Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
File: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft (raw, json)
Hash identifier: rvhjfVFZqyqXte0Ekqo8g9WL81Lurv8soVlokzfm8kA=
Subject key identifier: AB:07:7C:66:1B:11:FB:60:7E:9C:05:5E:E2:DF:D8:5B:10:2E:EF:C2
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 0194BD4ECA920C5D4EC503444A8BA603876A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: ZtCnXbp_YrwgCnKLVKnV0WSmOcU.roa (hash: kH4jiDgmQVBszMKQiiqGuVOByozNrdgPlqnsPcoBxDY=)
2: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl (hash: ZvXzdFucShEwFh/AN7o1j33SUqtKmQfzjwpdjDuYmVk=)
3: uklhr2EyG0t3uT3k6llXTSBL2L8.roa (hash: g5RYlitmLR15fm6PqKoImrqzTC0R3yuzCJ3CcwejS1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ca:92:0c:5d:4e:c5:03:44:4a:8b:a6:03:87:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=ab077c661b11fb607e9c055ee2dfd85b102eefc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:bc:37:6d:86:b5:96:aa:0c:6e:ca:22:05:
5f:7d:38:d6:8b:83:b4:c0:ff:2b:62:80:0f:15:72:
5f:b5:82:cb:2a:0c:8e:d8:c6:a5:1b:47:ef:ac:22:
41:a3:3b:e7:b8:10:9b:4c:cd:a0:00:76:12:c4:e2:
a8:40:9d:21:60:e6:c5:53:77:04:38:94:cc:ae:03:
6b:f2:99:3f:9b:7f:34:b6:56:fc:a1:a0:a6:50:3c:
69:35:4a:4c:7e:48:3a:04:cc:95:f1:db:30:22:a1:
00:83:37:03:d5:61:d0:99:5a:53:ec:e3:2d:b9:ac:
9a:35:25:a4:da:3c:14:44:75:28:6b:75:78:b3:d9:
99:1c:9c:a3:69:63:f3:f0:4e:48:7f:6e:13:c0:75:
ba:7a:b8:4c:95:08:8b:fa:ea:07:c1:b1:65:20:d6:
63:2f:88:c2:7c:3e:7c:92:b2:75:b8:84:9a:ff:d9:
c6:68:ab:7d:3c:a9:13:29:a9:95:b1:db:df:4a:b4:
63:bc:b2:03:bf:54:78:b9:87:9f:87:22:c3:7e:3f:
64:5e:74:4e:1f:31:4b:e8:67:cd:5e:cd:a4:9e:38:
90:b7:0b:ee:a6:47:29:d8:18:52:82:2b:b9:b4:17:
50:28:8c:bf:81:a5:9f:01:b0:7a:11:b1:bb:d7:7c:
df:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:07:7C:66:1B:11:FB:60:7E:9C:05:5E:E2:DF:D8:5B:10:2E:EF:C2
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2b:37:a0:fa:38:45:8b:3d:fd:66:1b:8f:3f:a4:a0:f7:f0:
d7:6f:1f:fa:43:b1:3b:f1:1f:8c:12:38:5e:6a:d0:00:d1:82:
5c:1e:41:83:2e:ab:36:d1:d9:b9:0f:86:c2:bd:2e:41:07:7b:
8e:6b:bd:88:96:81:19:f6:1d:fc:8f:0d:5c:c2:d7:fa:28:94:
dc:7e:7b:bd:d8:58:29:f0:7b:c0:ca:97:f5:b1:73:9c:00:d2:
ca:3c:a9:56:8f:4a:27:bb:90:68:d3:0e:b6:8a:f8:5c:cc:2a:
04:e1:d5:2a:1f:b9:ef:dd:40:dd:e3:02:33:3e:ec:66:f9:16:
52:18:6b:05:37:66:2f:b7:d7:65:56:2a:38:b6:19:06:87:73:
f1:da:75:f9:bc:2a:87:2b:e3:d5:db:26:f5:7a:9f:bb:7d:ef:
15:a7:d2:27:d3:c6:13:9c:77:81:36:22:78:93:fb:d0:2f:c0:
39:74:52:81:79:e9:0d:30:d8:5b:29:3f:bf:72:11:e7:d3:d2:
94:a0:e2:77:e8:c9:15:37:2d:5c:5c:0b:42:eb:5f:0c:8b:93:
e9:7a:6a:38:e5:f1:6b:4c:53:d5:4d:18:a6:72:59:2b:66:44:
38:33:68:ea:b4:7d:1f:20:e5:3e:ec:4f:a9:31:9c:54:f2:8d:
93:2a:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:47 2025 by rpki-client