Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
File: fh10krjoNfLk4q3k0sVNqat4r4w.mft (raw, json)
Hash identifier: yZXdGzw+0ewQ1CqTs/ZhLYnHdbw03qKj24Bze+T2QcI=
Subject key identifier: 4B:B4:80:02:0B:E0:80:A2:63:8D:CE:75:1A:8D:E4:35:E3:42:02:2A
Authority key identifier: 7E:1D:74:92:B8:E8:35:F2:E4:E2:AD:E4:D2:C5:4D:A9:AB:78:AF:8C
Certificate issuer: /CN=7e1d7492b8e835f2e4e2ade4d2c54da9ab78af8c
Certificate serial: 0194BD17B389163510F5FBCA53CCB8F9E561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fh10krjoNfLk4q3k0sVNqat4r4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
Manifest number: 0582
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: PgE9BW67Hzl1H_iUdCM9hiaWebE.roa (hash: /s5fkdZBUcDDsN3IZL7N+u3huKwHv5y1+anQQJEUKPw=)
2: fh10krjoNfLk4q3k0sVNqat4r4w.crl (hash: zu885u9rISOkGh9IQL+OX5JB/vsd5Q5cpZNimAjkGks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b3:89:16:35:10:f5:fb:ca:53:cc:b8:f9:e5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1d7492b8e835f2e4e2ade4d2c54da9ab78af8c
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=4bb480020be080a2638dce751a8de435e342022a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:a3:fd:7f:0c:8a:8c:07:3d:ba:a8:ca:de:
52:49:c8:3b:32:d9:2d:23:9c:5b:af:17:fa:e1:95:
1c:5b:01:f7:37:ae:39:d9:f3:2f:f8:e6:96:79:17:
61:3e:df:56:c1:5a:1c:70:1b:1a:e3:88:31:e5:0f:
5a:a2:6b:ac:4f:3d:f7:40:99:89:62:80:4c:b9:e2:
a2:8e:9b:75:a2:aa:b7:5c:33:90:6b:e0:6a:a2:7d:
a9:1a:d2:40:29:fc:ab:d8:d2:dc:ac:a5:0e:41:c7:
95:b7:98:c7:7e:cd:4d:e3:41:93:ee:cd:b9:63:fa:
a7:24:5b:b6:e7:37:3f:a3:7e:db:9e:a1:32:1c:a9:
84:70:93:b2:6c:17:1a:ca:1e:0a:14:bf:3c:54:fd:
3f:a4:2c:91:98:20:46:ac:d5:5e:29:ee:dc:1e:53:
81:ab:81:67:7a:4c:de:f7:37:d1:22:2a:87:0c:d4:
70:e7:65:eb:5c:fb:24:29:09:9a:65:15:f6:d5:24:
8a:8e:22:98:76:6c:82:7f:cc:97:9b:ed:42:9a:53:
f4:3b:99:47:1b:40:99:9b:5f:ce:95:b1:6c:fc:7a:
2f:64:de:bb:99:63:90:38:99:90:55:13:91:54:55:
ed:32:59:92:6a:e2:51:d8:e8:57:68:3d:15:aa:a1:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B4:80:02:0B:E0:80:A2:63:8D:CE:75:1A:8D:E4:35:E3:42:02:2A
X509v3 Authority Key Identifier:
keyid:7E:1D:74:92:B8:E8:35:F2:E4:E2:AD:E4:D2:C5:4D:A9:AB:78:AF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fh10krjoNfLk4q3k0sVNqat4r4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0dee16-7379-434b-94f4-a48c564e8588/1/fh10krjoNfLk4q3k0sVNqat4r4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:39:c9:bd:b4:c5:ca:73:d8:60:93:00:06:4d:c8:42:81:ed:
b1:77:45:18:97:57:91:54:cb:d8:ac:17:bc:10:fe:61:56:31:
88:6b:10:74:3f:d5:e5:00:e0:c6:e4:39:ba:ef:89:21:a3:cc:
58:4c:b6:f6:35:92:b9:d0:ff:e6:4a:66:c1:87:3a:53:6a:a4:
da:2f:5f:6e:bb:c6:d7:e7:f8:5b:01:46:c8:d0:46:6d:42:e6:
9b:10:aa:41:27:ea:15:b9:0a:c4:bb:a8:26:b3:85:de:fe:c6:
09:91:17:7f:76:25:d4:8e:58:03:67:b2:78:58:fb:7b:62:08:
bd:5c:ca:32:de:ec:d8:aa:c2:93:3c:ee:be:a8:ab:8c:33:51:
92:92:68:51:fc:af:af:66:95:87:45:ef:f2:8f:63:da:5b:2b:
2c:f4:b9:01:e3:b7:45:71:da:7b:93:d9:65:a3:ad:11:e3:4b:
78:59:c6:f3:65:e6:b4:c4:9a:7c:82:08:09:b4:c8:f9:c3:26:
ce:56:34:20:de:9d:88:aa:6a:77:80:d6:99:1c:14:29:f8:d2:
20:8c:d2:bd:89:8e:13:81:1b:0d:e7:21:fd:dd:4b:a6:02:97:
bb:63:cf:98:ea:b5:3c:c4:93:1d:28:08:0c:e1:2e:7a:b6:ed:
e8:7e:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:20 2025 by rpki-client