Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier: X+8C2mZY+0EE12dRW5qD78ni3YXLalgo9l/5p/nWjwo=
Subject key identifier: 81:DB:7F:E6:9C:02:81:B6:7E:B9:ED:64:91:C4:AD:8F:84:E8:01:D8
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 0194BD4EA33D9EAD44ADD6AF69BDB9EE9963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number: 1280
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: YRfkigtRLNkJN8VNtKbb3fRiIKs.roa (hash: CvzEdkr6eZNRd+mAapP+a07GKzLUJC/WQEw0I1mUkjI=)
2: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: LkS+76D1TYorBX6c2wunmfeAiHsyxbiH6kw7lcS9kQo=)
3: hhzUk5P34fAewxviCp7L4orLbt4.roa (hash: anfj4g1I4XRHIljE+q3F4S8rJ8XQNKffMq+11otVUbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a3:3d:9e:ad:44:ad:d6:af:69:bd:b9:ee:99:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=81db7fe69c0281b67eb9ed6491c4ad8f84e801d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:19:ca:e9:36:93:91:81:18:a5:db:6b:f8:
12:60:62:4b:08:13:ac:12:91:41:dc:51:f0:35:b3:
e4:71:bd:aa:6b:a3:9a:bc:44:20:e6:42:e1:c6:c6:
e6:ba:93:6d:af:37:88:7b:97:b9:36:85:a1:7c:78:
5a:53:f3:24:25:a5:39:19:83:ed:39:e7:40:bc:df:
8a:eb:5c:cf:ba:e9:2c:91:b2:76:71:65:79:c9:03:
c8:f0:b0:4a:e2:f9:78:e1:d0:f1:0f:cd:01:48:36:
bb:31:fb:6f:05:7e:90:4d:6d:63:3d:bc:62:15:54:
04:f4:8c:4e:4f:ff:0b:e7:a5:ff:3c:6e:20:8a:86:
b9:7c:c9:b2:79:ad:80:24:60:7e:ca:40:97:91:a8:
68:0d:4e:c1:6c:dc:10:10:cf:93:5a:17:f7:d7:36:
29:ab:b2:b3:03:da:60:94:cd:11:a7:8b:56:4b:07:
b7:ea:e1:20:d7:43:4e:53:f5:0c:6c:e2:26:f4:d2:
c4:16:35:57:8d:fa:b6:55:a6:36:f7:8a:f6:8e:bd:
bd:63:53:ed:a9:24:9b:4a:55:38:93:e1:c4:40:38:
f5:0f:2d:b1:96:fc:69:50:6d:2a:03:3d:8f:d0:92:
78:9c:6f:f8:f4:4b:42:50:d8:db:90:ac:96:05:42:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DB:7F:E6:9C:02:81:B6:7E:B9:ED:64:91:C4:AD:8F:84:E8:01:D8
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:de:a2:c4:5a:ed:cf:ad:47:87:23:8e:29:0d:39:08:17:ea:
47:fd:6f:26:8e:cc:95:5a:1b:d6:e7:bc:85:7a:66:bc:d1:32:
d7:51:5e:35:1a:00:95:5f:ca:8b:84:7a:f6:37:e7:bd:ed:4e:
4c:da:13:38:54:2d:f6:8c:fb:f9:64:a6:a4:2c:4a:ac:2d:42:
28:89:d3:e6:2c:38:5e:06:74:a9:01:ff:89:54:e6:1c:0b:d1:
17:66:c7:b0:97:42:e7:41:39:f6:27:3f:b9:9d:64:1c:78:14:
a1:49:81:08:d4:b5:a9:92:05:26:19:4d:10:e9:14:93:26:d7:
82:1b:10:ae:33:05:3f:61:0c:93:1c:87:39:2e:0f:c6:6d:d8:
31:48:be:5a:4d:3d:0d:82:34:3d:b2:4b:af:34:58:c0:79:60:
0b:72:a9:28:72:06:a2:b9:38:28:97:4d:fa:5c:73:d6:f9:2c:
f1:34:25:98:4b:33:f7:52:1d:0a:f4:eb:a8:e6:c7:b1:06:1d:
21:d5:86:94:8e:e6:17:5a:e7:a9:98:0d:21:2c:89:46:b7:ab:
98:81:de:a4:0e:29:88:64:6e:98:eb:e6:44:96:1b:d5:b4:0b:
a5:2b:33:a6:da:2d:53:97:a3:26:50:9d:b8:16:24:57:45:03:
3e:cc:cc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:44 2025 by rpki-client