Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier: vw1kVfOeDbGyd34OlC1ueXoM1InRX1WSfqN5SkZicGM=
Subject key identifier: 79:92:D2:D7:70:CA:A4:1D:27:A8:CC:B4:BF:DF:FB:42:74:86:0A:9F
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 0194BBCDC2578280BE3695BBACE5FE18BC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: NvmfsV1sm7XmyjVKzPOWhb7earQ.roa (hash: r7bWWSDXyiXMj/Swi3flONfAIYfEqRkATWw60gas71A=)
2: WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa (hash: N+pPrOkjdISbUNAALF5nqmKzIaYbhj0lt6NwOuwgniw=)
3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: XmiNI++EYW1gdBgVOCgPEORnz74wsxZj/h5eC160fhU=)
4: tLoY5nfmVJWTJGYh886gVbz0Hf0.roa (hash: g2GCG3am8xDu8ahhY94JoBYaTCS9zIT5JVCSvfgRMSE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c2:57:82:80:be:36:95:bb:ac:e5:fe:18:bc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=7992d2d770caa41d27a8ccb4bfdffb4274860a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:60:79:c1:65:3e:47:a6:ff:64:e0:be:ec:
fa:c2:e4:8e:3b:80:7a:52:c7:95:33:2c:3b:6f:73:
6a:f2:c5:a9:9c:73:05:99:ac:e0:20:47:7a:53:ac:
27:cb:73:45:dc:2e:a9:bd:57:71:29:c3:89:17:a5:
5c:05:98:0a:4b:9d:7e:36:93:2c:91:b3:c0:ea:bd:
9f:39:42:02:70:52:9b:c4:cb:01:1f:f0:1e:37:bf:
32:2c:9a:29:72:23:65:17:b0:81:a6:48:4e:9c:fa:
b7:92:ce:3f:17:91:f0:f1:ab:5f:14:ba:4f:79:de:
b0:7f:03:d6:11:24:84:c5:60:53:56:05:8e:f1:f9:
70:45:c7:37:44:a1:a5:f6:d3:9c:7e:9c:e1:e8:09:
9a:e1:d3:16:31:23:e2:40:58:0c:30:bc:08:28:e1:
99:a2:6a:17:37:ab:6b:d6:59:0c:b4:2b:74:3d:bf:
45:3d:f0:02:5e:63:de:6e:a2:e4:c7:1e:4d:6d:44:
5b:5d:56:09:0e:63:99:d0:d8:0f:8a:a3:f0:dc:10:
ab:7d:a0:b2:6f:d4:72:da:8c:59:ed:fa:77:d7:a8:
d5:ca:65:74:00:e9:af:45:12:f0:31:97:11:2c:84:
1e:1b:b2:57:46:8b:00:0c:a4:26:cc:f3:84:0f:04:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:D2:D7:70:CA:A4:1D:27:A8:CC:B4:BF:DF:FB:42:74:86:0A:9F
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:83:7a:f6:e0:80:0d:9a:c8:fb:9e:8c:1a:cf:65:09:e6:4c:
2d:ab:cf:43:e8:9e:21:01:a6:90:29:f9:85:56:0a:d4:cb:78:
c2:55:4e:da:0c:32:36:5b:33:c5:25:d3:05:a4:ae:35:c5:0c:
b5:aa:7d:b3:1e:1c:12:87:22:ac:95:81:35:f2:83:31:4d:cd:
f0:22:d7:d6:c2:fd:b8:90:14:bd:18:98:3b:47:82:fd:b4:91:
94:f6:2b:36:13:8d:7a:5a:db:b9:10:4f:f6:4d:6e:52:72:46:
95:c3:9a:1c:82:83:05:30:cf:f7:8e:1f:95:e6:0e:79:2c:9a:
c4:e7:6d:57:17:07:20:a6:81:e3:c5:54:3e:3d:e4:45:41:12:
4e:c6:cb:7d:7e:a8:58:00:1d:ee:52:08:fa:13:2e:48:a8:02:
99:6a:ec:63:9c:94:01:2a:09:9d:7e:a6:b0:44:27:da:f5:0f:
62:a4:d6:30:65:76:50:27:b5:42:58:eb:a6:4b:73:7e:49:0e:
60:cc:dd:46:a1:c9:8d:84:27:55:a5:a7:80:8b:c0:85:26:a1:
94:f1:b3:92:bf:48:7d:ef:7b:5e:aa:49:28:c9:39:8d:36:2b:
b8:03:be:08:54:7b:c9:53:3c:58:e7:dc:99:24:87:bc:52:a4:
3f:4b:20:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:53 2025 by rpki-client