Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
File: fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft (raw, json)
Hash identifier: 5086tahnnRKfbFltFOWlDFnYRRqSmYtjrgU/lha0xXQ=
Subject key identifier: 56:7E:1D:BA:AB:75:8F:5E:78:B9:C2:01:83:D6:76:60:E4:67:58:C2
Authority key identifier: 7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
Certificate issuer: /CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Certificate serial: 0194BC7307EB5AC1275883D6CB3437BEE6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
Manifest number: 0273
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: 7IU0huufqQxYxItg8zFZPOwzYRM.roa (hash: I4C8M2jxvU1m60xK7AT2Uz7jOA8Cd0LrtZ3lmEnNBLc=)
2: fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl (hash: Uk7ciMKIfg5Bd7/kAMG4bKhslGOOobUzw9ucB/RmkpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:07:eb:5a:c1:27:58:83:d6:cb:34:37:be:e6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=567e1dbaab758f5e78b9c20183d67660e46758c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:bc:8e:b0:85:d8:f0:b1:e9:cc:48:b7:2b:
d7:47:3b:7a:62:0f:98:f3:56:b5:47:17:d9:22:d6:
f2:cb:e9:16:d7:6d:e3:3e:42:00:f2:6e:61:55:5d:
71:a1:aa:38:12:4e:81:a5:ef:29:ec:ad:aa:30:7b:
4c:c0:25:cd:a7:8a:0e:c1:8b:31:6a:ea:c2:05:96:
10:60:e3:5c:ba:2f:b0:1d:8d:46:8c:e7:5f:7f:df:
d7:d1:c4:6b:83:70:b2:4b:b1:e0:84:1e:94:ec:9c:
27:77:9d:48:28:ee:1a:ac:fa:17:ae:89:1c:3b:d9:
94:2a:18:32:79:14:a6:56:c1:01:36:c7:5f:bd:91:
06:e9:72:16:af:84:86:85:29:39:93:b9:02:ca:a4:
79:71:c4:bb:00:a8:f6:22:1c:dc:d4:21:34:e5:3a:
3c:b3:fa:24:79:4e:fb:66:63:42:b4:b7:a4:29:37:
e5:37:ef:7d:74:50:e5:c2:da:03:b7:60:ee:d2:e9:
4b:1b:19:2e:11:ad:17:b5:4c:bf:d5:b0:db:1e:02:
55:78:2c:09:45:72:f6:8a:d5:d9:1c:57:d5:7d:c1:
45:f0:e9:85:e4:d1:a8:ce:68:f0:5e:59:75:2e:91:
38:79:2a:01:13:6c:12:b1:7a:33:2a:27:c4:a5:bc:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7E:1D:BA:AB:75:8F:5E:78:B9:C2:01:83:D6:76:60:E4:67:58:C2
X509v3 Authority Key Identifier:
keyid:7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:20:40:a0:a0:1d:1c:1a:57:dd:ad:2f:46:97:ba:6f:28:a0:
28:64:6d:2f:a5:d6:1c:c0:86:c0:f6:b7:e3:93:da:b2:a9:67:
6f:a8:fb:9a:c0:e3:9f:03:7f:fd:04:91:85:a2:45:10:84:b9:
8c:0b:6e:83:e1:56:2a:9a:33:b7:42:e6:f3:bf:ef:1f:28:b1:
2e:c0:e7:10:9c:be:b8:f4:50:5c:f5:7b:03:29:f7:8a:a4:ba:
e3:0f:7b:fc:2e:dc:26:c5:cb:00:ce:0d:a2:ad:9f:f3:80:76:
82:f3:03:f6:7a:b7:21:f0:5a:db:03:49:15:dd:1b:2f:fc:ec:
26:b0:ca:14:35:21:6d:eb:a9:3d:55:84:49:9d:37:f8:c1:0f:
3e:ec:4a:0f:84:4e:00:8c:01:ff:10:83:9f:7d:90:0d:72:d5:
ff:95:f9:6a:5a:93:c5:0f:f3:d6:95:54:9d:64:c8:94:76:d4:
41:1b:11:8c:6a:4e:f4:d6:bc:a6:c6:23:bc:81:74:d7:15:67:
2e:ca:6f:e2:21:d4:92:15:4d:32:cb:c4:d4:a6:a6:93:26:d6:
e9:fe:36:86:0a:ff:2a:ca:f7:31:df:71:ee:35:f5:73:21:f8:
36:8c:1f:2a:6e:bd:0c:6a:54:fe:41:22:23:73:eb:45:57:16:
4f:36:35:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:33:58 2025 by rpki-client