Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File: fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier: N/fbqAq0ok+T8dV/v8v8lqPffD2hYtp25Vu3aSvly6s=
Subject key identifier: 41:A9:33:DF:2E:22:7B:79:55:42:72:66:FB:D0:20:B6:26:34:70:58
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer: /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial: 0194BBCEC37A118126BF33729DD4F7D7615A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number: 05F7
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: 76ognQHiGWtclIOPrrpbVOGXruS0gmX5XZd1GKQVmRQ=)
2: uJcxOoPayTtpIImr51o6Grvnwh4.roa (hash: HgfbCb24sxq0O5vUUAY2XVFtTmqaW+l9dpOtt2vq4Fs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c3:7a:11:81:26:bf:33:72:9d:d4:f7:d7:61:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=41a933df2e227b7955427266fbd020b626347058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:0d:b4:cd:61:72:12:a5:81:65:12:0f:42:
cd:73:23:97:0f:54:d6:bf:21:f5:29:8c:10:f8:d0:
b4:15:53:6b:4d:25:11:22:3c:0e:6d:46:9c:b1:f5:
d4:0a:ba:14:04:83:4a:b8:f3:c6:f8:81:2f:c8:a6:
be:85:e6:0e:83:50:28:bf:37:f2:5e:5f:97:d0:ba:
eb:b5:7c:ad:2f:80:a4:96:54:ed:59:3b:e5:73:52:
23:6e:1e:f0:f1:6d:4a:0e:61:47:6c:29:72:13:5f:
b2:92:17:89:49:76:1b:de:23:69:35:4b:23:a5:6f:
26:e6:4b:a8:bf:56:fd:5c:3c:e8:97:82:64:b8:9e:
f9:61:b8:d2:be:77:05:65:67:21:eb:1a:8c:91:e0:
ff:e1:65:6f:d5:47:4d:10:34:78:ec:43:0c:f6:ae:
88:cf:f7:fa:dc:e5:ab:7e:ee:35:c6:aa:47:96:b9:
e6:6b:a4:7d:c5:c4:d4:46:3a:13:9a:3f:6b:d1:55:
ea:71:a6:1e:b9:31:8c:9a:bf:33:89:5d:54:1a:a6:
cc:43:6a:e5:c8:33:23:66:df:ad:b4:84:37:cc:ad:
bb:32:f1:eb:39:e3:dd:92:29:fd:05:87:56:74:99:
cf:6a:62:01:f6:21:2a:c9:ac:97:a3:f1:8f:0d:8c:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A9:33:DF:2E:22:7B:79:55:42:72:66:FB:D0:20:B6:26:34:70:58
X509v3 Authority Key Identifier:
keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:81:15:c8:75:1c:05:3d:45:5c:e7:3f:d7:4f:72:a3:8f:5d:
a5:2c:fa:db:b2:cb:15:70:5e:81:e1:aa:6a:08:50:ef:8c:0d:
b9:8c:e8:77:cd:00:06:58:e3:ca:61:c6:8e:ab:ce:4d:ae:b7:
88:66:92:21:4c:42:4c:6d:63:f2:fc:11:27:4e:54:c7:ea:76:
f3:df:a3:0d:50:91:51:72:dd:4e:bb:c8:84:b0:48:a2:40:2b:
7f:b6:30:c1:b4:92:c7:7c:cc:05:7c:ac:cf:70:d2:24:37:86:
31:52:1e:c6:4d:3e:2b:ee:d1:25:85:b2:e6:c8:26:44:08:b8:
bb:4c:7b:67:7f:a7:1a:87:54:9c:db:c3:7f:ed:f6:7c:ec:0a:
d6:77:de:c1:b7:ae:d7:c5:0d:6d:b4:f5:1d:ad:0c:b4:df:1d:
42:54:ff:64:a8:2f:af:2f:8e:88:d5:ca:96:80:6a:e6:f9:f3:
f3:80:0a:22:69:61:79:9b:75:f0:1f:ce:aa:ad:03:55:33:8b:
da:e9:b1:7e:d8:96:2d:42:46:84:ae:13:00:e2:c1:51:f4:d2:
70:a1:b1:9a:61:ba:60:a3:bd:8a:0d:a9:f3:3b:17:a3:32:88:
3b:9f:d3:57:27:95:cb:d6:00:35:98:33:2b:3c:9a:e4:f8:bc:
24:de:00:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:15 2025 by rpki-client