Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File: v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier: fdw/armun83EATWHTQEgmajxAHSGh3A46n+d36vIdzo=
Subject key identifier: FA:0D:C3:34:F3:15:0A:81:56:99:9C:C9:AA:5F:B7:08:C7:BA:0A:96
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 0194BD17C27115A5D4DF9FC9932250622F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 9UunLY0e7RvMMeMDRjD3u7_pf2Y.roa (hash: 7lRPIrPRKCCE3BPTd9dDNpxXDgXsPWg+ml+ju6JbueA=)
2: ncR4oR_y2D6exGXXU4466Dj_Hq0.roa (hash: QHWP1FBTjP+R0Pof3RRPjusJf04L/sCOEBJrDKRdhZ4=)
3: rOoYFHKRe7ghGBjkeruHV6kIlyA.roa (hash: elXY8PrAbFgsd98hRj7mkOX8iG0smL3sFgAD/6xBNtE=)
4: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: /v/4btcx++xxxeGwMaJlr5ePft8geo62WNTB0L8IBWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c2:71:15:a5:d4:df:9f:c9:93:22:50:62:2f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=fa0dc334f3150a8156999cc9aa5fb708c7ba0a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:70:85:05:a2:b6:22:6e:51:17:bf:7c:57:
9f:c5:8e:13:3e:ee:9c:16:39:5e:93:8a:87:67:2f:
c9:d4:9f:10:c0:1f:8c:74:cb:6e:cf:d2:c4:5a:88:
b6:25:98:96:9d:e7:85:a4:ce:df:96:1d:0a:5d:f8:
06:2d:d1:5f:61:9f:8c:2a:70:3b:d4:31:71:62:8f:
d3:c7:62:af:f7:88:b2:29:ae:7e:cd:2f:4e:13:9d:
00:f2:33:81:e8:56:00:e2:28:21:29:af:4c:83:72:
0b:e6:76:19:67:60:5d:69:25:f0:d6:82:c6:91:c5:
dc:75:2e:b4:2f:95:5b:47:ef:b9:5d:6f:95:b1:ea:
17:08:8a:25:0d:9c:e6:e4:06:3e:ac:93:49:52:cb:
fb:15:79:91:c0:8e:77:4c:1b:b7:49:c5:3d:91:e4:
8b:dd:16:ec:57:94:71:b8:bb:ac:c9:70:1f:c9:6e:
6b:c8:9d:ea:3c:ec:49:f8:a8:aa:2e:e8:66:29:b4:
ae:fc:90:d8:87:c5:2b:b9:a8:76:0e:82:1d:29:71:
ea:c4:1e:03:f5:6f:6e:2a:13:1c:0a:42:da:64:73:
48:ba:36:87:b3:8f:24:e4:b6:c6:e6:a8:d9:f1:d4:
43:5a:da:48:99:1f:0d:1e:7d:6c:e8:68:84:d7:37:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0D:C3:34:F3:15:0A:81:56:99:9C:C9:AA:5F:B7:08:C7:BA:0A:96
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fd:29:44:14:b6:2d:35:f4:65:53:52:d2:1c:8c:da:43:03:
4b:4e:af:d2:b4:02:a2:e7:b1:a7:12:db:d1:82:c7:f8:46:c8:
80:fd:db:ee:ac:23:77:1c:82:6a:22:8b:f0:97:b5:0c:3f:05:
be:9f:5f:94:56:6a:ac:e3:1b:73:5d:84:3d:86:4c:a6:8b:d0:
47:8e:14:35:6e:c1:b8:9e:d6:d0:12:5c:fa:08:59:5e:c2:de:
fc:f5:4e:53:0b:83:98:62:ef:ff:2f:92:91:90:58:ed:5f:c3:
57:e3:5d:58:b7:3e:8d:dd:93:3c:51:9c:bd:b4:ef:1f:67:5c:
e5:0f:40:cb:7e:7f:4a:1f:49:7c:cc:fd:2d:31:d2:49:e9:d7:
3d:95:28:5c:a0:d5:f0:ba:96:78:78:c3:e9:2e:06:32:50:3a:
0d:09:00:a8:9a:46:b6:dd:98:fc:2b:a8:41:25:a7:02:19:30:
28:e2:08:4e:b3:2c:66:44:d4:d8:b6:41:35:e4:74:75:2a:06:
c4:0c:d8:ca:04:b3:d3:de:3e:39:f4:b1:95:22:90:d8:bc:df:
13:63:27:7e:48:d7:b2:ae:62:af:39:83:0f:5b:52:54:5b:92:
bf:3d:4e:5c:ad:fd:35:96:e6:13:11:5f:38:47:2b:f0:20:76:
9d:23:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:33:01 2025 by rpki-client