Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier: sfY6GjftnMpbZheJp2ghlu62BSgIuTyuk4FmW0Z+vdc=
Subject key identifier: 7B:F5:34:48:93:6E:5E:3E:4E:50:7A:9C:25:D2:E5:52:43:22:3E:BE
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial: 0194BC04B74FE9ADADA0D26EE00319E3EFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: /Xk7/Fui2PgHzE35XwmsBQekNAj9TRYWPgansimgJRY=)
2: hb6ryi0zlarGbicwA660cAdO1uU.roa (hash: npI6mlOfecW2btMEPci2EHiqJhnGF4s0rXnIs0wQ4wY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b7:4f:e9:ad:ad:a0:d2:6e:e0:03:19:e3:ef:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=7bf53448936e5e3e4e507a9c25d2e55243223ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:d4:b3:67:c1:e4:7e:02:0d:a9:d8:5f:db:
27:fa:1e:b3:f8:ea:4c:ba:42:c2:0e:f3:77:61:3d:
e0:04:9e:42:57:a8:9d:e2:e2:78:a8:02:6b:48:99:
6d:79:76:d4:88:a7:4f:eb:1d:b8:a5:e1:9c:a3:b2:
e6:7c:c1:79:17:8d:45:cc:a3:d8:78:cb:79:8b:62:
5b:e2:4b:27:a0:fa:8a:70:0e:cf:6e:56:66:76:f6:
19:97:d1:09:57:7d:f4:7a:47:8a:cc:5b:09:4e:bf:
ee:6b:98:c5:3a:9b:ea:ce:e1:c3:4a:b1:df:d3:50:
ed:b6:12:e2:86:39:cd:76:fc:ce:0a:e4:b9:90:40:
84:be:26:9e:2c:0b:2e:46:c8:72:cf:ce:1d:65:c2:
fa:de:ae:ee:24:0b:21:c2:1c:94:9d:de:86:1d:0d:
96:f5:f4:28:4b:05:9d:df:7b:0e:1f:3a:2c:99:10:
b3:a3:70:46:71:23:2f:13:fb:ad:06:4d:c9:c4:e5:
80:22:8e:04:5a:c7:f8:b7:c4:3d:dc:0e:0d:fb:9b:
29:5a:d6:00:e1:20:0f:b0:a3:3f:98:01:c4:1c:3e:
2b:97:74:91:aa:23:9b:ba:30:f6:f5:1f:bd:bc:3d:
6e:7b:d3:57:45:f6:3b:0b:dc:7f:e1:63:86:b9:41:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F5:34:48:93:6E:5E:3E:4E:50:7A:9C:25:D2:E5:52:43:22:3E:BE
X509v3 Authority Key Identifier:
keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b2:14:a2:03:fc:ab:14:89:77:a6:84:dc:d7:55:c2:06:81:
c7:cd:de:c3:f8:26:c6:04:26:8b:bc:8a:fd:15:0c:60:8f:81:
69:b4:53:ae:b4:1f:1b:62:de:2a:ea:dc:a1:2b:37:ec:52:26:
7d:dd:a9:81:29:53:98:09:58:08:10:df:14:75:68:af:e4:c3:
96:e4:d0:9c:ca:3b:f0:b3:34:78:dc:2f:87:92:58:18:7b:ea:
d3:87:ee:c3:ed:14:1b:7d:c2:3d:80:61:1b:12:82:50:89:56:
e9:2b:9c:de:d7:7f:67:b3:50:c0:1d:92:62:3c:83:4a:9b:ac:
46:97:e1:7b:40:0d:9b:69:6b:f5:04:ab:f6:a9:25:2d:6b:53:
4a:0a:e8:42:f0:d1:16:93:18:8c:ed:1a:94:93:3e:e2:96:53:
f5:f0:0e:6b:12:30:a4:2a:8f:d3:54:42:b6:79:7f:6b:77:1f:
1e:0a:db:32:5f:fd:e3:f6:b9:f8:ab:ea:3b:2e:3e:c8:09:4e:
ec:ac:62:f7:f8:40:a8:dc:fb:03:b7:e2:95:53:35:4c:2b:ba:
e1:b7:87:77:88:bc:4e:bb:6f:f4:45:a4:b1:09:9a:4c:88:b0:
3e:2f:ae:e6:aa:55:56:d4:11:f2:2f:e6:da:89:01:1e:61:28:
07:0d:ad:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:16 2025 by rpki-client