Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: 28gRZwMDg013f9bTtCls3xDaGMLMKtzttm6Rrd1fMiQ=
Subject key identifier: FA:FC:AA:72:BF:3D:80:85:D8:99:51:C1:5F:29:56:6A:C3:79:6A:03
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 0194BCA99BC545F261A318460ACE1618FF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0948
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: nd2mEoM182MlqnyU97QFBEBtYLc.roa (hash: H4CTJi+dex4a2tP/U9S7boExXOmFzvTZ0iE52ANC1z0=)
2: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: deJJmJkoqe2bHal3wjLeslvPlsSpI8lSoozsurh3iGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9b:c5:45:f2:61:a3:18:46:0a:ce:16:18:ff:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=fafcaa72bf3d8085d89951c15f29566ac3796a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:8a:fb:33:b2:14:53:8f:85:04:b0:c7:64:
35:67:07:b3:23:9d:4f:eb:d3:14:b6:26:ed:76:e6:
f3:6c:23:71:ff:14:32:7c:15:fa:29:a3:fa:e2:76:
23:fd:a3:66:8e:3a:7f:9b:12:5c:34:c0:a6:fb:31:
0b:f7:e0:5c:e8:01:6c:5f:83:1d:6d:05:a7:1d:cf:
c0:05:18:17:74:7b:cb:00:33:5a:54:9b:f7:41:a2:
b3:85:f3:a8:96:c1:a3:02:84:52:61:1f:16:5d:bc:
5f:20:91:60:9c:4c:5d:bb:60:ff:c6:3c:8b:4b:6d:
06:33:98:c1:d8:5c:9b:6f:2c:15:21:d9:b6:94:86:
60:ab:5d:4a:02:a7:18:7a:a3:4f:37:e4:5b:bc:6f:
eb:e8:05:db:52:97:54:76:cc:51:1d:5f:76:8e:32:
02:68:f8:c4:cc:48:d0:84:0c:ec:b4:e5:37:40:19:
4f:bb:d8:7c:c5:53:0a:0a:f1:c3:9f:6d:f7:db:f5:
a9:c7:09:0a:d2:d1:07:08:ee:57:2a:d6:53:a3:7a:
e3:89:04:21:2f:cb:5e:ed:d3:86:4e:22:1f:ea:17:
7a:b1:3d:40:38:a9:9c:39:fc:2d:4d:73:7e:cf:56:
f5:80:87:c2:08:8a:37:1d:f2:4c:b3:f9:ef:b8:57:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FC:AA:72:BF:3D:80:85:D8:99:51:C1:5F:29:56:6A:C3:79:6A:03
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bf:c6:72:c9:69:0e:2e:f2:3f:74:c3:f2:aa:66:c4:ef:9e:
44:7c:98:e0:44:66:ae:55:9e:d1:c4:a5:11:d7:e6:61:b5:c5:
cb:f2:4b:0a:dc:c3:9e:dc:eb:25:7a:11:18:5b:d9:12:fa:c2:
28:d2:5d:84:0a:36:05:3f:0f:27:6c:94:cb:0a:0c:52:d7:f5:
9d:73:1d:ff:6c:4c:45:8c:7c:12:f3:38:5f:71:65:ec:ce:f4:
da:64:48:97:34:c5:03:76:f6:45:7e:00:b3:82:72:81:e1:40:
0d:f5:25:2c:99:aa:fe:3f:fd:4e:7c:1b:c6:19:74:4a:d1:90:
8c:72:83:90:12:bb:1d:58:3a:bf:a1:86:10:da:dd:51:b6:86:
7f:6b:49:ea:94:4f:ed:93:49:65:0c:de:44:69:ee:c4:4c:0f:
8f:33:f6:f6:a0:80:d5:bf:23:c5:0a:72:79:28:16:6a:17:7d:
72:69:22:eb:86:55:eb:ef:46:8a:44:f6:7d:e9:3e:c1:87:1a:
a8:92:76:ed:e1:00:94:e4:c5:82:71:0d:d0:d2:f4:41:a8:a5:
b0:11:83:dd:b1:ba:ae:76:6c:07:44:15:f3:f0:44:c5:68:50:
d3:6a:6e:54:86:c9:d1:2b:f2:93:01:46:20:fa:2e:52:bd:eb:
85:31:e3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:25 2025 by rpki-client