Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: VrxNxL9suSuCrP76FSyZyjeakfSUrTt0jQQOmmnDYg8=
Subject key identifier: 53:21:95:B2:59:E5:8B:52:22:78:18:0C:33:D8:1A:26:1B:03:A5:2F
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 0194BBCE632797B0779152E65AF88B1C462D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 0E51
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=)
2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: q+W3Sg5ZmQDCXwmyG5Lsa3+cL+3rjEByDPa7Sqw7A3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:63:27:97:b0:77:91:52:e6:5a:f8:8b:1c:46:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=532195b259e58b522278180c33d81a261b03a52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:c0:c2:7e:0a:3f:20:2b:4c:98:d9:b9:07:
bb:64:62:8f:10:e0:1d:0a:74:ea:be:a9:8e:06:76:
cf:cb:ed:ed:da:88:98:95:21:49:f4:a7:f8:cf:4b:
3c:68:5d:0a:1e:22:d1:13:f1:ba:1c:66:1e:80:0f:
32:96:01:4d:b8:d5:21:0c:84:27:54:ef:74:0e:9b:
ad:bf:ec:f2:fc:c2:bc:eb:07:6e:55:84:02:6e:42:
0e:d7:7d:50:e5:7c:46:df:ed:5c:61:5f:ea:f2:ec:
4b:e5:3d:65:00:99:1c:34:19:1b:e7:92:84:32:c5:
0a:8e:88:55:d1:7c:9a:a7:73:d9:78:69:ca:20:66:
8e:b0:57:e8:96:22:f2:6b:ad:a4:ef:ce:11:e3:6c:
1f:56:07:50:86:a0:d8:c0:96:dc:c0:80:65:0d:f7:
88:59:ed:64:5d:00:68:5a:44:18:0c:82:1b:73:26:
93:46:ac:a6:d1:ad:96:50:ac:f9:69:8d:12:c8:de:
eb:22:6a:5d:8f:64:56:0a:12:d2:ca:c0:23:23:51:
47:d5:14:83:89:d4:df:22:a3:37:96:8b:55:db:f6:
f1:8a:69:97:fb:61:88:1d:d2:02:88:f8:29:0d:e6:
08:91:06:57:67:08:63:37:59:76:e5:ef:dc:92:72:
77:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:21:95:B2:59:E5:8B:52:22:78:18:0C:33:D8:1A:26:1B:03:A5:2F
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b3:c3:f6:de:2c:bc:68:3d:5c:5f:43:e7:ef:05:e9:ab:8c:
26:19:68:4a:9a:24:cc:98:33:23:65:34:02:4a:36:0d:36:7a:
5b:a3:bc:8e:f1:1e:b8:36:7d:bb:51:7e:9e:1b:9d:62:e6:a4:
6b:ec:56:c7:81:1f:a7:77:c7:9b:87:2d:63:d7:d4:2d:e8:e9:
85:4f:87:0e:61:84:64:86:74:e6:aa:66:a7:62:97:59:94:8c:
b3:17:2f:ae:d7:b7:7d:ac:cc:58:25:26:ca:b6:cb:ff:a2:2f:
ad:85:18:48:bb:b2:d6:5b:22:c2:9c:06:12:1d:14:cf:d3:9a:
a1:b3:27:5b:a3:46:71:76:57:00:1f:8d:e8:6b:8c:47:f3:44:
c8:60:94:02:5b:8a:d6:29:83:ed:70:44:d9:51:49:4d:f8:d6:
51:10:e4:23:9a:4b:92:db:24:bf:e6:ad:6f:c4:13:e5:75:71:
78:f4:f8:55:8b:fe:10:fd:cb:b7:38:7c:84:1f:41:a2:e0:09:
5e:8e:7d:d2:ee:a6:a6:fc:a2:a5:1c:0e:78:49:50:3e:0c:11:
81:7f:a4:44:11:e2:f7:56:6d:25:5c:55:68:11:0c:4a:d9:ac:
86:30:fa:3e:2b:79:86:aa:3c:4a:01:1c:96:e7:95:e0:89:f8:
bb:c7:e6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:44:04 2025 by rpki-client