Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: 6N9u+MQogyKEj2jwCFgKDT7c+vrMMk1uT+ha1YULagA=
Subject key identifier: 57:0B:1B:38:74:32:6D:BF:AB:48:4D:60:8A:9E:86:5B:CF:F2:02:2A
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 0194BC727F7E0176F412A261A04A711D5578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 1402
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: WqjB7EtZkSL-ePfOxy2nv62eOkA.roa (hash: PG/xFOwvIaW9rUlAX7rZLKuzOPksgvVi2XmtGvzJW70=)
2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: d7jjmGQv7YdPkhjK2zsGM4C4ke1YYn2XiCofIf7Psos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7f:7e:01:76:f4:12:a2:61:a0:4a:71:1d:55:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=570b1b3874326dbfab484d608a9e865bcff2022a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:28:21:4f:f3:e2:f6:10:8d:e8:0f:a6:bd:
f1:07:ec:1c:12:97:74:f0:fd:b1:d8:2f:05:39:c5:
c1:a9:2d:4a:ae:aa:1f:92:e9:b1:85:c7:f6:da:9b:
df:f3:a8:4b:f8:a8:1f:e3:28:a1:e1:79:39:46:14:
63:03:de:27:98:7d:40:f6:29:f2:66:9c:24:ff:ed:
25:9e:77:e5:d0:f9:45:69:ec:c8:25:d1:70:0b:98:
9e:bf:8b:d6:64:1e:53:87:e9:27:e8:21:f5:de:cc:
ef:0c:94:47:3f:0f:10:74:20:b8:e5:d0:4f:e5:60:
99:33:a4:f0:85:97:27:5f:95:24:23:59:f7:21:c7:
3e:cb:bc:ca:48:ed:12:cc:3e:5c:d0:d2:38:88:41:
6d:31:43:6b:f7:fc:2a:16:33:f3:7b:53:b4:5d:27:
0f:29:93:89:87:7e:55:0a:c3:7f:51:45:d2:91:33:
68:5e:46:12:0f:30:de:a6:47:6c:d5:c7:64:94:5b:
c9:54:74:c9:be:13:61:18:75:ce:65:7b:db:cd:44:
69:59:ee:25:d3:2d:d7:44:60:51:ad:b4:77:dd:c6:
74:9d:93:16:60:6a:fe:74:25:c0:6a:71:52:ce:7a:
32:bb:b7:80:9e:87:6c:58:59:37:a6:44:e5:82:fc:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0B:1B:38:74:32:6D:BF:AB:48:4D:60:8A:9E:86:5B:CF:F2:02:2A
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9d:44:6e:d5:f6:a9:e7:88:83:b3:97:55:19:e6:fb:c7:ce:
cf:93:a3:17:4f:e0:23:77:6f:78:d0:c2:b8:24:cf:4d:2b:f6:
a8:4e:fb:b3:06:3a:2f:ee:34:38:28:c9:b6:2d:9d:09:67:78:
62:e5:20:f3:aa:00:7e:bd:07:b0:7e:4c:a8:24:90:03:e5:b9:
50:87:60:03:58:80:e0:55:77:8b:f0:70:34:d8:5a:5f:ad:38:
13:ad:93:50:ff:e7:ee:a3:48:0d:cf:10:61:bd:c8:a9:9f:45:
ba:7f:75:8a:1d:a6:de:9a:f7:1c:0b:13:3c:e8:27:ff:86:30:
89:8f:65:8b:fd:43:87:90:fa:2f:4f:a5:7b:0f:71:f8:7c:b0:
62:81:10:1a:16:a6:79:17:17:9f:50:22:8a:13:e8:a1:c8:4f:
70:62:97:6c:c7:82:40:3f:1f:26:b6:53:c0:8a:1c:0e:84:03:
30:10:54:5b:1c:95:e5:62:a5:17:72:b9:8c:e8:f3:0c:e6:28:
39:a6:12:21:e0:23:ac:f8:88:13:50:36:76:17:a8:e5:81:a1:
da:e8:25:09:78:d0:07:ab:43:d1:f8:76:d1:52:9f:22:86:5a:
41:ab:d9:81:77:62:3e:96:c1:40:3a:b0:66:60:45:f4:4e:36:
9a:7a:61:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:53 2025 by rpki-client