Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: 5eVz03kiF+qGVyj+abG8qd1KtXjXsGJQScI5+rVdd7I=
Subject key identifier: FB:66:47:4F:B8:E8:7A:BA:18:A1:90:88:72:4F:E2:BD:9B:06:87:03
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 0194BC05131667E471A6DBCE1FA0D506210C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 02AA
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: nt56amaHjiwHDCg1Z2wCYoJr4tmQgjZR1bTLKGpmrKo=)
2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:13:16:67:e4:71:a6:db:ce:1f:a0:d5:06:21:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=fb66474fb8e87aba18a19088724fe2bd9b068703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b5:a6:8e:d0:ca:42:f2:43:6d:d3:46:1c:97:
e8:bf:de:4d:77:7e:b5:e0:19:2e:1f:18:2d:fd:61:
cf:dc:f2:03:3c:5a:db:89:90:70:ca:1b:b1:14:18:
e7:45:0d:4b:cb:ce:4a:46:4f:00:2d:d6:af:0a:5e:
e5:fb:6a:1c:90:04:99:8e:77:78:b7:62:4e:e4:2a:
ae:7c:d1:10:b2:28:bc:68:34:3a:97:bb:d2:c2:f1:
81:44:2c:48:3e:df:d4:0a:49:18:04:fb:d3:bc:c3:
ef:1d:fa:ca:4f:9b:28:40:e5:c1:5c:64:52:59:d6:
88:8f:2b:e8:b3:c9:fe:d2:ba:8c:63:8c:cf:6b:16:
70:e8:d0:da:9e:a3:48:c5:05:81:f5:d7:0d:93:34:
b5:a1:e5:c2:63:f0:bd:57:00:aa:a8:0e:f7:f6:5f:
e9:c5:d7:98:d9:52:49:49:9d:35:37:91:58:b2:32:
34:89:9e:3f:f2:98:d3:74:04:51:bc:07:e9:08:a0:
ac:ed:2c:9c:bf:16:64:ec:2a:e0:e8:04:23:7a:45:
26:39:d7:87:d3:73:e6:4b:60:0c:2a:1c:66:e8:f8:
9d:db:6d:4b:fd:17:6c:61:29:27:8e:5b:92:ce:26:
04:70:26:2a:86:dc:0a:53:c2:f6:90:6e:bc:5d:b3:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:66:47:4F:B8:E8:7A:BA:18:A1:90:88:72:4F:E2:BD:9B:06:87:03
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bc:49:9f:94:d9:bb:5e:7e:81:71:cd:d0:81:27:ee:e1:04:
47:f0:af:2e:fd:3a:98:29:99:c4:39:ae:a1:58:91:51:c3:9a:
0a:7d:c6:25:ad:b6:50:9a:88:54:a8:77:04:06:e3:1b:f2:15:
08:61:fe:f2:e4:da:f5:7c:e6:62:df:24:0d:fe:6f:66:6b:78:
b3:36:64:93:35:5d:a3:59:ec:b6:36:00:4c:5e:5b:b4:2b:8d:
f9:80:2e:87:68:b5:89:f8:7e:4a:ce:b9:02:ec:39:2c:96:3e:
4e:05:0a:4f:e1:f0:77:c4:93:67:14:43:96:75:6d:08:cf:dd:
b6:91:7b:5f:4b:df:88:fe:55:d2:1f:7c:35:60:36:bf:30:3d:
65:25:b2:12:93:74:21:8e:14:06:d5:a1:c1:7a:e2:f3:26:61:
ea:c2:0b:83:97:b6:89:af:62:30:83:c9:73:09:5f:36:e8:04:
26:94:5e:99:56:bc:83:56:f0:93:c6:4b:b7:f5:9b:0c:16:f9:
a4:df:b0:6a:80:39:18:74:4e:dc:61:c7:0c:5f:0d:b0:0f:61:
db:82:06:cb:eb:33:2b:19:ec:48:ac:ab:62:78:53:e8:13:84:
92:37:58:19:81:66:1f:fc:08:e1:be:7a:de:93:c0:07:71:d9:
e1:79:03:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:34 2025 by rpki-client