Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
File: fNFi3seCCbwDrdCBUn1Usn6E0m4.mft (raw, json)
Hash identifier: 41nfGCUz1EcH7DlkkagnWDxBKmzGnCfVYhsRrq2SCaQ=
Subject key identifier: E9:FF:13:8A:93:F6:E8:4B:2E:27:C0:C5:B6:C3:06:58:38:01:00:D8
Authority key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
Certificate issuer: /CN=7cd162dec78209bc03add081527d54b27e84d26e
Certificate serial: 0194BCA9FB52F8C06E6CFFAE9B616062B4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: fNFi3seCCbwDrdCBUn1Usn6E0m4.crl (hash: 89G6OM9ILxsqo4Rogw3RX1lDpzSUi4baJaSMgAEhpgg=)
2: p62St_0MRIeBUvHxqOmIuKO2S0g.roa (hash: V3Cr5hnF6tOsq5Vm2VEjfSqOP5RKmdhFpUZAhs7o/b4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fb:52:f8:c0:6e:6c:ff:ae:9b:61:60:62:b4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd162dec78209bc03add081527d54b27e84d26e
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=e9ff138a93f6e84b2e27c0c5b6c30658380100d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:d2:bc:50:d1:bd:3a:e5:6d:be:a2:2c:8f:
83:7b:fd:7f:c8:62:ce:08:04:d4:93:86:20:2e:e9:
0b:ac:db:2b:49:fe:2a:a5:a0:aa:2a:24:9d:06:50:
83:45:ba:aa:89:26:9f:74:e7:fe:f8:e8:a5:19:b7:
4e:d9:de:40:3f:86:46:48:52:9a:f6:33:0d:34:85:
a7:af:cc:a2:5a:c1:80:05:ff:23:91:b2:ae:44:b8:
f7:29:93:8f:59:b7:1f:e8:76:0b:96:9f:84:22:4c:
99:f6:34:c1:a7:2d:30:69:7f:ea:84:3f:74:83:e4:
73:9f:d8:a8:2d:81:a1:05:ae:b1:4e:4b:55:3a:d1:
91:9c:d1:01:9b:c1:27:99:f2:bd:e6:e4:b8:dc:9f:
08:75:c5:8d:63:18:cf:c8:9a:95:3d:33:f1:39:cc:
29:d0:e9:6a:ab:69:1e:e9:4b:26:b4:6d:9b:8a:ce:
99:ed:09:83:f6:19:b2:0b:99:f2:5c:08:e4:b9:89:
95:55:06:71:5a:f1:50:a4:30:de:e1:7d:ac:7c:68:
2f:d6:5b:b9:f8:10:a6:a6:78:3c:5d:c1:b2:33:1f:
d3:02:51:1b:ab:3f:59:26:3b:be:8b:fa:bc:b7:57:
ee:ed:7c:e2:4f:d2:56:ed:0c:e0:fe:53:e7:c2:82:
aa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FF:13:8A:93:F6:E8:4B:2E:27:C0:C5:B6:C3:06:58:38:01:00:D8
X509v3 Authority Key Identifier:
keyid:7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:50:68:f5:cf:0e:60:d2:58:34:6c:49:cf:e3:3c:d2:12:9c:
e5:c8:25:0b:7e:db:5c:ad:41:74:4f:73:5e:ab:0f:79:3f:e4:
62:2a:ef:87:6c:01:f0:d5:ef:80:05:5b:2d:22:c6:dd:e9:14:
c6:6e:b7:e5:b9:b9:82:4f:ac:fb:5e:e7:07:99:64:5d:da:46:
32:95:27:89:ce:fe:0f:e0:c1:89:80:98:cc:a7:33:b7:a0:95:
04:f6:d1:64:d6:54:01:d0:19:b4:93:3b:c1:b2:94:f3:b5:51:
b5:16:f8:0b:5a:48:ee:27:1c:7e:d1:10:ee:4d:9e:3f:3d:a6:
eb:cb:61:66:b0:de:ed:b7:62:67:86:3f:3f:2e:e3:12:fc:94:
c5:54:41:0a:95:e4:a4:a6:80:59:1b:0c:be:6b:e8:b0:55:6c:
77:af:f3:c6:26:a1:33:24:2f:44:47:d7:ac:9d:33:b0:b1:48:
11:1a:b5:c1:4a:28:da:7d:44:de:86:c7:28:68:94:9d:18:c3:
91:3e:fb:f8:1b:2a:63:a7:ce:8a:53:3d:d9:87:e4:e4:9a:34:
e7:ac:30:73:2a:37:48:17:6c:ae:fd:1c:02:b9:13:d7:6e:d2:
39:d8:be:48:66:23:6e:16:b6:99:9f:a7:5c:41:67:b8:52:7e:
95:59:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:28:14 2025 by rpki-client