Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier: y3uXOB+xJQ5FqHKW4EFymbpY7oa7ZWPVklzSVWFnJ4U=
Subject key identifier: 7C:64:04:BE:24:CF:A2:B9:1A:BC:34:6F:97:32:D6:4D:2E:28:94:4A
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 0194BBCDD99C4C1E96A6FF17896D8B301CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: 4G96E7LAim56/rBdk6WIKcv4yxErOEbIsbPpSHLPSdg=)
2: epUYONx2mMHAiQMdD14emQB7r-U.roa (hash: SxHE/bA3BxkoeRagJK9EC66MO/tpuAW/+EUlbcMxgZM=)
3: r4X2HvAwh5ygol1cL2nGNDVz3U4.roa (hash: 7aCXdpb3SzbFP3HJ9KQNb5y78LcqzI5vEIV6FBttc2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d9:9c:4c:1e:96:a6:ff:17:89:6d:8b:30:1c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=7c6404be24cfa2b91abc346f9732d64d2e28944a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:33:bb:33:40:4d:f4:47:d0:ed:bd:ef:d6:
9f:ee:ff:d2:d5:b6:c3:b3:99:da:5c:36:7d:e1:a2:
7b:8f:6d:b3:ee:16:99:b6:41:bf:29:06:b8:10:06:
a9:6f:84:9b:27:0c:36:c1:80:31:2a:a0:5f:df:fd:
d3:de:88:6f:5b:6c:76:51:19:8e:97:69:d3:27:ba:
50:d2:09:f5:93:c6:e3:70:e0:e1:4d:34:d2:c8:66:
5e:ed:8c:08:11:6a:3e:cd:e3:8c:27:58:c6:bf:76:
16:61:ef:a0:21:f6:4f:a4:d3:5a:ba:2c:c5:29:90:
43:eb:46:29:32:52:10:63:fa:f9:c1:cf:1c:96:25:
94:13:2e:66:f3:41:44:8b:81:05:e8:21:9a:fd:84:
d0:56:a2:d4:69:a0:5e:ea:1d:5b:d7:e7:8b:71:ea:
81:0a:51:73:63:6f:49:37:72:f4:92:23:9e:9d:07:
f1:c3:75:09:63:19:74:25:7e:39:95:e2:99:6c:26:
c3:fa:2b:cb:51:51:85:13:1f:91:54:59:60:02:9e:
22:68:cb:18:9e:7d:35:e1:87:50:ed:32:35:41:72:
c6:f3:02:90:ee:c9:eb:aa:e8:38:50:f8:01:db:82:
d1:59:a8:b9:51:88:28:61:cd:43:0c:d5:ed:91:8d:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:64:04:BE:24:CF:A2:B9:1A:BC:34:6F:97:32:D6:4D:2E:28:94:4A
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a2:27:9e:3d:f4:b3:60:30:e0:11:1e:5b:b3:24:b4:b6:c2:
bb:ab:15:27:00:c9:2e:9b:c1:59:4c:eb:f8:9f:cb:d2:4c:72:
21:e8:70:39:f6:d9:70:e0:d9:25:f5:78:bd:b8:bb:d0:66:fb:
ca:ce:ba:e7:7c:23:48:3d:58:01:59:27:7e:3c:bf:92:0b:04:
76:1e:82:4d:47:ad:5a:88:e8:49:c3:97:8d:1d:a2:0d:37:53:
b8:02:73:dd:2c:7a:82:3e:73:b4:b6:b9:5f:4b:06:8a:c7:58:
bd:19:7f:f7:0c:e1:35:ac:58:38:bc:57:3c:41:44:8d:6f:20:
c3:f2:54:d7:d2:e5:6d:e3:4d:86:f4:88:0b:40:81:6d:41:6e:
eb:3a:fb:a0:f5:60:0d:f7:c2:f0:99:98:44:03:a8:67:62:21:
38:d1:09:ac:23:d4:d0:8a:45:09:3d:4d:16:ad:80:43:70:dd:
de:c9:65:9c:20:c2:19:f7:a4:f8:9b:ba:c3:90:ae:a0:5f:b3:
80:6a:63:bd:b6:68:24:02:61:80:77:68:c4:fa:25:9f:5c:65:
72:ee:35:ec:be:87:57:ce:20:a5:5e:d0:96:e5:5b:6f:d7:11:
a7:e8:bc:bd:dc:d4:20:41:69:de:44:0e:e2:c3:03:a7:cc:db:
e8:65:c8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:39 2025 by rpki-client