Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: KPgBSy/2aRR1qDGAGU6go7/OmJHaQVSNf7Rvp6O6F7w=
Subject key identifier: FB:DA:21:26:B4:38:AF:F2:C7:E7:C9:2D:57:7E:E5:97:A0:FD:B4:1B
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 0194BC3C32126A4944D3026AF6B7DEB2AEF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: WRrDFxA8p+Mdr9ERWbDGMvKxmqUYSNPeFlULRTO0dn0=)
2: jLbMl-iRXo5CtEApXDgnLFSdrEQ.roa (hash: nHgsQuuO7Y9rP7+Bsj4rZpGDnYmOC1HMRfXo6zw5zbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:32:12:6a:49:44:d3:02:6a:f6:b7:de:b2:ae:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=fbda2126b438aff2c7e7c92d577ee597a0fdb41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:9d:84:47:90:76:ee:80:2b:b0:dd:69:10:
bd:9c:a5:b6:d7:0f:8d:fa:f2:0b:12:c1:91:9f:6b:
e1:53:e9:ca:f4:08:68:46:2a:8f:b2:2d:9e:04:26:
ec:a9:cd:c3:f5:c0:2d:e5:41:c3:f6:49:d0:f3:01:
10:c5:69:35:ca:86:78:01:54:00:ee:5b:c3:e5:a1:
83:29:0d:da:59:3a:5c:84:c3:d2:1a:36:ff:f7:64:
8f:ba:27:02:5d:d7:64:5f:5b:d5:ee:2b:43:39:e3:
27:ac:7d:dc:1e:74:cc:f6:17:30:90:ca:a6:64:01:
c7:d6:d6:35:7d:fe:05:40:2b:8d:01:95:c4:f4:e1:
6a:e6:3b:d1:6c:a2:e7:bb:59:c3:6c:9d:66:fd:8d:
69:f1:68:0d:5f:ad:b6:87:c4:a0:ca:5d:38:35:f8:
ef:80:71:48:07:05:ea:67:f9:7a:af:69:a6:10:dd:
17:c5:a5:21:aa:4c:2c:0d:65:a3:da:4c:bf:4b:d7:
58:99:57:bf:34:34:77:d8:0c:9d:b2:17:42:58:fc:
a2:92:bd:2c:15:98:dc:7f:f6:e9:b9:16:d2:c3:19:
57:ac:67:ab:70:48:b4:48:20:67:4a:03:27:6b:63:
32:b9:f9:89:ce:48:29:63:21:78:33:8d:e8:1f:5c:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DA:21:26:B4:38:AF:F2:C7:E7:C9:2D:57:7E:E5:97:A0:FD:B4:1B
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b0:ab:e4:5c:ab:62:50:7b:29:9d:4f:6a:62:8e:62:5a:ec:
37:12:46:04:bb:e0:ce:a0:59:f4:85:c2:95:3e:24:71:90:35:
38:67:df:a6:1d:72:34:fb:d1:6b:0b:da:e9:3e:c1:55:0e:6f:
9d:1b:99:83:58:fd:bd:c4:4d:5d:8b:94:5e:30:eb:ae:54:7c:
61:18:3c:87:3c:0b:e3:53:fa:08:83:e8:31:7c:04:a2:65:eb:
45:bc:ff:f2:ec:2b:89:95:e8:91:22:48:af:6a:7d:5f:54:e6:
89:d1:3a:ff:b1:3b:af:bc:9a:47:12:70:ac:7e:48:3c:6c:f5:
bc:8c:b7:59:13:77:51:6c:6f:99:ff:62:49:4f:21:b9:90:d3:
41:c3:05:14:83:4c:a2:e9:5f:95:ca:98:0d:77:93:48:c7:98:
01:82:57:c3:f5:57:5b:c6:5c:ac:0c:00:14:0f:f0:07:c2:8c:
71:4e:f5:2e:3a:2c:ec:7a:e1:49:3e:6a:2e:63:e3:60:3d:1f:
d7:4b:05:02:c5:ba:2d:96:d4:90:65:70:06:31:a6:0a:da:ae:
97:07:a5:df:a9:26:9c:d1:0b:0b:39:b3:43:e8:f4:de:04:68:
93:c2:fc:e1:9c:c8:6b:cd:55:8d:81:af:ef:84:31:1a:3a:58:
e9:df:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:16 2025 by rpki-client