Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier: ZkIn+Ehw52K7tGszE1TcbDoVQ0WsJs7JgrMPFOS42JM=
Subject key identifier: 7F:D8:D0:10:D7:86:05:8B:31:B2:C5:90:05:C9:3A:15:74:48:B1:DA
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial: 0194BD1775CB815ECF123C5A66D884B0518A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number: 08B5
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: Xrjs-S2RSbrZu3yjzq9Uz6FE53U.roa (hash: BOs1xZvMppiPo1LljXNukiOUbDIO0taZ6bkmR9k5vfQ=)
2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: H7sytdZwmIL8Wm/ayYb2r6TmmucbxxoK7pQzpk5Q8jE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:75:cb:81:5e:cf:12:3c:5a:66:d8:84:b0:51:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=7fd8d010d786058b31b2c59005c93a157448b1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:c0:86:75:d9:c5:1e:48:9b:fd:64:78:dc:
ad:dd:2e:b3:c4:a1:0e:27:25:5d:d2:70:56:44:53:
be:1c:c7:b3:4f:ec:0b:2f:af:0b:62:41:44:73:e5:
90:a1:ad:0f:73:c5:c7:2b:08:8b:42:24:f7:19:01:
af:9c:4e:9e:4a:ca:a2:98:75:5f:12:89:04:80:41:
b6:26:02:80:a3:f1:60:ea:2d:70:9a:d1:cb:98:a2:
90:06:20:00:cf:9b:96:31:de:b4:9e:2c:dd:ad:ca:
af:b6:41:cb:ee:d2:1f:bc:12:39:e6:47:02:ad:93:
50:bd:d6:9e:0a:b8:87:4e:0e:10:6f:a9:de:81:67:
af:c9:a8:5f:89:7b:c9:3b:6d:77:3f:e2:da:de:a9:
c5:ae:25:e0:f2:30:6e:9c:b7:f8:ac:26:f5:d0:e3:
2e:58:c6:37:89:eb:59:f4:fc:11:c9:ef:00:33:d1:
e7:91:87:a4:73:9e:d8:c8:b9:1a:cf:1e:5a:52:db:
a4:70:82:07:58:f0:bf:38:3e:95:5e:e2:b2:14:ca:
3d:79:7a:09:08:ab:cc:f4:67:ba:bc:eb:1f:78:ee:
29:88:b4:4e:3d:c3:6e:35:97:30:4f:58:b6:44:b2:
82:f6:ab:72:f2:f7:42:42:74:a8:89:ce:b5:de:98:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D8:D0:10:D7:86:05:8B:31:B2:C5:90:05:C9:3A:15:74:48:B1:DA
X509v3 Authority Key Identifier:
keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:59:ef:02:46:64:ec:fd:4a:df:bb:a9:50:00:8e:8a:b6:fc:
6f:8f:69:c2:5e:fa:bb:6f:6d:f6:ec:1a:3a:e4:e9:1c:f0:bd:
dd:75:f0:85:f9:3e:de:e1:ba:b7:99:2f:0c:31:c3:70:58:bb:
40:cb:b1:9f:0e:b7:b4:42:74:4a:ce:72:fc:dc:39:58:79:ac:
0d:fa:e8:3d:09:4b:c3:05:b7:02:5c:87:81:cf:75:77:89:1b:
04:81:a0:7b:2a:29:40:f2:04:67:e4:f6:f5:71:fd:b4:20:f6:
90:b9:0f:91:eb:e3:47:71:3c:fe:51:ce:75:e5:27:4a:57:25:
8d:d6:33:77:18:45:b1:6c:7d:d8:fd:68:33:3c:19:a3:22:73:
a1:d9:81:c9:52:c8:50:7f:6b:95:51:e8:cd:ed:3b:74:29:3d:
cc:e2:6b:8a:3d:84:3d:01:df:16:78:90:b6:34:cf:81:ec:bb:
70:85:a4:8e:a5:e5:e4:0d:91:1b:e4:31:0b:63:ae:66:e5:cd:
26:04:f1:d7:fd:e1:8e:7a:a0:1b:1a:8b:fe:98:a3:a9:b0:0f:
9c:ba:c8:b5:59:f6:dd:c6:14:74:f6:1c:dc:28:3f:a4:8e:20:
28:bd:40:b7:cb:c3:de:0e:6c:7a:31:e9:bb:ff:f7:e9:8c:c5:
6e:be:ec:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:31 2025 by rpki-client