Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
File: fujoTNwPSdrCk637XgSkkQjO1kY.mft (raw, json)
Hash identifier: n+pqVxZyJQfvonmKloVpZtrLQZNe/lP1CNxI+lw6UeM=
Subject key identifier: B6:43:B7:2C:84:7F:FB:09:78:92:72:DA:4A:D1:A7:39:F8:C9:B6:28
Authority key identifier: 7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46
Certificate issuer: /CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
Certificate serial: 0194BBCE0BD396A8EFC07CC260675EEE43BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
Manifest number: 0408
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: Ovv3jRDadSuJuvhS-S0kK_fQ9ro.roa (hash: X1g4S0KOxzsTxSeEns4d0ko+VlZEXePzUj9xmUEL7Qw=)
2: fujoTNwPSdrCk637XgSkkQjO1kY.crl (hash: h5jxdlO3rqmkKLv/lcF3cYh16uEr9pkNXYjm82heS4o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0b:d3:96:a8:ef:c0:7c:c2:60:67:5e:ee:43:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=b643b72c847ffb09789272da4ad1a739f8c9b628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:57:27:eb:ab:32:a5:dc:38:f3:a8:38:89:
c4:c3:1d:ae:13:6c:79:69:41:a5:50:18:c2:55:09:
57:92:e1:83:aa:f4:cd:f1:bd:b4:e2:4a:29:9a:b8:
00:f3:a4:39:bc:48:bf:de:46:5d:bc:65:dc:17:7d:
a9:cf:db:be:df:87:31:1d:ae:17:1f:40:fe:e3:5a:
2a:47:42:53:90:00:02:4a:50:0b:e4:cc:56:93:58:
fd:ba:3b:36:aa:ac:56:c5:9c:fd:a3:e5:5c:b0:2e:
12:24:21:be:2e:f6:62:47:e2:1e:9a:72:be:54:2d:
87:16:64:38:19:38:f0:6f:a6:8d:05:e0:d6:ad:ab:
4b:d9:f9:32:d9:23:a5:e1:0c:08:ff:04:86:5a:d1:
5c:3d:25:08:87:4a:86:5a:00:2b:0f:8e:37:37:ef:
96:c8:85:0f:a4:18:38:fb:31:92:bb:75:e9:7c:b4:
bf:af:d4:a8:c8:00:b4:5e:35:ec:88:03:fb:f6:93:
4f:20:ba:2a:6c:e9:71:f7:79:60:6b:04:72:18:4b:
89:4a:8c:47:30:88:ad:b1:8d:55:04:0a:e9:ee:05:
7b:2c:e7:71:4d:f0:cb:30:46:b9:6a:30:8c:e4:90:
b5:c4:41:74:47:6a:fc:cd:23:4a:35:f3:67:76:78:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:43:B7:2C:84:7F:FB:09:78:92:72:DA:4A:D1:A7:39:F8:C9:B6:28
X509v3 Authority Key Identifier:
keyid:7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0b:39:58:57:d8:b5:93:8b:d2:9f:45:93:0a:28:3d:31:45:
00:dd:ae:7c:e5:fa:2e:bc:ee:c2:d2:af:1c:d1:ca:bb:0f:91:
ae:6c:f4:52:73:67:84:91:16:00:ee:ce:e8:d1:eb:e6:34:ba:
1c:e6:86:77:6a:99:d8:cb:95:35:f8:50:55:8c:50:1c:8a:74:
e2:45:1b:8c:cf:b1:11:00:32:8c:cd:ad:c2:53:1d:97:93:73:
8c:d2:e5:9d:9c:9f:db:58:65:93:dd:fd:cf:1c:5f:ef:f9:93:
b3:d0:dc:72:70:30:ea:52:31:3f:db:9e:7b:1d:4f:ad:db:bc:
26:97:24:31:00:14:5e:1e:ce:f1:e9:90:a1:06:fa:cb:50:45:
d6:9c:01:f1:0c:5c:b7:81:0b:3e:77:d6:d7:07:8c:16:c3:59:
1b:10:98:30:b7:de:39:0b:11:c3:fe:1d:a5:44:a4:86:f1:87:
cb:13:a5:67:15:86:12:2e:7a:a5:57:1b:4a:a7:1d:1c:92:9a:
7c:57:33:0f:24:5a:7c:bb:c5:b3:a1:b2:f2:fd:aa:9c:bc:1d:
ab:ce:05:78:9d:92:cf:b1:32:1f:eb:f2:57:c6:23:fd:57:54:
38:f3:23:2d:39:42:fa:ce:36:54:89:9d:18:bf:e5:32:05:7c:
43:11:64:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:43:02 2025 by rpki-client