Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
File: fi4pGEMoSetx6V3EDRB56oZfYQk.mft (raw, json)
Hash identifier: AgjGz+aquv/aMZWVTkhq6qOFw9vDGoPA0safXwB1HN4=
Subject key identifier: 31:D8:4B:EE:E9:58:46:8E:B0:06:9F:2B:69:98:B8:A7:00:C3:32:1C
Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Certificate issuer: /CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Certificate serial: 0194BD8598FEAB67CA7F297D25B671F5100B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
Manifest number: 0746
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: S1dC-8FvWd5r91Ep_3NW-RYRFSM.roa (hash: WN6IJU4enC30WWGrEp1TUJBHxrmIxnrzAFySxPEWWA0=)
2: fi4pGEMoSetx6V3EDRB56oZfYQk.crl (hash: WgFHcFmPUM28q8K0y1zIxlkyiE1J6KsCEVW/CAcw+/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:98:fe:ab:67:ca:7f:29:7d:25:b6:71:f5:10:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=31d84beee958468eb0069f2b6998b8a700c3321c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:43:c2:24:18:77:62:b7:44:05:f4:84:38:
73:66:e0:e3:4e:d6:17:b7:9f:26:3c:68:c8:f2:06:
0a:44:f3:be:5c:3c:56:b5:24:77:83:28:bb:80:ed:
41:56:7f:a9:ac:82:0e:44:94:66:42:d1:36:81:fe:
72:d7:f8:01:24:5f:34:f3:ae:70:25:32:fa:ef:e4:
ed:c1:28:a2:f8:49:c5:99:ca:64:d5:7d:ad:6a:f8:
89:58:71:ed:f6:38:a9:8c:88:52:88:0e:f7:28:1c:
70:50:8f:f3:e6:fe:33:70:84:36:16:c5:54:98:6e:
26:11:63:10:35:ba:cd:df:30:ac:14:c3:00:d5:3a:
79:71:74:93:20:cc:b8:26:b6:ee:ad:64:71:81:ea:
bf:db:80:8c:95:01:03:b4:5f:c1:ce:56:f2:13:d2:
58:42:e7:ec:31:8e:9b:2c:f1:66:a1:b1:b3:05:90:
b4:ba:14:11:03:c1:93:4a:40:43:bc:ff:31:e4:fa:
9b:a4:d2:99:60:52:d4:4c:0b:ee:09:1b:4f:6f:19:
db:d7:07:df:ae:45:78:e6:7f:61:1c:45:f4:96:3a:
d0:a9:c7:f2:15:a7:aa:67:77:ea:14:32:64:bd:23:
bc:68:47:6a:d5:ac:74:a3:be:16:ca:72:4b:f2:bf:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D8:4B:EE:E9:58:46:8E:B0:06:9F:2B:69:98:B8:A7:00:C3:32:1C
X509v3 Authority Key Identifier:
keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3c:53:3c:00:a4:68:f0:ca:98:05:06:56:e4:f8:a4:c1:f1:
47:4a:bf:50:26:be:09:15:ee:28:dc:6d:bb:41:95:89:42:af:
f0:11:00:31:6f:66:12:cd:c1:6f:67:1b:14:48:f5:02:11:8d:
3d:f1:e5:62:c7:85:85:28:c0:a9:55:71:33:bb:8b:4d:bd:da:
fb:81:9a:ec:f3:28:69:e7:00:ed:be:32:88:96:a0:87:be:e1:
61:70:7c:d4:14:49:54:b3:03:7f:ef:d5:19:b6:0c:50:b1:d0:
c7:49:5e:79:20:76:c1:8f:2f:f3:83:c4:6e:77:98:a4:95:86:
8e:93:15:f1:3c:61:69:a5:b5:99:1d:97:49:b7:cb:89:a0:0e:
ee:24:64:d2:ba:ab:78:b0:ed:a4:97:b3:63:30:1e:2f:2e:a6:
63:67:d1:18:0c:7e:cf:88:51:27:e0:56:f2:40:68:c1:87:43:
09:ae:ce:de:65:7a:28:af:81:e0:54:b9:1b:4e:7a:8b:0b:aa:
84:a7:79:88:13:68:8c:0f:4a:39:c0:da:5d:cf:4f:7a:9f:15:
4b:f8:2b:31:94:73:80:dc:ba:71:d7:aa:29:f4:18:73:18:bb:
4a:26:88:09:45:56:57:6e:31:21:54:2a:15:e4:62:f5:28:b2:
43:81:23:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:44 2025 by rpki-client