Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: uY9adTyBenjYGYggsKJg0jRLOM5N0RlNo7tVan5igBk=
Subject key identifier: 0C:A5:E3:71:50:DA:48:74:D0:8C:7D:11:6D:40:96:5C:4C:45:0D:AC
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 0194BBCE4D6179DD2155B673C6F7E2C9D780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: rnNEaayvMyd0hyLFLIZ9Pnv16COMLNYyyGrd+1LnKEo=)
2: tIBVHEbpT3B92jmv17nHEdfPfME.roa (hash: F4q9q1phtloOjlG43lA2x7BlugORaBByvlUxXUgAa14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4d:61:79:dd:21:55:b6:73:c6:f7:e2:c9:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=0ca5e37150da4874d08c7d116d40965c4c450dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:13:a5:a6:0e:73:28:55:69:e3:f3:08:42:
2e:58:1a:6f:41:60:4d:0b:90:0d:30:33:f8:a1:d4:
f2:02:92:80:6c:b3:54:dd:da:da:f9:37:cd:97:52:
1e:23:c8:2b:9c:8f:35:2d:3e:30:41:8d:89:ca:82:
50:14:1b:36:d0:f6:9a:49:0b:c8:a1:1b:87:29:55:
d6:be:20:4d:cd:01:df:27:92:fe:a9:86:6e:cd:1a:
22:25:8c:a0:30:1a:94:2f:c9:3f:00:b0:29:4a:09:
7e:52:23:7e:76:cb:99:9c:91:44:1a:a5:76:e8:ee:
85:91:a8:5d:79:98:a2:c4:25:a0:d5:51:c3:31:77:
ce:d1:b8:83:d3:c3:bb:46:4b:1c:37:eb:26:25:d7:
00:e1:0c:5b:29:0c:1e:71:bb:d0:5a:bb:87:e2:cd:
14:83:07:74:98:a9:f4:12:b7:47:fe:bd:8c:ee:30:
8f:20:01:ff:37:dd:18:d0:b3:14:62:ee:5d:0b:ac:
11:5f:c3:1e:39:6f:26:7f:b2:2e:c1:b4:1c:fb:f7:
27:80:c0:d2:c4:d2:54:5f:05:71:fd:18:7f:f7:5f:
ab:27:c5:c3:fe:3a:24:80:91:28:59:d3:e4:84:05:
a5:46:ee:10:5c:01:75:86:ee:b5:82:d7:e1:cc:5a:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A5:E3:71:50:DA:48:74:D0:8C:7D:11:6D:40:96:5C:4C:45:0D:AC
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8e:48:61:89:bf:ce:6d:b4:68:b6:49:51:c3:cf:e8:5e:9f:
d2:e3:6e:74:e6:71:71:93:93:42:16:cc:99:e0:34:e4:c5:a0:
ad:b8:fc:3b:74:05:ae:1d:2a:07:81:a1:de:bc:34:a6:0c:50:
c3:62:0a:e4:b8:99:85:69:ef:6e:a3:23:db:21:38:3a:07:0d:
82:6f:1a:44:0c:dc:d7:dc:25:13:21:f8:3d:b0:3c:f2:5b:54:
a9:45:58:a4:e7:12:71:81:93:b4:33:48:8d:6f:7d:e1:c7:4a:
85:46:78:fb:17:e9:b8:3b:d9:1a:5d:4d:56:b0:91:c7:99:1f:
2d:aa:45:92:e7:64:00:6b:3d:84:45:7c:51:14:ee:1e:a5:83:
fe:eb:14:03:64:b5:1b:71:40:6a:5f:7c:ac:28:16:cb:c1:5d:
c6:d8:ce:6d:df:4d:0d:b7:bf:4b:c1:c1:a5:6a:4f:9b:5a:03:
f8:18:50:67:6f:c7:56:24:f9:59:29:da:a0:c9:a9:80:39:01:
dc:85:4f:22:1f:ad:c3:08:71:67:e4:9f:a2:eb:35:ba:da:41:
d7:52:e3:bb:e8:c5:81:f4:39:51:68:be:b9:96:f7:a5:fa:79:
a4:a9:81:39:ac:35:bb:28:25:8a:9c:b0:e1:98:4e:1f:db:14:
4a:30:41:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:20 2025 by rpki-client