Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
File: _ejRxqr0qT_0G7-hvR2sYZfVlXU.mft (raw, json)
Hash identifier: fXDDpv9VoRQs2CXL6hwxn/bQT5mt6HX6J0j4VDeg7cM=
Subject key identifier: 5C:7D:CD:D0:77:4D:5F:8F:9C:33:B0:5D:A9:3C:78:52:B2:A7:E8:D1
Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
Certificate issuer: /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Certificate serial: 0194BCA9C72217E4325BAE56A68F18421E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: _ejRxqr0qT_0G7-hvR2sYZfVlXU.crl (hash: kEDHPeitzK1yvLFoWGtawcG+5U6GVfLuEKIhCrul1To=)
2: ogdJ5zX5wTF7smlXdUUiP3O_2TY.roa (hash: 0hvRawGMcRsHAlIFZoRJONgavYCSdSg9j7QPcw+vZig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c7:22:17:e4:32:5b:ae:56:a6:8f:18:42:1e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=5c7dcdd0774d5f8f9c33b05da93c7852b2a7e8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:86:5a:ca:26:94:24:56:9c:20:85:1b:09:
79:65:86:39:2d:a5:75:23:1f:99:3e:86:a4:14:61:
80:3e:86:96:25:06:56:07:de:61:c5:7b:ea:5d:4f:
c6:1c:d5:5b:47:73:16:6e:83:e4:02:68:84:ec:38:
46:22:25:37:f3:f6:8f:80:c0:ca:46:b2:72:12:b2:
68:b6:4a:dd:31:4e:f4:08:21:e7:d1:d1:99:fe:31:
a1:9c:08:c4:8f:bb:4c:ac:ae:4e:33:d3:9e:5f:50:
dc:b4:93:3f:e5:45:5f:60:90:f0:3a:ab:f0:37:ad:
90:ff:95:b7:e8:1b:ff:11:2c:04:64:45:dc:30:53:
fe:a0:b4:7d:3a:6f:e7:d3:ae:b2:ab:76:aa:d9:e7:
11:78:35:96:8e:55:d0:77:41:ca:b9:a2:92:c2:c8:
74:c8:97:ae:24:37:03:eb:9e:f2:72:d2:f0:5f:97:
e3:0f:be:3f:b5:6e:da:98:a1:db:a7:61:1e:f3:81:
d0:b0:ea:d2:77:9c:52:51:99:3c:26:88:48:5d:15:
ed:d9:05:26:51:57:63:bd:29:35:c1:79:ec:b2:55:
6c:97:0a:52:de:89:34:93:08:2f:2b:6c:31:42:74:
9d:b1:e3:5e:c9:4f:5f:88:3f:3b:bb:b4:ac:0e:dd:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7D:CD:D0:77:4D:5F:8F:9C:33:B0:5D:A9:3C:78:52:B2:A7:E8:D1
X509v3 Authority Key Identifier:
keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:94:01:f9:9e:3e:01:ff:af:7d:cf:37:a5:03:84:88:de:5f:
b6:66:14:ed:3f:a1:46:f3:b9:03:09:ab:35:ae:a6:1a:90:db:
68:40:bf:df:4b:61:e8:ab:bf:70:bc:a4:e9:c9:e7:d5:7f:74:
d6:7f:01:35:0a:df:7b:14:71:e6:fd:7f:2d:20:6c:d3:40:cd:
5f:8f:5c:d0:ab:ab:99:3d:b9:a8:86:cf:77:2d:a8:4c:ed:48:
4e:ce:49:3d:ec:ac:32:92:68:ca:3b:e9:a2:67:72:99:ab:8f:
d0:24:98:52:fd:3d:8b:f1:df:62:0f:a8:39:c6:9c:07:fd:b4:
c6:73:64:3b:7b:cf:56:6f:21:f2:3e:2d:39:90:a9:7c:04:b4:
5c:33:50:d7:e2:8d:c5:23:f0:f8:c0:11:1f:d4:9b:44:14:11:
05:75:7c:5c:27:67:d6:62:c3:52:72:0f:6d:1e:48:fa:73:51:
22:fa:1c:d0:53:8f:13:5c:2a:85:c1:a9:74:49:5d:23:2c:cc:
2a:62:a4:f5:16:1e:f6:ce:07:35:6e:57:89:6f:c5:21:6e:f2:
96:aa:c8:3a:94:15:ca:fd:21:a0:df:93:1e:0d:b1:6b:b2:65:
db:e9:8a:7d:7d:93:04:60:27:90:e5:ad:76:24:67:00:cb:31:
54:b4:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:30:11 2025 by rpki-client