Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: RkBgX7reCsstqjglY9XdvnlIuf9taUjIt1srXtagH1c=
Subject key identifier: 1C:8D:31:55:67:30:9A:69:F5:BB:53:BA:29:9E:23:23:08:2D:6C:7E
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 0194BCA987A7E2A32240695B8932616CAF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: P79ilXjNNqLG_ABRYWZBAk8XzIM.roa (hash: z414yhHihxRqPfk1ej5lxFnTCRyHE+z/dZVS4h4vn3A=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: /oxacNyGpEB1HbCmqHywkhnf3Wd/P5dIrEOpjzSMiv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:87:a7:e2:a3:22:40:69:5b:89:32:61:6c:af:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=1c8d315567309a69f5bb53ba299e2323082d6c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:2c:5e:32:3a:03:32:c5:d0:50:89:33:98:
3e:2c:2f:3c:51:d9:0a:3b:05:31:7e:26:3f:d4:9e:
12:11:c4:28:7c:1c:0b:d9:c1:61:cd:36:8a:31:56:
a4:d8:4d:4e:e3:51:4a:1c:2b:16:ab:29:c7:30:fc:
a4:ea:5c:81:d9:48:b7:ab:63:2e:26:75:cb:59:95:
bd:96:15:c3:dc:d5:07:d1:76:05:22:0b:a8:28:26:
31:71:2d:9b:aa:12:d8:9c:30:43:ca:39:75:10:b3:
e2:68:34:29:9c:c9:dd:4d:b9:41:2c:b5:d0:d0:ce:
dc:42:e3:7d:1c:a7:e5:8a:fa:91:81:b8:e3:f9:c0:
51:3d:c5:c4:a3:bb:c6:0f:05:71:09:d6:29:a8:64:
78:b3:92:2a:ca:3a:77:62:c4:76:db:4f:04:a5:d1:
52:5a:aa:cd:55:1f:d2:c9:ae:b9:9a:7d:81:20:da:
ef:c5:fe:32:4a:b7:53:dd:ba:7e:7a:fe:a1:58:e4:
74:8b:b4:59:69:43:1d:4a:19:79:b4:fd:7f:d7:9f:
c7:d4:62:8d:43:15:83:9c:c4:d1:28:76:17:ef:8e:
95:64:14:bb:68:0f:22:ca:13:3a:7e:32:61:f5:14:
5b:30:6e:61:49:81:ad:64:8a:3f:0c:15:3a:39:c8:
56:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8D:31:55:67:30:9A:69:F5:BB:53:BA:29:9E:23:23:08:2D:6C:7E
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c2:a3:a6:64:4e:ab:63:e8:19:5d:49:ff:27:88:7b:b9:a3:
68:18:55:15:3e:fc:f8:a8:f8:57:6c:28:0d:3c:be:aa:a1:a6:
77:b1:55:f9:8f:8d:f7:c7:fa:0c:a2:54:07:a4:86:71:6b:09:
87:76:7f:b8:cc:88:6b:46:75:c6:25:b3:82:d8:c7:8c:a6:96:
0a:77:62:36:d2:5b:dc:b3:32:12:85:7c:1c:0b:b5:64:1f:a8:
23:9e:f6:6a:8e:48:ed:58:90:2e:e6:aa:32:12:c4:23:1a:26:
c8:b2:be:f7:47:e2:18:65:44:b6:c9:db:b2:04:31:96:4b:9f:
5b:07:b3:4c:b8:c3:4b:98:b3:31:00:8b:89:56:68:22:cd:d6:
53:61:dc:1d:bf:95:db:60:0e:71:01:ff:65:d6:c8:f8:d1:0a:
06:87:00:7c:25:fe:85:2b:1d:d1:2e:f8:32:d3:53:ca:e7:95:
c4:9e:38:c1:f1:41:96:fd:98:de:a7:21:c5:72:fe:04:43:f3:
0a:b3:3d:d4:8e:79:e3:3d:bb:27:d8:3b:c2:c2:64:d6:78:b6:
c2:65:80:b5:76:c3:60:5a:53:22:0e:0e:b5:74:dc:71:b9:6c:
57:a0:53:84:49:77:3a:c4:09:c5:1d:31:dd:39:68:4f:a3:8c:
0e:3c:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:40:42 2025 by rpki-client