Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
File: 1-FVaeIP5K5-bpCKpa045e_X7j8c.mft (raw, json)
Hash identifier: fURpD3nGy9OknyHxgm6G1OATScTjFBR4bdbmwEy95pc=
Subject key identifier: 23:3E:05:1C:EE:1E:89:67:CA:34:97:41:8A:EE:4F:5C:98:3C:F1:E3
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial: 0194BC04D0F33957018B0829626A1905EA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
Manifest number: 0D3E
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: 1-FVaeIP5K5-bpCKpa045e_X7j8c.crl (hash: AfPXTdL/ULfZt0aUlFkJ12oNJrDXHGjDzJVb2b38cWA=)
2: 5h1ttuT1xe8MQqiFLClQXEEG4xI.roa (hash: K15KK7htu+WW4WVVGCjjbJDrrjHd40ite1VZJn9QCX0=)
3: dL6QyTMH147RYvNbATR7wK8mAf8.roa (hash: lSk9mx0oL0nyVdSJ+hGB8xudUQAwa8IcLy2XJ8XP0tY=)
4: q1cKMx3v15DpBk7XfHsCbT0Hr0M.roa (hash: kJPl8z55kb+AOqX1mvjlXQAxwXPA4H1QahAgTk9/aUg=)
5: rm06Swzk55gS84j69N9wUHADa3g.roa (hash: EamVaUPfEGjAAZCep2zHyRQqfCPogilef0zQIPWb7CQ=)
6: zMv4vXM8dPStyIaP6YAH3FrSdFM.roa (hash: VWJ6HSGgCLyVghdMpKY1d9rx6m4eAxvybOUx+qVtZ3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d0:f3:39:57:01:8b:08:29:62:6a:19:05:ea:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=233e051cee1e8967ca3497418aee4f5c983cf1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:aa:fa:c0:1a:b7:73:8b:b1:03:56:e9:f9:7f:
fc:5c:e5:06:6d:be:a7:ed:4f:2e:7c:a5:1b:90:77:
f7:4e:3d:d1:66:f8:9f:4a:99:63:22:70:b7:2d:db:
ae:bf:8b:e2:f6:e7:27:97:b0:c8:3c:ef:52:a3:91:
f5:65:00:98:f5:98:16:10:1b:58:9e:69:e9:15:51:
0c:3d:66:79:7a:c7:83:d8:68:d6:b0:0a:af:75:70:
1d:0f:79:cf:b7:7c:0a:64:78:52:2e:dc:0e:46:d1:
ef:c0:b8:5d:2a:cb:70:59:c8:03:c5:92:17:6f:5f:
fd:95:21:ca:e8:24:38:45:06:56:59:35:bd:d2:6a:
b8:86:e0:f0:f5:e5:4b:28:e2:11:5b:6a:a4:59:8c:
f9:0c:82:8c:7d:dc:27:b3:89:d5:36:f7:7b:99:03:
74:66:93:5e:8c:01:e2:12:1d:62:49:e6:46:b0:2a:
04:65:1f:d2:37:7b:68:7f:fd:71:e3:32:ec:4b:9f:
86:59:33:75:5f:77:e3:eb:a2:35:2c:6f:cb:c8:39:
cb:e3:98:3d:81:2a:88:06:89:f8:53:4e:c8:92:82:
8a:c7:2f:c3:51:ef:22:71:d0:c0:07:cf:34:e7:5f:
fd:24:42:cb:5f:95:72:4b:64:1b:2a:78:f2:a2:73:
44:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3E:05:1C:EE:1E:89:67:CA:34:97:41:8A:EE:4F:5C:98:3C:F1:E3
X509v3 Authority Key Identifier:
keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0f:32:22:2f:41:5d:d0:0f:af:fa:4d:22:52:58:ed:c0:42:
0d:86:f7:0d:7a:cf:21:fa:27:8c:84:68:62:fb:9e:2c:ce:a7:
c7:a5:4e:8f:30:31:a5:f6:c4:f8:c7:72:21:ff:a7:eb:39:68:
e1:a4:8e:db:3c:83:71:de:8b:2f:2d:59:46:95:fb:b5:7d:ed:
09:41:3a:70:7c:9b:39:c0:3d:cd:b8:fb:1f:5f:ca:a3:05:99:
54:b8:38:be:c8:0b:76:14:f0:64:96:02:e0:16:35:e8:f2:06:
c1:11:f9:33:df:89:9a:c0:b2:9e:a5:cb:fe:66:09:ab:32:58:
b2:2d:f1:b1:0f:3d:7f:f0:46:36:2a:f5:01:d6:d4:a1:53:29:
2c:e7:d5:ae:e7:91:d8:d4:da:43:d5:82:07:47:32:ab:f9:49:
ca:97:a1:b5:d2:91:b3:fa:a3:5e:b0:96:89:24:b3:c9:36:04:
6d:03:db:6a:67:1e:46:d6:1a:10:b0:04:bf:f1:85:c7:1c:2e:
27:64:28:a3:cb:91:19:58:a1:73:29:09:49:4b:e6:ee:05:d2:
56:60:36:49:80:71:1b:a7:f7:71:9c:cf:81:5a:4b:05:f2:c4:
08:49:05:91:73:b1:b4:6f:d7:69:35:a8:d1:8a:09:6f:c7:de:
ce:dc:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:28 2025 by rpki-client