
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
File: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft (raw, json)
Hash identifier: YEApU0bFxt09jem3fsGXRl/MZnINHWYQuMzI1z2JmUg=
Subject key identifier: 1A:42:27:77:75:84:A3:FC:C5:45:CE:82:0A:66:69:05:1E:DA:20:AB
Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
Certificate issuer: /CN=7e9360205b48af4954566314230e6b1296d9aec4
Certificate serial: 0194BCE0B2B03EB60FE60F0AD7C8A32B406C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
Manifest number: 02E9
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: 6Hs21ZDEU36A7XzHFbni9nG1_gs.roa (hash: uHRCtaCqTT6lc9BE9eOvMv5KtMPToXYAuWUFVX2JuWU=)
2: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl (hash: m5ywqMK06VdnPMN11t7qantajVILX96a5OywqDa8oaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b2:b0:3e:b6:0f:e6:0f:0a:d7:c8:a3:2b:40:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=1a4227777584a3fcc545ce820a6669051eda20ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:d1:d0:58:05:9e:12:70:26:f3:ea:a9:d5:
80:ea:13:5f:ae:88:c0:fb:0b:30:b9:8e:2a:33:25:
16:6c:70:a1:df:71:3f:f3:5a:ca:d0:ef:fd:5b:69:
84:cf:5c:95:b0:53:de:0d:20:39:ea:65:5e:51:4a:
ea:b7:db:b6:7b:87:17:b8:2c:9b:39:e4:bd:f9:b3:
fc:13:b6:42:1f:e7:5d:2e:d9:74:e2:b7:15:c1:8e:
ad:4c:56:3e:af:52:b2:c3:c4:6f:8c:77:92:6b:6c:
2d:dd:c1:2b:ad:5e:3a:a6:72:36:73:12:da:17:98:
a5:6a:81:6a:3c:ee:8a:75:8d:42:e2:f7:08:81:bf:
4c:59:5f:bd:e6:bf:0e:ba:7c:15:5a:80:fd:c3:a0:
66:48:58:0a:51:59:42:c5:44:47:6e:e8:c6:05:eb:
dc:d1:99:35:18:9a:28:bf:33:b0:18:d3:07:28:8f:
9e:8a:15:2c:f1:04:0e:03:a5:43:81:a0:07:89:da:
40:25:54:02:9a:6c:05:f6:9d:77:5f:c4:fd:ee:ba:
66:e9:7f:fa:4f:1a:c5:0f:59:6c:6d:98:4b:58:2f:
61:d6:a7:36:62:f5:b3:45:b7:48:b8:df:1c:2d:ac:
67:65:a7:5f:c2:1e:89:3e:b8:e8:f8:37:a7:a4:30:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:42:27:77:75:84:A3:FC:C5:45:CE:82:0A:66:69:05:1E:DA:20:AB
X509v3 Authority Key Identifier:
keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:87:4e:4e:f8:9a:72:81:72:27:ef:3a:fa:37:44:a4:47:27:
37:72:29:3f:bf:d7:22:9c:98:0b:b8:93:a8:5c:23:c1:7c:da:
bc:bf:49:46:40:fc:d4:d5:ff:dc:fe:67:4a:a2:a4:0b:76:f7:
56:ac:5a:2c:7d:35:06:72:2a:98:4a:91:65:88:06:4a:59:4d:
94:96:15:53:b6:fa:d5:3f:42:67:b1:27:02:93:9f:9d:2f:a9:
b1:05:4d:bc:06:c8:e2:2d:26:6c:2b:c5:7d:1c:49:18:b8:e2:
3b:c4:7c:6a:ee:85:fe:46:e1:8e:cb:13:00:31:3f:77:52:20:
0f:e2:a4:2f:84:46:c5:d8:a1:f4:25:90:68:ba:c8:af:a2:e0:
a1:ff:ef:cc:87:1e:14:6d:7d:cb:a4:b2:77:ff:15:00:73:db:
db:f6:10:b5:c9:04:46:11:44:0e:ed:6f:72:82:59:45:36:ad:
4f:d0:e8:45:07:bb:39:94:60:b9:25:ab:c2:29:79:bd:ec:dc:
28:ed:f4:ae:59:12:19:6c:bd:1f:6b:54:d8:45:cc:08:01:06:
94:a0:43:ed:bd:20:ee:1d:9b:2a:bb:df:51:c1:6e:ad:0b:f2:
85:cd:ee:30:ed:06:ae:31:66:33:97:e9:e6:db:d2:0e:1a:7b:
89:80:43:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:06 2025 by rpki-client