Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
File: Fzn5ZM1In80lALN2gdWEedVTyKs.mft (raw, json)
Hash identifier: DZP5k6rR1uutEyJvLs/9v+vTXOkJXvbrshwbBhnNxhg=
Subject key identifier: 78:3B:38:2E:92:50:50:15:32:95:09:E4:EA:50:31:A8:14:01:46:D2
Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
Certificate issuer: /CN=1739f964cd489fcd2500b37681d58479d553c8ab
Certificate serial: 0194BBCEB4D638A55A4D4EF2EACD73021AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
Manifest number: 0EC8
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: E7khi_dy64NAplQCGIYWONm6XWs.roa (hash: B7pDURftKO1TVaIjuNJYi/KUiJRc83FFsiFwUHpeKCw=)
2: Fzn5ZM1In80lALN2gdWEedVTyKs.crl (hash: l/S/VBh6dL+BRBPSQbIWk9XQBqM68aPV9M3dMi5Z9CE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b4:d6:38:a5:5a:4d:4e:f2:ea:cd:73:02:1a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=783b382e92505015329509e4ea5031a8140146d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:13:d7:13:2a:48:54:f6:2b:ef:0a:99:ea:e7:
e3:c9:60:3a:65:ce:2d:87:e5:02:20:6c:fb:e2:1c:
b6:40:dd:34:cc:56:bc:69:d9:0d:b9:c5:67:77:8f:
c6:aa:7b:3f:12:dd:92:6f:a1:f5:01:3e:7f:5d:8e:
7e:56:71:65:d0:4d:3d:f2:7a:3e:13:76:c3:00:89:
e9:a3:90:00:20:75:8e:0b:d5:6e:cf:f0:ea:e7:bf:
60:ce:a7:a5:6a:9c:b8:cf:dd:a1:e1:58:c6:47:6d:
29:95:4e:6a:70:70:94:ec:a4:c6:e3:df:f6:b4:02:
d5:e9:cb:f4:20:7b:2b:16:a9:e7:63:88:52:60:c7:
ef:8b:f4:79:db:8f:88:d6:da:e3:42:e5:ba:5f:44:
8a:9b:69:d2:63:69:88:79:e4:b5:d9:d0:34:4b:1f:
1e:0e:33:51:9a:5d:87:4e:eb:19:e1:7b:3e:27:a5:
f5:d2:a5:0d:f0:fb:3c:25:76:55:c2:28:27:ca:98:
fe:9d:f2:ee:5e:e7:6f:fe:1a:a9:52:3c:15:1a:bb:
d1:3f:5e:44:b9:65:d5:88:31:e1:8d:48:e4:68:bb:
f9:bc:4c:a8:6e:2e:85:ec:4c:23:e0:99:a7:e7:57:
71:94:01:80:5f:0a:a4:0d:bc:8e:03:1b:18:a7:ad:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3B:38:2E:92:50:50:15:32:95:09:E4:EA:50:31:A8:14:01:46:D2
X509v3 Authority Key Identifier:
keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5c:7d:3f:93:f7:35:df:ab:d2:49:72:c8:e7:0f:89:6a:e8:
99:a4:30:ac:39:a3:84:1a:cc:0d:fe:06:db:a7:7c:11:46:70:
f1:63:1c:16:a8:73:e1:27:8d:c4:93:14:12:22:98:4a:0e:ac:
b0:f8:6b:c4:20:e3:4f:f5:e4:86:c0:ff:aa:f1:d6:c0:97:aa:
17:1a:ff:67:3b:ea:1e:a6:59:87:96:31:de:69:c7:62:d1:c2:
7a:bd:59:6c:86:6c:ee:69:7d:1c:a7:83:4d:6f:c2:80:dc:8a:
b4:e8:1d:6c:a8:24:cf:05:5d:ad:71:2b:43:96:af:13:54:0a:
32:ff:3c:19:91:d5:67:72:ef:05:4b:36:78:ec:39:8f:b8:c2:
03:f9:f8:94:a6:d5:30:0b:3b:fc:25:32:3b:53:43:10:8f:6c:
f4:87:04:7c:e0:73:05:18:f1:9e:5d:3b:1a:6f:29:87:1a:58:
1b:34:6b:5f:b3:59:12:0a:bf:ec:84:aa:00:9c:a4:ad:f0:4b:
66:db:8e:e1:4e:69:38:b0:75:d1:d1:0d:5d:0b:30:6b:81:bf:
28:e7:55:5a:d5:f4:cc:be:62:ff:2e:b9:9d:b6:1f:2c:9b:94:
22:1a:6b:7f:6d:22:06:e5:e9:78:69:fa:c0:ff:44:79:cc:c0:
d0:a6:8a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:48 2025 by rpki-client