Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.mft
File: 8d4LVDF8gVsFFTACYEv9VZBpqLA.mft (raw, json)
Hash identifier: gecrlc4N2swJK/N1jV95kXYsUnbVR5XKkSEfQThGZjI=
Subject key identifier: FC:74:C8:7C:25:83:9A:38:73:8D:89:31:6A:58:61:E9:FB:0B:1A:E1
Authority key identifier: F1:DE:0B:54:31:7C:81:5B:05:15:30:02:60:4B:FD:55:90:69:A8:B0
Certificate issuer: /CN=f1de0b54317c815b05153002604bfd559069a8b0
Certificate serial: 0195151236836F1E86A709081B593BC30B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d4LVDF8gVsFFTACYEv9VZBpqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.mft
Manifest number: 0487
Signing time: Mon 17 Feb 2025 18:01:09 +0000
Manifest this update: Mon 17 Feb 2025 18:01:09 +0000
Manifest next update: Tue 18 Feb 2025 18:01:09 +0000
Files and hashes: 1: 8d4LVDF8gVsFFTACYEv9VZBpqLA.crl (hash: YSIsGmO9IZ4jL4o8cIn1hUCjN9vQCNyJjmXQN9C7C9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:12:36:83:6f:1e:86:a7:09:08:1b:59:3b:c3:0b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1de0b54317c815b05153002604bfd559069a8b0
Validity
Not Before: Feb 17 18:01:09 2025 GMT
Not After : Feb 18 18:01:09 2025 GMT
Subject: CN=fc74c87c25839a38738d89316a5861e9fb0b1ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:ae:44:fd:04:8f:fa:23:95:33:9b:f5:a9:
b7:96:9f:7b:91:82:b6:44:94:d8:ee:22:5b:3d:b5:
d6:0c:89:72:21:ed:96:92:b6:4f:2f:5b:de:24:49:
d5:a6:8a:ea:c6:fd:bc:09:3e:13:00:ce:8c:68:54:
a7:22:ee:82:ea:7a:0e:5a:be:bd:ec:20:25:ec:59:
1d:ed:3f:e3:a4:9d:2f:75:9a:ee:3d:f1:85:c9:0b:
27:14:22:1e:ef:4c:34:30:5b:62:98:47:0f:d8:5f:
3b:a1:90:45:b3:17:71:89:c3:9e:28:85:17:fa:1f:
49:46:8a:f5:ae:1e:ae:53:46:9f:b7:bf:ae:3f:5c:
08:cd:d6:47:bd:a1:71:5f:cb:af:f3:7f:49:7a:13:
76:78:0d:83:57:47:c8:8b:bd:16:ad:8d:50:41:de:
7b:9e:3f:45:7c:b3:96:f4:41:b4:72:75:c8:e6:95:
c0:8c:45:b1:58:c5:42:04:3e:4a:22:a0:ab:10:73:
ad:b9:cf:68:ef:db:e6:dc:02:93:d5:6e:93:f4:3d:
39:09:98:87:33:f7:a6:16:a9:ec:37:46:94:3c:44:
db:5d:24:fd:19:13:e8:84:7c:3a:dd:e1:fe:49:b0:
62:1c:bc:0c:0a:2b:22:c8:26:62:50:34:2a:a8:b8:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:74:C8:7C:25:83:9A:38:73:8D:89:31:6A:58:61:E9:FB:0B:1A:E1
X509v3 Authority Key Identifier:
keyid:F1:DE:0B:54:31:7C:81:5B:05:15:30:02:60:4B:FD:55:90:69:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d4LVDF8gVsFFTACYEv9VZBpqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5e:20:ed:dd:fc:78:13:18:f5:e5:36:b6:94:37:58:d7:6b:
09:ce:71:85:32:11:96:1f:1a:4a:e2:8a:f6:48:04:7f:09:c7:
45:d9:1e:14:37:52:6c:ae:9a:62:ce:c6:95:f6:97:7a:0f:a2:
bc:e7:53:76:45:09:ef:9e:bb:2e:44:8a:e4:5e:22:b9:12:1a:
16:6a:98:83:63:ce:06:33:fe:21:51:5d:21:98:0f:a2:e8:43:
1b:c7:ad:55:33:30:05:1f:21:c3:ce:92:5a:0d:f5:6f:f6:64:
ff:8f:c3:a6:e1:27:f5:d4:4c:60:59:3d:f5:4d:cd:19:52:14:
54:03:cd:db:d9:cc:f8:a0:83:83:09:17:6f:48:2b:7d:04:bc:
ab:7c:04:22:e4:9a:fb:15:fc:68:92:d0:ce:5e:67:90:56:62:
69:57:6b:44:71:cb:4f:25:d7:57:fd:dc:d5:7b:ce:ba:9a:c0:
57:f1:f2:85:96:41:36:cb:15:b4:94:f6:eb:88:07:d7:d0:2b:
91:36:d4:a9:9b:45:8e:eb:b8:83:bb:21:b9:ca:46:4f:75:92:
4b:f0:e4:6a:31:74:ca:fb:fc:2a:29:83:17:ff:95:c0:56:d0:
99:42:ee:1a:36:49:24:4e:a2:66:60:ca:d5:73:05:00:c4:8d:
ea:44:18:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:27:07 2025 by rpki-client