Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: zI06JF8CknQyxqh2HYkzMSmYduOnIpjyHrq5ErfsdB8=
Subject key identifier: 52:F6:12:47:99:E4:31:06:0C:B0:81:39:89:C8:28:A0:A5:C5:DF:CE
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 0194BBCE98D0AA889630865A140C76A67D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 11E8
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: Qmn6qMcsYc4tSMLHc4aOlKWHzLY.roa (hash: Z49F7eb8HQunLu54eXsnAFNRgDwdiL3VgHCYWpkpRJk=)
2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: W5vfITUpW2SQmYXhjv0bfusVROWwHGZxfAf+OhqPpI4=)
3: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (hash: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:98:d0:aa:88:96:30:86:5a:14:0c:76:a6:7d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=52f6124799e431060cb0813989c828a0a5c5dfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:00:0f:8e:20:ca:a9:f4:7f:a7:cf:36:0f:
9c:6d:29:01:1e:a5:db:94:3a:32:45:75:8d:64:b4:
72:de:a9:a5:c8:a9:c3:3a:47:36:54:48:83:c1:02:
97:35:42:db:ba:22:aa:87:07:f1:fc:c6:d0:ea:ac:
08:fa:f2:98:77:c7:41:9a:bc:ec:3f:74:4b:95:94:
d1:45:5c:83:1f:7f:2d:03:da:4b:9c:f3:b2:48:62:
a6:2d:b4:bb:62:3b:48:17:22:3e:7e:9e:7c:03:72:
6b:86:fd:43:aa:91:ad:22:10:62:e0:89:72:7b:e9:
77:8c:f7:45:02:fd:28:9c:77:c8:d5:ed:fa:a9:50:
44:bb:a6:d9:4b:ef:c2:4a:e0:b3:a5:ab:b2:00:58:
ae:1a:6c:20:f4:79:e6:c1:b0:84:b6:e6:88:26:f7:
fe:e3:20:69:79:89:85:1d:d1:c8:d9:d0:fc:ad:dc:
d5:01:b4:43:d8:08:5a:53:58:dc:58:70:e0:39:c8:
0c:6b:0e:fb:fb:5a:20:74:bf:26:0b:09:7d:51:d7:
fe:03:4a:c8:e0:f7:63:a9:3e:81:1f:ac:37:16:f0:
4e:a9:e2:23:ab:aa:45:e6:ea:f3:b8:ed:41:0c:9f:
0c:e9:33:56:58:5f:f0:12:ad:25:c7:01:7f:27:94:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F6:12:47:99:E4:31:06:0C:B0:81:39:89:C8:28:A0:A5:C5:DF:CE
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d5:60:99:f4:4f:2c:9c:3b:d1:13:49:fc:04:7e:14:3a:60:
01:6c:b4:a1:94:82:7d:94:b0:2c:2e:0a:b1:cd:5c:b1:b2:99:
53:4a:3d:39:bd:2b:53:4a:e6:dc:6b:28:d7:f5:9f:ec:33:79:
ee:f5:bb:63:70:0f:6d:07:4b:16:73:15:67:60:de:19:7e:c2:
40:89:d7:39:78:88:03:44:e8:93:a8:cd:4d:2b:1f:61:9e:b3:
0e:4e:1f:61:51:9c:c6:03:e4:ab:8f:38:29:88:2c:18:46:28:
59:88:4d:0f:ab:ad:4c:ee:ab:b2:91:01:ba:2e:5c:84:47:3b:
bb:e3:4c:5b:98:06:4e:50:4f:f6:34:b1:85:f0:5b:e4:4f:33:
7e:76:80:0d:1d:62:f2:40:44:2c:f5:64:8c:24:f2:b8:d3:cd:
d6:2c:93:c2:07:e3:08:c3:4c:2a:28:15:01:34:0d:76:d9:19:
7c:5a:30:cd:86:60:c0:8e:a1:e3:1c:a2:fd:96:96:fe:d2:8b:
1b:c0:ae:55:cd:ed:c2:60:bb:50:ad:47:de:96:c5:80:ef:bc:
e3:1b:e8:78:78:ab:19:ad:f5:ab:3c:2d:3b:e4:0b:2b:b6:5c:
81:50:ec:44:f4:96:74:0d:a3:de:8d:dd:ef:62:eb:a9:92:6d:
57:ea:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:15 2025 by rpki-client