Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: NVXZTbMt8k45cW45qJb+ao+N4hyroTt1Qcmr2fL10gw=
Subject key identifier: 0A:F9:6E:FB:B0:7D:C5:5F:F2:E7:F7:54:2A:94:2A:FA:81:DA:C6:26
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 0194BD4E9C449FE57ED944106C3E7A18CAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 068A
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: JHerBTI7eOtxMLIk9YUFZceyApbulAs5j3zUeyZkdB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9c:44:9f:e5:7e:d9:44:10:6c:3e:7a:18:ca:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=0af96efbb07dc55ff2e7f7542a942afa81dac626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:af:7e:30:8d:9c:b9:56:f4:cc:57:ce:82:64:
ad:c1:7c:8c:af:0d:4e:de:64:91:0d:12:11:87:1e:
10:0b:7a:34:8a:02:2b:f6:be:46:43:de:54:57:bf:
c6:17:cc:7f:2c:0e:30:8d:65:96:61:b3:42:5d:e3:
0d:a5:e5:9e:61:b7:7d:67:79:78:cf:1e:ee:73:9e:
aa:4d:f3:fb:95:2e:59:44:e3:c8:a4:7b:27:14:bc:
41:15:22:ee:bf:12:90:0f:16:ef:82:16:8f:d4:96:
53:98:f2:84:f1:4c:af:cd:af:de:5f:1f:b6:58:d2:
21:96:ba:41:6b:86:fb:bf:cc:6d:9c:50:3a:81:14:
c5:da:8f:ec:2f:7e:01:70:35:d3:a4:1a:9b:a7:ae:
08:1b:31:17:2a:dd:09:d8:eb:9c:bd:85:96:3d:60:
6c:e6:e0:f7:ff:de:56:81:5d:df:ad:d7:d5:7e:3f:
67:03:5a:31:52:5d:73:5f:57:bb:61:56:d5:95:84:
08:f0:e9:85:5f:6d:32:fc:c9:84:5d:47:79:0d:a4:
95:a6:c7:a2:6c:86:80:6a:7a:63:6f:a6:5a:ff:d3:
d5:7a:df:f1:e9:6c:66:88:b6:87:78:84:f9:d9:2e:
54:91:ba:9e:24:21:24:b6:92:e5:0c:72:ff:0e:4e:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F9:6E:FB:B0:7D:C5:5F:F2:E7:F7:54:2A:94:2A:FA:81:DA:C6:26
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dd:1d:65:02:d9:5f:a4:44:5d:2e:ef:f8:3e:cf:ef:d6:b5:
e4:78:3f:f6:0c:a0:72:47:35:49:f4:23:44:c1:00:9e:d4:6d:
f7:f4:54:f2:dd:cb:ac:cc:a9:43:77:ed:5b:b9:8b:ce:7d:3f:
37:49:33:90:3c:74:40:95:03:c7:2f:3b:19:e8:c8:d9:09:75:
af:b6:ee:8c:b0:a5:d3:e1:32:09:db:16:2d:f0:1c:fa:f9:c8:
55:65:21:be:f2:19:ee:8f:92:87:79:3c:5d:e7:38:43:86:4c:
50:f5:95:07:cf:80:34:95:c2:b7:a3:c1:06:2e:d9:f1:0b:96:
7e:f3:cf:64:6b:68:dd:27:eb:73:c4:a0:d1:c3:14:1d:ef:b5:
e0:da:db:76:dd:a2:83:35:81:ab:12:aa:2f:1e:6f:88:f6:c4:
bf:78:37:80:ab:7a:3c:fd:bb:e6:4d:71:e6:90:04:6c:a2:40:
2a:80:ec:ec:42:40:f8:2c:05:b3:68:05:37:6a:57:c7:1d:d1:
27:87:5f:7a:0b:72:11:62:99:ef:60:7a:2f:e5:83:9d:30:f6:
36:65:c0:4c:2d:6a:fb:f6:96:cb:e9:42:3e:f6:87:08:2c:ef:
02:97:31:29:b4:c8:8f:9a:53:07:f0:9e:24:33:3d:b5:7f:79:
a6:19:cf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:34 2025 by rpki-client