Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: 3SB6soaS5J78mrzL5/NY32myrZVIKUDTXVwGC2sqgx8=
Subject key identifier: 81:3D:D1:3E:B4:C6:26:83:23:71:81:F5:CC:3F:95:07:E0:9B:D3:71
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 0194BCA985020C68644AEC1DF6143715058A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 10BE
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: 52KUDdFP_rD3RmJYr6LMpUPEMmM.roa (hash: usibkDt6eCnub+7x6EZqrdrQgsmz6UQ+udh3uzbsAi0=)
2: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: KWcjGZVAvxcFwtStTgexHrYFqNtqs1WHNrcGb18scHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:85:02:0c:68:64:4a:ec:1d:f6:14:37:15:05:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=813dd13eb4c62683237181f5cc3f9507e09bd371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:33:f5:80:fe:dd:c5:9d:6f:36:26:76:ee:
a1:4c:9f:77:de:d6:1e:39:27:f2:de:e7:cc:8e:0d:
50:3e:a5:cb:a1:36:d1:76:3d:41:86:7f:50:d7:ca:
c1:b3:10:81:28:34:79:ef:fa:5e:a2:4a:56:4b:9f:
c3:04:26:98:60:2c:ce:b5:e4:37:83:13:41:4c:d7:
99:74:7d:7f:06:fa:8a:08:9b:53:78:32:43:bb:6d:
24:35:7e:04:99:74:75:db:04:f6:a7:30:97:be:d4:
af:4a:ae:a2:9c:9f:28:47:92:7b:d0:55:70:f1:35:
ee:fc:fc:ae:a4:1a:dd:b1:a5:1c:1b:fc:08:73:9c:
12:01:c7:c6:ea:2b:51:70:4b:3d:33:9d:a4:f2:53:
47:f7:57:da:08:46:77:aa:5e:8b:fa:a4:21:77:4a:
b1:f6:11:e9:e7:9f:5f:93:28:e3:3c:9c:a4:3e:a7:
93:51:f4:98:78:48:59:b0:05:59:14:2d:a5:08:58:
98:70:5e:81:54:08:ee:02:d2:0d:d9:9b:be:98:c0:
7f:b2:b7:18:8e:5b:fc:44:fe:8e:e2:28:eb:23:14:
3a:05:08:69:de:f3:6c:c7:2d:7d:64:cf:3a:ec:ca:
bf:d2:a1:e7:16:e6:2f:ad:89:12:92:8d:e4:8a:67:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3D:D1:3E:B4:C6:26:83:23:71:81:F5:CC:3F:95:07:E0:9B:D3:71
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2e:cd:40:9d:97:94:c9:9a:74:2a:88:45:70:9c:92:4e:1f:
23:24:f1:2a:44:1b:a7:b2:0d:df:7d:b7:8e:6a:70:c8:f7:96:
e4:9a:c1:4c:c0:6b:99:27:93:b4:71:5e:14:ab:87:fb:29:2d:
2a:e7:bd:ed:ba:68:8c:3e:4f:65:81:7d:fd:04:a6:3c:df:e6:
2a:83:3d:af:94:86:fb:3c:f1:93:47:41:c3:12:70:21:44:58:
e3:da:f7:b0:81:55:30:2b:12:4b:88:79:66:a7:57:f6:ec:5b:
d3:55:ac:f7:d0:b2:e0:5c:8d:cc:47:cc:a5:32:22:0f:49:e0:
a1:d6:d5:9d:ab:dc:62:0a:ab:ee:3e:3e:58:08:41:7d:c5:15:
6c:4a:30:f3:16:71:28:d6:a6:88:f1:ce:3f:40:be:c9:76:ff:
c9:3e:bb:16:08:4a:e5:bd:8b:b6:6b:30:c7:37:3e:58:fa:ae:
62:be:17:32:88:8d:6d:c4:77:4b:92:3e:c0:b7:f5:ce:fb:29:
2b:09:ce:3b:5d:9b:dd:ca:70:c3:14:a5:74:5a:06:6b:c2:d1:
a3:3c:c7:b7:94:2b:5a:01:c3:d3:98:92:18:57:14:58:a9:90:
a3:6d:dc:76:43:19:ed:79:74:69:61:04:ce:f2:3c:0b:1c:2c:
92:3a:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:25 2025 by rpki-client