd:c8:e3:7f:6c:b5:31:59:37:a9:d4:e6:51:2f:
68:61:cd:13:5e:15:e6:d2:50:86:97:5e:0f:cf:78:
90:ff:c9:fc:63:9a:1c:34:e2:ec:9a:28:4e:58:be:
8e:ac:0d:b7:29:0d:f8:a4:e2:bb:81:8d:32:7a:cc:
37:d3:81:2c:9c:e1:a0:7c:6d:c5:39:75:46:4c:3d:
47:bb:6b:60:7e:f5:8c:61:19:5f:f7:42:96:97:98:
7b:9b:62:d8:d0:6f:d0:71:8f:bd:c8:8a:9b:48:5d:
bd:1a:ab:96:57:c9:12:ca:41:cb:48:2b:54:05:e9:
ea:4a:6c:5d:fa:c9:15:78:84:9c:fb:9c:d0:bc:8e:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:47:E3:25:2B:C9:BF:98:6C:2E:DC:9D:A4:81:98:2E:31:67:1D:B9
X509v3 Authority Key Identifier:
keyid:F3:BB:51:3A:FB:50:4E:0A:5C:DC:AC:AC:58:64:46:27:0E:53:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87tROvtQTgpc3KysWGRGJw5TqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/87tROvtQTgpc3KysWGRGJw5TqyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ba9bcf-7dda-45b5-b7aa-77abd7cf8d6f/1/87tROvtQTgpc3KysWGRGJw5TqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:8a:ce:c0:9e:fe:24:f8:a8:5e:0b:c0:a2:81:cc:bc:28:8f:
d8:0a:dc:f3:38:93:45:cf:84:25:52:9c:eb:c2:ad:00:e0:6c:
9f:73:26:13:f2:35:7b:9f:52:10:22:56:ff:eb:00:86:aa:23:
8f:d7:24:04:a2:d5:e6:cc:47:e3:31:70:a7:db:f5:0e:c3:35:
fb:1c:f1:c6:f2:c8:9d:d0:04:05:57:e4:e3:0e:c8:b8:9a:2b:
14:16:6f:cc:43:0c:96:a7:d5:76:62:bf:2a:7a:80:c7:e0:46:
b7:e9:0e:38:ac:d4:c0:8e:52:cf:3c:5f:95:6d:6c:45:f3:96:
2f:a8:8b:4d:ac:07:db:b9:7c:41:cd:0a:99:c9:ae:5b:20:65:
42:30:dd:25:9c:7b:bb:7f:b5:a4:4a:72:0c:23:30:7f:70:4c:
b3:83:a2:cb:bb:0b:f8:02:61:2a:17:d8:ca:8a:f2:9e:0a:e1:
65:f8:da:eb:b5:72:42:07:7b:7a:07:e8:92:3a:29:f4:ab:61:
8b:25:a3:b7:f4:b9:b4:78:07:a4:0d:c6:35:94:e6:0e:b8:0e:
b6:8e:93:69:ce:0b:6a:70:81:db:5a:ab:ad:17:fa:26:3b:96:
1e:11:54:d4:04:6f:ca:73:2e:8b:45:87:ce:ad:51:e1:aa:1d:
ca:e3:49:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:57 2025 by rpki-client