Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
File: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft (raw, json)
Hash identifier: OJk73fHmDmfxOVEw32VDNw3iknxIJANnl/69WTfwBEE=
Subject key identifier: AF:56:CE:1B:6D:23:AB:83:01:0A:FA:CE:0D:50:B1:51:E2:35:EF:FB
Authority key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
Certificate issuer: /CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Certificate serial: 0194BCE0E7D9A5AAFA0E4D2EBC5D97072381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
Manifest number: 014B
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl (hash: K8u+0pPLQGVCNX4QqvG+8+6ilas99pLetZEgO6KPbWg=)
2: QXxZoEDTfmfi2igFXO5o23qZxBE.roa (hash: rgCm3B0IpeTPYIjtwWWmsRXdZPZn8nOJAF/gu4jmo9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e7:d9:a5:aa:fa:0e:4d:2e:bc:5d:97:07:23:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=af56ce1b6d23ab83010aface0d50b151e235effb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:2d:bd:98:43:db:93:78:62:e3:f1:d8:fb:
05:4f:b9:15:df:e9:28:75:5a:27:9f:b8:45:b8:77:
dc:d3:10:e6:94:fa:fe:9d:2c:34:ad:e2:68:d5:11:
67:06:77:2e:4d:b6:fb:63:16:e3:af:c9:e2:d1:a0:
99:7f:61:ae:e2:e0:67:ae:25:86:4e:c6:d8:e1:3f:
c0:31:e0:92:90:a3:bb:eb:80:00:5b:48:c8:2b:54:
75:7e:2b:d2:c2:9f:e9:3f:c2:87:ea:ae:c0:57:73:
56:00:a5:0b:0d:49:5b:b2:13:b4:e7:62:ed:0d:63:
72:84:ca:c0:cb:30:3a:2c:72:85:47:de:6d:71:b0:
44:96:2d:11:eb:ec:77:f7:a1:df:72:c9:1f:ed:9c:
bf:ea:3f:b2:c5:26:48:5d:9b:1f:3b:3c:77:30:83:
41:e8:df:9c:c2:4d:78:10:c6:bb:b7:40:ce:7d:ce:
66:c4:7c:fd:da:ba:e9:5a:05:94:5c:68:9e:5f:9a:
25:61:87:61:10:07:1d:29:41:98:59:f8:17:f7:aa:
a1:f5:44:b8:d0:67:5d:1d:d2:6e:83:d6:ac:49:fe:
6e:e6:0d:22:0e:f1:3e:aa:20:b4:7c:e0:5f:26:4f:
b2:33:4b:b9:ce:59:23:91:75:5d:e2:35:cc:65:45:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:56:CE:1B:6D:23:AB:83:01:0A:FA:CE:0D:50:B1:51:E2:35:EF:FB
X509v3 Authority Key Identifier:
keyid:15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cf:e0:a1:aa:90:f9:f4:8b:a4:e8:d6:11:75:46:52:6e:51:
04:1a:f0:00:d1:c1:5e:79:58:f7:03:8d:c7:fd:36:84:97:09:
f6:75:89:99:db:2c:ba:45:83:2c:3f:07:65:6e:27:0a:43:bc:
58:6e:b7:f9:8b:6c:df:87:b9:ef:5b:6c:9c:90:13:07:ed:b4:
df:75:0d:6f:aa:27:85:3a:b8:d4:c7:b3:b0:33:cd:da:57:03:
52:7f:34:ad:4a:81:f1:aa:28:d3:50:6b:bb:f0:4a:98:8a:3e:
fc:36:d0:8d:61:03:82:59:f1:19:eb:fc:ce:bf:66:dc:f7:8a:
5f:07:0d:1e:55:25:ed:fd:a1:a0:bc:a3:84:f4:9f:58:bf:21:
50:1d:99:59:42:f2:7c:ae:58:98:03:84:31:ed:5f:f7:64:91:
6c:eb:1b:f5:93:4f:65:05:84:c6:84:cc:e7:a4:10:5c:4a:6b:
90:63:9a:af:d7:77:8b:df:6f:63:41:fb:c7:e1:60:b4:ad:39:
73:d3:5a:21:d6:16:c6:c6:e2:4b:83:20:51:3b:41:25:80:c4:
a0:10:56:e0:bb:bf:cf:30:4f:12:1a:7f:df:53:e6:c8:89:ce:
71:76:d8:73:d9:86:41:8e:60:49:c3:27:a3:e0:f2:0f:6a:26:
bc:2c:9a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:26 2025 by rpki-client