Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File: fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier: p0gAkk3W9wmJeTa3HkgXzcg1TDdV7RvImP65Flk0mws=
Subject key identifier: E9:72:4B:98:CA:F8:92:DA:88:47:54:B5:27:C8:EB:2E:B8:95:39:72
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer: /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial: 0194BC04F12944875D1CA87F841C92A5AE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number: 0EE8
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 9EqEs9kwmY_afaGGWiQxlVt0aF4.roa (hash: 9tO3YJsoJl/Lblpr3bNKOp6wQ25w+0SVWvdi5BP+Als=)
2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: WO44O8PfNLVhUyd7+ZIHTpCKOWJ4+GVEyEUgms1DbtA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f1:29:44:87:5d:1c:a8:7f:84:1c:92:a5:ae:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=e9724b98caf892da884754b527c8eb2eb8953972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:97:5d:b8:04:f5:20:22:5d:2a:03:ee:2e:
27:50:e1:2e:f7:6b:c0:34:ae:e9:01:15:4e:80:14:
da:cd:a5:16:23:5b:52:df:bf:92:e5:ec:d9:2e:21:
9b:39:02:86:10:b2:40:a5:c6:48:c6:51:5f:8b:c0:
ab:26:3d:31:24:84:3a:65:3a:83:c6:a2:08:7f:9e:
f8:fe:65:7c:50:a7:7d:13:3e:68:05:e3:a5:c8:c9:
2a:a4:fd:1c:3c:55:dd:79:80:be:bb:e1:d7:c9:a8:
1e:af:c8:75:a1:41:b0:91:aa:da:31:10:8c:b6:7a:
f8:25:b2:cd:22:22:d9:85:89:f1:a2:28:b7:32:b1:
53:b8:8d:0a:97:1e:58:96:af:76:d4:72:d4:67:06:
8e:8f:94:63:d9:3e:d4:f4:12:a6:73:5e:40:e5:65:
0b:88:e8:32:99:f8:f6:61:f0:4e:9a:75:12:66:be:
34:29:6c:c5:a9:99:a7:2d:97:83:c2:b0:10:51:10:
43:c2:65:61:93:ef:f9:85:42:fc:86:a3:7e:e9:ed:
47:3e:a4:35:11:9a:03:4a:13:f1:41:e7:07:2e:d3:
b9:e2:68:cf:9c:04:d5:d7:c0:a4:de:59:7c:f8:1a:
ad:ce:1f:9f:5d:85:70:97:c7:64:e6:94:10:57:aa:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:72:4B:98:CA:F8:92:DA:88:47:54:B5:27:C8:EB:2E:B8:95:39:72
X509v3 Authority Key Identifier:
keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:47:26:1d:db:98:0e:e9:b1:3c:4a:24:ed:48:70:08:06:a6:
dd:b0:3f:2e:0c:31:89:67:fc:cb:8d:b8:f3:78:da:8a:f0:d8:
b0:91:7b:2c:7d:a5:50:8e:3a:c5:bf:ed:58:22:a7:91:38:79:
48:fc:03:50:f9:37:da:86:d5:56:e6:13:37:68:a3:3c:0d:e1:
23:71:62:7c:dc:4b:04:44:48:03:ba:4b:f1:fa:75:98:ed:0e:
1f:e1:22:f0:b8:ee:65:13:1d:d5:67:46:3d:c0:bb:a6:d4:3f:
f2:7b:f8:81:e2:6c:96:42:d0:fc:79:d1:36:9b:c3:d4:c0:f4:
68:57:7d:76:98:3f:d5:b6:1b:1b:19:b6:2a:d7:15:8e:d3:e1:
7f:b9:17:f4:61:83:1a:9e:05:a3:6d:d6:38:2b:09:19:4e:a8:
cf:f8:25:82:80:7b:b3:4f:05:12:ba:3d:04:9d:62:25:af:a9:
ea:fe:90:1f:98:f1:0f:55:09:30:2d:9c:4d:7b:63:4f:0d:28:
ea:88:79:de:6f:ae:8d:3f:68:ab:43:5b:a4:8f:b5:0a:f7:94:
e7:65:cf:b6:9f:fd:75:a3:e1:05:65:3c:3f:37:fb:71:d2:4f:
2a:00:aa:10:1b:01:15:e8:18:17:42:a8:5d:56:1a:26:e2:1c:
4e:1f:1e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:11 2025 by rpki-client