Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: fVMy4Hi7+nc0vwX1NYSp45/bCpXZZFz0hrT17+Dxkeo=
Subject key identifier: 46:3C:61:82:3C:51:7A:4A:E3:E2:B5:FB:01:6B:21:70:8C:94:13:E1
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 0194BC3BFB170CC76F057CA71773D3CDBA6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 04B6
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: DsE5_TUYYo0BXf2JDy40SB8tAVY.roa (hash: MUCKDFIZgUo4hnT7lKbmN/TrcbbCDZIEWfPYHOszsj4=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: H7t4JLAA8g/bwA4zk9BvwveL+owCh1vfVwK6LKEH7XI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fb:17:0c:c7:6f:05:7c:a7:17:73:d3:cd:ba:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=463c61823c517a4ae3e2b5fb016b21708c9413e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:a5:4f:34:36:65:b1:ae:f9:01:ce:65:74:
f1:2f:d5:b7:d1:c2:98:fe:cb:1c:6c:3b:ae:50:d8:
fb:40:b0:8b:99:0c:49:35:8c:99:ea:d5:c0:d0:b3:
a3:02:7b:ee:78:46:2d:2f:a9:d8:ef:e1:8c:f5:c1:
40:ca:4b:a3:6e:72:1e:98:b9:de:f9:27:23:66:d8:
5b:70:5b:d8:88:3c:12:97:07:e0:cf:e7:6b:d0:86:
9e:83:72:d2:4a:a9:53:f2:48:16:cf:b2:d6:c6:2f:
7e:d0:f1:1d:87:cb:22:73:36:fc:63:4d:9b:f1:20:
a0:ba:61:8d:82:57:ae:50:1d:0f:80:d8:d0:da:d2:
10:9f:78:15:df:6c:de:26:12:a8:b0:c0:cb:a3:9d:
09:64:27:69:4c:59:9a:ed:2a:a6:3e:6e:e5:70:13:
bc:2f:22:30:e3:76:23:0c:f1:e9:ef:17:22:4e:b1:
82:c6:49:3c:11:51:2a:64:3c:4b:42:dc:3c:35:55:
26:56:3f:b1:c2:77:c6:13:89:a5:0b:7d:b4:7c:f5:
70:e5:7b:e0:f7:d7:54:60:c0:0a:6f:eb:e7:78:95:
40:04:12:7c:ba:07:27:b9:90:2a:17:01:97:dc:66:
ec:14:fe:75:46:e2:ca:8d:47:52:e2:42:14:58:2f:
29:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3C:61:82:3C:51:7A:4A:E3:E2:B5:FB:01:6B:21:70:8C:94:13:E1
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:45:96:9c:39:ad:e7:8e:82:66:97:10:88:63:1a:66:c0:9d:
16:4b:4f:3f:62:5d:0f:7f:ce:a2:a6:52:67:1b:6f:1e:9e:1a:
0a:de:26:4c:35:f5:dc:c3:9e:b4:4e:2d:4c:af:3e:6b:20:07:
a0:1a:39:20:b9:5c:7c:a1:85:ad:3f:31:53:09:69:7f:e0:48:
b3:6b:85:48:ee:c6:2d:c4:4a:43:8f:7f:4d:cd:a5:15:9b:00:
d8:66:01:b6:d5:30:8e:e0:df:4a:11:36:2f:b0:1f:60:79:46:
a9:d3:fb:43:d6:de:d6:df:f1:91:eb:5b:79:39:6f:b2:23:df:
fa:60:e0:92:15:71:e8:be:4b:e4:c8:a6:a8:35:d8:53:b0:de:
85:7b:dc:be:62:fa:ac:d5:94:d8:f5:43:81:05:d2:f0:49:9b:
94:14:46:05:9f:f7:2a:a8:ac:c6:80:2f:46:49:73:3d:5f:39:
95:9c:d2:ef:ae:a8:b3:84:61:c2:9d:b1:e0:53:21:b3:05:31:
58:88:44:51:d9:8d:e4:1a:0e:15:03:b1:f7:2e:b3:bc:7e:bb:
8d:84:d8:08:52:ac:f7:cc:bb:46:c1:bc:e3:06:a9:63:69:a9:
5c:82:28:8b:4c:3c:f6:9c:4d:1e:55:aa:59:a0:28:3f:35:12:
c8:de:1f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:12 2025 by rpki-client