Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: DCmWgXnE9V+yCblaMNHZQWchhjyUlNcMNQLcnMPD2sk=
Subject key identifier: FD:5E:6B:29:D2:AE:9D:97:E1:2B:C9:EA:83:86:7D:4F:D3:5B:9C:64
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 0194BC3BE1DBB5B128D729F6B653453A336A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: CairyVwCkWZako6LWoZ5BO3tvf3ep+XQPOqn1NFd1FQ=)
2: ri0q77CsDD0bTPaXxk_jRAdQRhY.roa (hash: 4DUjc0lydMIPXrmRym+WpRLgbblgRfFg3jdmltIqOW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e1:db:b5:b1:28:d7:29:f6:b6:53:45:3a:33:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=fd5e6b29d2ae9d97e12bc9ea83867d4fd35b9c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:83:bd:d3:51:9d:e3:ae:d6:62:e4:67:97:
c0:58:0f:ea:ef:b0:02:7e:e5:b9:67:da:54:98:60:
70:a9:9c:88:eb:bb:c6:0f:b5:29:0c:dc:b1:5f:f7:
5c:e1:1f:96:37:30:5f:55:3f:e0:01:4a:29:5e:0b:
13:70:ba:2c:42:cc:7c:e5:6e:89:1b:18:3b:07:f9:
33:ec:86:61:46:0b:a3:ae:9f:60:4d:f0:08:39:6b:
21:ce:1d:a2:50:19:f9:9e:c0:86:0c:c6:17:5d:99:
16:2e:e8:07:c2:bd:6f:ee:c3:f9:18:36:48:bd:49:
bf:ec:b4:e4:b1:a1:7f:77:e7:8b:67:67:eb:0b:92:
54:9c:0c:e1:bb:f3:22:b7:97:57:cb:be:82:ce:f3:
54:e2:45:cf:41:ac:1b:4c:f9:e7:d5:78:8a:74:7f:
86:57:07:42:0b:16:eb:89:ee:f9:a1:c0:0a:aa:d3:
6a:3d:9b:c1:cd:5d:ca:2a:25:f7:fb:59:fe:8b:34:
dc:63:9d:ee:6d:44:6d:4c:f2:d2:a8:c2:2e:96:31:
be:96:0c:e8:b6:2a:83:14:cd:6b:5e:be:ac:ce:96:
d3:1b:f2:a7:e1:08:ba:cb:29:e6:a1:5d:3b:f0:a4:
43:89:3d:6f:69:00:e6:c4:96:5d:00:c7:32:e1:43:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5E:6B:29:D2:AE:9D:97:E1:2B:C9:EA:83:86:7D:4F:D3:5B:9C:64
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:29:cc:b0:ef:4b:83:ec:09:0b:a4:50:ca:c3:83:e6:b5:e2:
18:2e:4d:1c:cb:82:81:a8:4a:aa:51:89:5a:f8:06:98:f8:79:
34:2e:62:54:fd:83:b6:19:d4:f8:b8:06:05:c3:1d:99:33:0c:
d2:67:37:9e:44:96:80:6b:1d:13:96:12:42:cf:26:2a:e9:cd:
2c:f4:21:2d:ab:d1:5d:bc:7d:6b:f7:f4:25:39:ef:3c:01:f3:
ba:2c:53:61:13:da:bd:d7:bb:f0:c2:c9:39:14:a2:5a:41:fb:
e1:26:22:a4:ed:59:d8:20:06:30:23:46:9e:69:52:4d:28:e4:
c4:f8:c2:db:a2:52:9c:85:cb:e0:33:9c:02:7d:1f:41:5a:55:
2f:b8:5d:61:e8:67:83:e8:6d:c4:41:dc:a7:39:19:96:36:f6:
92:62:56:b1:38:4a:90:48:04:29:fa:9a:99:3a:00:13:53:67:
fa:34:c9:aa:fa:f5:58:ff:78:83:57:60:6a:15:50:09:c0:c6:
26:2f:a1:c2:88:b5:e4:d8:da:d4:3c:06:23:10:5c:f5:02:b6:
64:93:5f:f1:62:1b:8a:b0:37:fe:30:c6:be:3e:95:4a:56:16:
15:af:d1:71:b4:9c:02:8c:e3:0b:29:41:46:d9:ad:ca:9c:94:
c3:4f:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:11 2025 by rpki-client