Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
File: fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json)
Hash identifier: N2kASEa9B0YC4mbvWy7zukxgbPmu1SmUjEcc+ORo3mE=
Subject key identifier: B4:70:63:D9:F2:3E:A6:97:44:94:54:39:53:41:49:46:70:AD:1C:12
Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
Certificate issuer: /CN=7e904bd71d6fe74a67168fd913e828722755b494
Certificate serial: 0194BD4E94503F73C4AA7681159FAE150B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
Manifest number: 04F2
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: _hcAKZ9Rlwo19weMs6Swq188ePE.roa (hash: Y66JbaTRqDcxPjnoFMPZ0bWBf5qCwdTDkeUZq42NBUE=)
2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: UjtSKbDXcTiRHuv2xWM0ymrP/gQ49GPO0E7oMDBtHLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:94:50:3f:73:c4:aa:76:81:15:9f:ae:15:0b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=b47063d9f23ea697449454395341494670ad1c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:8f:4d:3e:6e:2e:b9:2a:eb:7f:28:15:3f:
12:5c:d5:89:ae:ff:91:f4:d2:23:db:3a:c9:99:e0:
d6:39:0b:c5:dd:5e:a1:44:fe:12:23:d4:70:d0:ff:
1a:be:11:d4:cf:b2:3f:d2:52:97:da:ee:1d:7a:55:
c1:f0:31:35:ad:cd:bc:57:b3:bf:47:44:1a:c3:ba:
09:44:48:2d:84:c3:ad:a2:5f:b1:f8:f2:20:43:86:
10:e7:53:2b:57:4e:06:38:5b:2e:b5:35:44:ff:36:
b4:6a:2e:0c:de:71:27:f5:da:b2:23:e6:1b:7a:cc:
d5:7c:0a:1b:9d:f3:fb:9c:91:6f:21:99:26:02:57:
6c:42:d6:c2:86:09:a5:74:7f:f0:f5:ec:b4:de:1f:
ec:17:83:71:9c:90:80:ac:6f:d0:7e:87:d5:d9:5f:
a0:a8:e7:ca:6b:24:fa:dd:9e:37:c6:f5:2d:ef:d0:
34:01:b0:60:64:c3:c6:d0:18:25:f9:3f:96:91:cb:
44:93:99:5e:e0:03:b7:a3:26:01:22:a4:0e:56:8e:
46:eb:c5:54:d4:fe:7c:31:40:3f:1d:4b:41:40:e0:
f2:99:67:52:5f:5f:58:4d:98:e9:62:c5:9f:a9:0e:
cd:09:20:fc:64:b3:f7:98:49:10:4f:a4:34:2e:d4:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:70:63:D9:F2:3E:A6:97:44:94:54:39:53:41:49:46:70:AD:1C:12
X509v3 Authority Key Identifier:
keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:38:5c:44:9f:50:95:17:c1:ce:f7:94:e2:0e:64:d9:c3:b5:
32:c2:20:f4:90:6e:ce:08:a2:3e:ac:d4:22:8b:e7:ae:59:fa:
c5:3c:d8:73:86:91:74:b7:65:70:17:83:68:a4:32:28:0c:76:
9f:04:14:65:fd:c1:de:05:12:a7:9f:a0:c0:75:79:a8:7b:b4:
1f:8a:bd:d8:0f:3d:de:1e:12:ac:48:5f:f7:d7:16:be:18:73:
ec:2f:ca:d4:e4:ac:1e:6d:2f:99:93:64:e4:df:c5:70:d7:2d:
41:78:b4:f9:97:7d:de:2f:fa:7f:28:f7:f1:db:f4:55:69:0d:
06:cc:68:d2:33:cb:2e:c4:e8:55:39:48:56:ad:4c:49:7a:d2:
38:95:5f:6d:90:11:41:52:d3:98:78:d3:4b:dd:f7:d3:1c:af:
66:e6:4a:c0:c8:53:c8:45:6a:cf:2e:7a:7c:26:30:84:9b:c0:
2b:50:67:e9:4a:e5:d5:f0:18:16:3d:51:95:d0:27:48:c2:d5:
32:16:cf:1d:d1:b4:83:4f:38:37:69:4c:5b:06:ac:4e:27:c7:
5e:50:07:d1:07:c1:4c:9c:fb:a0:d3:2e:28:8d:de:c4:91:ec:
8a:e8:cb:2e:8e:6f:fb:b8:e7:6f:aa:07:e4:05:dc:0f:b2:de:
3d:7e:ac:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:13 2025 by rpki-client