Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: Fz25vzBi35XOJmIaz7SQOZHNjJ9QDlR4HLZbsfnPCRs=
Subject key identifier: 6F:B1:F1:48:8C:07:FB:7F:71:78:95:B4:ED:7C:73:7F:68:72:D0:87
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 01962E2ABF34124DEA128252DECDBD4484CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 1468
Signing time: Sun 13 Apr 2025 08:01:15 +0000
Manifest this update: Sun 13 Apr 2025 08:01:15 +0000
Manifest next update: Mon 14 Apr 2025 08:01:15 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: u+WrOX+9EYjPjwfXvajTKQ2pE9qKu35Y+Z/QWKgRFns=)
2: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (hash: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:bf:34:12:4d:ea:12:82:52:de:cd:bd:44:84:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Apr 13 08:01:15 2025 GMT
Not After : Apr 14 08:01:15 2025 GMT
Subject: CN=6fb1f1488c07fb7f717895b4ed7c737f6872d087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:1a:4b:60:c8:b6:4b:5a:31:26:79:e4:5d:
12:fc:21:9e:23:0b:5b:82:c2:5d:33:8c:3d:96:61:
e3:3c:4a:37:a8:cc:b8:54:c1:0f:8f:be:e5:fe:9b:
6b:b1:18:43:e5:dd:bc:4c:35:f9:59:d1:bf:37:fd:
a2:c7:c5:0c:07:ca:1e:fe:0d:3c:e5:af:15:b2:1d:
62:d8:72:a1:ba:0d:cc:c8:c2:b9:be:c9:49:f8:11:
e2:0e:b1:3c:92:fc:18:a5:dc:03:00:d5:46:05:f5:
51:c3:a5:ab:4d:45:21:39:02:1f:fb:dc:85:30:52:
6a:4c:92:0d:ea:7c:ba:14:17:73:8c:98:a4:00:72:
da:b6:ce:f0:3f:3b:ff:ac:b7:eb:be:16:91:78:7a:
35:30:f9:ea:41:fa:76:cc:c5:1a:6b:f9:e6:90:b1:
55:71:bc:89:ad:79:7b:25:fd:e6:85:c3:bd:db:b7:
15:e2:1a:77:15:b1:7a:01:9f:a5:ee:bd:f5:b3:24:
72:9e:0e:fd:24:59:cb:f9:7d:26:98:42:38:90:73:
e2:da:f8:7f:e0:8f:fb:d3:7d:d9:f8:92:de:4f:19:
aa:6a:3e:6b:19:df:fe:fd:37:c0:ab:64:66:2a:20:
12:92:ac:b6:61:e5:84:6e:26:e4:5a:d2:56:e5:25:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B1:F1:48:8C:07:FB:7F:71:78:95:B4:ED:7C:73:7F:68:72:D0:87
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:40:df:7b:e0:cf:d0:32:45:7e:16:2a:2d:c9:cb:83:d7:4c:
d5:7f:14:e7:9c:8f:12:b7:14:e1:86:c2:fb:eb:0c:65:55:8e:
71:81:a9:44:08:79:99:14:91:5f:4b:b8:7a:fc:99:31:cb:d2:
eb:15:61:e1:7e:a3:e6:c2:8e:9d:ef:7a:18:a9:d2:72:55:db:
6c:68:1b:99:e6:f4:3e:f0:81:2e:a0:81:58:e4:50:c2:24:27:
10:d2:ad:17:23:67:3b:a1:13:52:c8:c3:44:9b:67:b7:78:f6:
33:b6:ef:b5:2f:d9:fd:67:d7:96:5a:2c:2d:65:de:c7:f8:56:
ab:c9:37:c4:84:de:d9:be:46:6a:a6:87:91:15:4d:a9:05:59:
c9:07:29:a0:d4:52:9c:45:74:44:9b:b3:8a:bf:2d:73:83:fd:
1a:b6:f8:93:d3:47:16:08:5f:98:45:d4:75:ab:20:83:99:ed:
4b:fa:ce:9e:c2:1b:50:11:bc:45:03:92:ea:5b:6e:e5:9f:db:
a7:59:df:c1:d3:e2:06:68:a7:26:c4:6a:70:4c:6b:1e:17:72:
86:81:be:ad:a2:fa:5f:12:ae:e9:08:6b:ae:70:3a:14:6c:b1:
1d:6d:d3:31:19:8e:a0:3a:8d:45:4b:96:84:0c:98:86:8f:09:
0f:45:b5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----