Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
File: fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json)
Hash identifier: 6JUkr9TSr0Ma4LPlL4BZI4DglgEvwGIwz1tC97xm2T0=
Subject key identifier: 70:CF:31:99:93:1D:77:1A:87:E4:4B:E9:25:A6:10:C8:1E:75:28:56
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial: 0194BC3BF04B3E10EF66ABD279536AC825DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
Manifest number: 0E65
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: QV4GiX-_NmB8bXeYFpiPeoYvPgs.roa (hash: ExzZIsYL5CpNKY2xKGueRJzqSweDgaHE92K03gK5p6M=)
2: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: YHBxHmRgCkTk+QFaO3MvFbZhBJYEewHb4bYtPhQYRgQ=)
3: lEhVQNOMvqw54edqH7zh3c7mW1U.roa (hash: nQoP405LztBAkFL0e8Rma4sgogpaQEPhwJTWJogq2nE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f0:4b:3e:10:ef:66:ab:d2:79:53:6a:c8:25:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=70cf3199931d771a87e44be925a610c81e752856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:3b:21:74:eb:8a:e4:8b:30:21:6c:46:fe:
0e:d2:d5:9e:74:c2:83:96:90:67:7a:9c:54:f0:aa:
3c:f4:a6:02:c4:4e:48:9c:ea:7f:72:89:b3:81:4e:
ab:76:30:dc:f4:8e:32:76:be:94:7b:dc:d0:c1:0b:
e2:d3:f9:8b:88:1c:52:b7:e5:c0:00:1a:32:e3:45:
8f:4e:00:13:97:e7:f3:1c:97:4e:74:1f:ce:8b:83:
46:08:c5:94:34:29:d0:59:fb:70:bc:1c:37:a7:9a:
78:40:9e:16:c7:25:a9:4c:f4:18:6d:4c:31:2f:47:
62:0d:78:eb:2a:f9:70:f4:b4:f4:34:79:8b:3a:04:
f9:fc:53:98:e3:ee:07:79:aa:9b:a4:b0:ff:3e:0f:
d6:15:a5:6d:e0:d4:eb:23:6f:c4:5e:d1:31:59:b0:
9c:eb:3f:1b:6c:5c:d0:9b:b7:46:a2:6c:8c:7e:89:
13:b0:a8:d8:7f:be:83:29:1a:74:d6:0c:27:be:f8:
6e:88:31:ac:7b:e3:9b:a4:34:70:20:1e:02:50:de:
cc:88:e7:c2:22:ef:09:05:a3:cd:04:19:00:1e:92:
44:6c:e5:0d:84:f9:c3:4a:12:a9:dd:e4:51:df:d9:
99:71:b3:94:ce:37:8a:18:f2:9d:24:12:d9:cd:bd:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CF:31:99:93:1D:77:1A:87:E4:4B:E9:25:A6:10:C8:1E:75:28:56
X509v3 Authority Key Identifier:
keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:aa:9b:a2:01:8f:5e:f5:b5:12:a6:3e:4f:e5:a6:5d:f9:cf:
3a:75:78:53:37:32:41:b9:ea:b6:cc:82:e5:d8:f3:12:eb:f8:
10:3f:c6:bc:bb:23:0b:6d:13:66:ee:58:9e:38:13:23:3f:fc:
68:87:ba:ca:dd:f6:6b:be:4e:f7:f7:b6:12:90:5c:79:ed:26:
ba:d7:e7:e8:ad:9e:49:8e:ce:86:19:b0:1d:b6:fb:0a:ba:e8:
2b:0e:96:95:ac:d6:ef:83:33:26:9f:55:e5:e2:7b:f7:f5:74:
1f:f6:54:0e:04:59:9c:cb:ad:a0:5b:b8:77:06:53:4f:a6:71:
1c:84:73:c0:31:e8:6d:26:56:79:09:81:02:b3:20:69:ac:27:
10:ef:d9:af:93:3c:62:3d:6e:8c:01:93:1b:4d:63:b5:75:2a:
1c:62:ca:98:8b:11:25:e0:d8:ca:17:31:be:80:a7:ee:55:77:
14:b8:b2:2c:21:6c:d2:53:bb:ca:29:b1:a7:92:e2:9b:84:e0:
31:8f:08:ed:ce:fd:81:9a:2e:3a:4b:8c:28:89:26:45:62:e1:
6b:5b:75:67:b2:cc:11:71:d6:4b:1e:2e:fa:09:86:48:97:85:
b8:33:87:da:6e:61:d4:71:db:58:8c:9d:e4:ce:56:e9:42:9c:
06:b2:34:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:45:48 2025 by rpki-client