Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json)
Hash identifier: EH2CzFP4XclusFg4/ErcXogQHDeiDvDTY2iPH74+JtI=
Subject key identifier: B7:06:D0:6A:D1:4A:49:37:B3:3D:81:6D:FA:31:96:4F:59:8D:94:80
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial: 0194BCE0AA00A5D10FE5D4BBB68E9FC450FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: mPNF1tl12dtdLlFFTVVlg/u6zX9nDRFoUF5kPSq0L0o=)
2: zCcp7j-FTR7h6zyRr__6kmhwg_M.roa (hash: ep4Wt4XOrawaaEnM0c8/+z8Ud6DA2WUnVWDUZ1tn3mc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:aa:00:a5:d1:0f:e5:d4:bb:b6:8e:9f:c4:50:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=b706d06ad14a4937b33d816dfa31964f598d9480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:fe:60:f1:ee:b6:2e:1e:85:ca:0c:10:0c:
84:23:2e:59:b0:42:39:4b:50:35:43:ab:e6:5a:93:
4e:34:1e:f2:e6:28:15:54:6e:7b:74:5c:50:25:6b:
d4:f4:fd:91:45:d5:48:cb:3f:9c:45:6b:cf:77:65:
d9:8a:2f:3f:ea:d6:4c:fc:d2:53:88:d0:d1:f9:ce:
fe:65:88:0b:fe:5f:0a:a9:f6:d2:c7:ef:8e:90:99:
6c:b5:aa:c1:19:38:b2:6a:aa:13:df:fa:d6:c5:c2:
60:22:0a:7b:63:43:2c:72:00:12:2f:30:f6:ca:83:
9a:08:3b:7b:0f:6e:50:9a:e5:a6:17:76:55:92:4b:
68:4a:ff:28:b4:20:d8:12:72:96:45:81:fd:68:d3:
c0:c1:2c:8a:7c:be:39:ad:9a:4f:30:00:17:58:b1:
77:a5:c9:b8:26:aa:d4:d9:5f:57:8e:2f:39:25:de:
65:22:b8:3b:64:04:1f:89:1e:e0:18:3a:42:b3:10:
04:5b:99:d7:6f:9f:9b:f5:13:57:13:32:05:84:9a:
e1:b7:83:5d:89:ad:28:b1:10:5b:32:b2:ec:03:e6:
a0:c2:03:04:c3:2f:cf:eb:87:4b:80:5a:78:1f:19:
b8:9b:a6:f2:40:53:fb:45:af:e8:71:f6:da:89:3e:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:06:D0:6A:D1:4A:49:37:B3:3D:81:6D:FA:31:96:4F:59:8D:94:80
X509v3 Authority Key Identifier:
keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c7:fd:de:e1:ce:58:6a:1e:3a:55:91:cd:b4:3b:58:f5:85:
7b:23:7e:3e:4a:d4:57:15:7d:56:c9:1d:04:b1:e8:40:e1:d9:
62:60:65:9e:6c:a3:8f:de:63:26:7b:ac:99:95:67:9e:40:fb:
87:5f:13:68:ca:72:fc:fd:b2:0e:1f:ed:82:cb:66:0c:f9:e9:
e2:2f:8b:8d:7b:db:52:39:32:f6:a4:a7:dc:bd:58:41:2d:fb:
3c:1a:a3:a4:ce:9e:40:00:ce:75:42:ea:58:07:6f:d3:2c:13:
9e:55:e6:52:ff:5a:00:12:ff:7e:06:4f:f7:19:eb:88:7e:8d:
c5:3d:94:ff:db:94:cb:3f:e6:b9:a0:2b:ff:ec:9a:8a:72:45:
37:d2:56:03:84:a6:bb:19:2f:6f:0d:35:e3:17:f6:92:ab:fa:
60:42:fc:16:0d:f9:00:b1:57:ef:83:09:27:db:65:22:5f:84:
b3:3d:d7:98:70:14:fa:a8:33:85:da:64:8f:1a:88:cb:3c:6e:
5b:a4:29:ae:53:5a:0f:fa:43:a8:33:05:6a:27:dc:03:8a:40:
46:34:96:64:33:43:90:85:d3:e6:93:68:48:7c:d8:f3:08:15:
ae:6b:bd:66:7c:09:f1:28:99:4d:39:da:e2:3f:7a:13:82:d5:
19:e2:bc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:48:18 2025 by rpki-client