Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
File: FZjXXo4y1ehH30qho1wpNEyXbiY.mft (raw, json)
Hash identifier: g+wnmV3rDnxaw6oDMPtMiNh57V1PQwX2fXakrFn6E7M=
Subject key identifier: 50:87:9D:1B:C5:CF:79:89:3B:79:A1:FC:71:48:88:2C:C0:EB:C2:EF
Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Certificate serial: 0194BD4E68C59D43D332B8307A9BCAABCFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
Manifest number: 0DFD
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: AIRZFXDpY9mQ7Mvu8kYb8OBEtUo.roa (hash: d5gxdyXpVK75f5B2dssNKeXHA5IUThR6PGmkaU8utQY=)
2: FZjXXo4y1ehH30qho1wpNEyXbiY.crl (hash: 97EGVM9X9CGwkI3ph3uWhs0aLWnSTyyCPR8IwQIWkh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:68:c5:9d:43:d3:32:b8:30:7a:9b:ca:ab:cf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=50879d1bc5cf79893b79a1fc7148882cc0ebc2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:51:0c:49:0c:0e:13:1b:a8:8a:e3:65:b2:4b:
14:bd:61:1d:31:94:97:c5:d3:7f:ff:56:46:41:7b:
54:01:1f:b6:0e:5c:41:15:70:1a:3b:5d:1d:e6:3a:
9c:1a:32:66:5a:4b:3b:e2:e9:f5:6b:81:75:ac:c3:
28:ca:0b:08:af:10:3f:68:b5:17:18:90:5b:dc:9b:
31:b7:a2:ec:ce:3c:e4:08:10:71:0d:e1:6c:14:9a:
c1:02:96:75:5c:fa:73:a0:90:99:fc:51:7a:8d:2b:
35:47:6a:d7:0d:0d:df:db:02:fc:2b:09:19:45:cc:
e0:20:64:e6:6f:03:b5:20:e6:b8:b2:0e:9d:eb:83:
71:18:1d:b8:e8:a3:0f:ba:29:9c:e5:21:94:d4:d9:
b0:5c:d2:2c:f2:96:61:2c:7e:66:74:95:a5:85:3e:
1e:f0:06:6a:5a:13:cc:52:17:7e:20:46:16:70:ae:
a2:1e:85:70:f8:39:e8:df:91:13:1c:88:ab:35:e6:
67:26:f3:3e:a2:0a:b3:55:bb:91:34:2f:e2:c0:0a:
54:1b:0a:5e:fd:1a:ea:f5:92:e3:33:44:5c:39:ef:
b2:fc:67:0d:c8:aa:c4:3d:97:81:14:73:9c:5a:39:
f2:98:83:f3:17:60:2f:8f:ca:49:02:f6:d8:07:24:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:9D:1B:C5:CF:79:89:3B:79:A1:FC:71:48:88:2C:C0:EB:C2:EF
X509v3 Authority Key Identifier:
keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:77:54:a1:f5:06:8a:07:80:bf:98:35:08:23:97:49:f4:3d:
08:f6:dc:2a:84:2d:48:1c:3b:b7:da:d9:1c:cc:d7:0e:79:bd:
1e:d6:35:3c:42:47:7d:60:5c:b8:55:74:00:04:37:dd:47:c5:
6f:e5:eb:dc:f7:d7:5c:ae:25:e7:9c:25:b2:77:f7:2b:37:1c:
e5:48:90:c4:1f:8a:a7:1b:23:c0:3b:21:54:57:8d:78:ee:c2:
59:cd:0f:dd:10:68:d3:2b:d6:e3:a8:6d:1c:12:8b:81:be:4b:
5b:78:e1:18:45:44:58:6b:6a:29:75:ac:a5:11:63:7d:8b:41:
00:4c:3a:5e:10:80:e4:1b:f5:39:7c:17:d2:ce:1b:f7:7e:51:
44:7d:81:8d:08:2c:a0:e8:df:77:26:06:2b:e8:50:5e:5b:ee:
e6:8b:f5:f1:3b:80:75:1a:ae:11:bc:c7:52:a0:75:be:68:d0:
5c:ad:aa:b1:a5:f2:c1:0c:71:30:61:f5:17:2c:2d:f3:53:fa:
43:dd:21:ec:5c:d3:6a:7d:94:06:1b:ec:ef:35:57:4d:8e:b3:
ee:9f:d9:79:38:3c:7c:fb:02:50:a7:3e:4b:28:d0:54:0a:83:
ff:8e:0e:15:91:58:1d:b5:7f:5e:ab:1c:98:1e:69:69:45:74:
a7:7e:f4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:49 2025 by rpki-client