Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: 04KlM4fEtTSbAOt65Y9pZQSd8HZ1Fsga9lt0zwd2Kkg=
Subject key identifier: 92:FF:12:C1:49:52:11:F9:47:B0:F5:CB:FD:16:71:4E:E5:A6:9F:2D
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 0194BC3BF46AAA8F077AE6F7778BD1AD9B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: 4xfLpgjd4Enxc-qc8nof3OkbJKI.roa (hash: qMoNzrHzj4dbd+webpPz0KwxOvGmhXmFlkGqK08FyRc=)
2: 7JwTekQ2tjFEdZLkqTIWTWDl694.roa (hash: vwEa+p0/d9QBYzjnHEhK+7G2R/Qxw/NinB7TZ/V7TxA=)
3: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: BIbQHZVZdOp8nU6iI6j7tFeaYtOUvmaIL74h/EWp1k8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f4:6a:aa:8f:07:7a:e6:f7:77:8b:d1:ad:9b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=92ff12c1495211f947b0f5cbfd16714ee5a69f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:75:38:7c:7d:8f:69:0d:bd:e3:aa:4f:bd:
4c:97:df:5d:35:65:ff:e5:54:42:8f:8a:81:8f:64:
44:b8:44:90:c2:eb:c6:40:1c:fe:3d:5f:d6:08:1a:
22:a7:c8:58:2d:74:9d:4f:06:39:b2:67:b6:1d:f0:
2a:34:29:b2:c1:f0:81:d6:99:c9:86:33:aa:0b:6d:
78:c4:8f:59:8c:75:77:13:11:27:f6:6b:ed:15:d4:
63:ea:0b:8c:12:54:52:e6:f3:a7:11:d5:bc:55:0c:
9c:fd:c5:76:27:4b:6f:6b:48:1c:e3:ba:cc:8f:e0:
ce:a8:ae:1d:3b:76:fe:a1:97:60:16:61:29:ae:24:
10:33:20:79:c4:53:a3:9d:84:63:4c:d7:a1:6f:64:
0d:1d:37:b7:12:cb:9e:ea:3a:a5:11:1e:50:dd:f8:
77:e0:e2:20:69:35:3d:2d:29:13:1a:bc:ef:22:57:
4f:dd:6b:54:e1:a4:5a:1c:13:90:36:f8:cc:7b:4c:
ae:aa:17:63:e9:74:aa:3f:f6:b6:c2:f4:b8:22:77:
6a:ef:70:e8:1d:4c:5b:9d:a6:f0:f2:61:2b:1c:0d:
82:14:97:4e:ee:50:be:0c:0e:62:66:e4:35:ac:14:
6d:9a:14:c6:2c:9a:5d:e5:36:d9:cb:dd:87:df:08:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FF:12:C1:49:52:11:F9:47:B0:F5:CB:FD:16:71:4E:E5:A6:9F:2D
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7a:e9:68:f2:0e:5c:60:8e:0c:72:0a:8d:3e:bb:1b:8c:47:
5a:bb:87:4b:a2:98:36:db:87:63:96:ef:fd:d9:fe:3d:99:60:
bf:6a:40:61:2c:68:f5:e8:01:26:ae:f0:83:4e:e9:39:e5:97:
41:8b:8d:77:95:60:dd:68:b1:bd:28:3a:6e:6d:ca:07:d8:b6:
ef:1f:c0:eb:30:14:1b:db:b0:42:6c:77:76:59:fc:e7:4a:b8:
42:0f:dc:ab:8d:7d:0a:84:a8:21:3b:99:e9:29:44:48:5b:ff:
22:0d:33:79:69:b2:1b:97:2e:74:54:63:2c:af:91:c9:24:0f:
b2:0f:6b:8e:51:da:17:4b:a6:52:6a:0a:24:79:59:69:d7:6b:
70:29:93:13:a4:57:c3:ad:5a:0f:b2:df:d8:b7:b1:ec:f6:b6:
be:a3:ca:a0:0a:2b:d4:8d:93:0a:4a:5c:3e:7d:96:f7:0d:95:
e4:4c:11:ec:25:ff:f5:87:d7:f2:92:b7:b6:09:d8:67:a5:3c:
57:7f:f1:a5:ac:7f:62:fb:42:e7:9a:97:e6:37:ba:47:4f:55:
f3:82:dc:74:c4:a9:2b:8e:20:0a:1d:a9:59:63:cd:bd:30:41:
f4:36:92:8c:33:6b:09:ec:8f:96:fb:a5:9c:b6:d5:ab:c7:2d:
f7:c7:00:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:54 2025 by rpki-client