Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
File: FdaRyV0UuLzeZpKgMgzA4odWsFk.mft (raw, json)
Hash identifier: 8oLaZiOmzlxjwe7Zx88cSSjcn6VGKe3Q70QFjNOU1H8=
Subject key identifier: BC:46:EF:AC:8D:61:22:13:60:AC:14:82:21:5F:60:67:28:DF:97:8D
Authority key identifier: 15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
Certificate issuer: /CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Certificate serial: 0194BCE0DB977BF2F34EF5CBC74E01243B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
Manifest number: 0258
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: FdaRyV0UuLzeZpKgMgzA4odWsFk.crl (hash: KXItq+6m8t9snN8bchlwZ+VJHoLt+tZp+zJqcPi6aQs=)
2: l3kIS-H41zLKlD417TNejtnJFY4.roa (hash: FXoM//hoNobYIufdMl7hBHWJsSDmxoPmDOYAZonvSC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:db:97:7b:f2:f3:4e:f5:cb:c7:4e:01:24:3b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=bc46efac8d61221360ac1482215f606728df978d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:4d:dc:5f:95:02:88:01:f3:87:0c:79:7f:
94:60:75:25:f4:6e:57:e4:a8:65:20:11:13:cc:ce:
0b:d3:81:78:59:61:52:e9:ad:03:e4:ca:ba:e2:9c:
23:79:22:cb:32:2f:7e:2b:1b:c8:b1:15:27:72:c9:
96:69:cc:7d:f3:cc:c1:4c:db:5d:0b:d2:be:5c:c4:
41:fa:6a:71:d0:a0:80:cb:d4:a7:48:81:f7:68:b9:
a1:00:bd:23:67:54:f4:28:1e:1c:e0:eb:b3:71:16:
21:e5:52:a5:be:5b:d6:6e:f2:70:93:7f:6d:4d:7f:
db:c4:51:14:36:65:bd:6c:e1:6c:00:2a:75:c8:0b:
05:ce:51:87:7a:47:25:41:92:f5:40:f8:a4:68:f5:
4b:32:6a:08:dd:80:56:40:76:38:60:be:36:2a:ff:
a1:32:2e:fd:71:49:6e:ea:5a:b4:88:62:5c:20:b6:
31:db:74:3a:b8:c6:d8:c5:68:7b:99:65:09:7f:c8:
1a:42:3e:1c:5d:a1:3d:71:7d:42:94:49:c6:85:d8:
8b:52:65:16:64:e4:60:fe:7a:08:cc:a8:36:b7:cd:
2a:c8:a5:88:f6:f5:6e:a8:7f:9a:88:53:9b:c9:ba:
7b:58:f3:51:ba:fa:21:3e:5b:25:5e:b0:94:1c:88:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:46:EF:AC:8D:61:22:13:60:AC:14:82:21:5F:60:67:28:DF:97:8D
X509v3 Authority Key Identifier:
keyid:15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:69:df:28:16:31:f0:8a:b3:32:81:65:c0:ae:73:fd:f7:8a:
30:75:d0:f9:6a:13:92:ff:2c:b2:86:67:a1:a2:d2:38:2a:43:
ef:5f:75:57:f4:04:9e:f7:ee:82:cf:d4:65:96:31:9a:a8:7a:
e6:58:5f:9b:c0:8f:a2:a3:eb:ff:40:e1:48:33:03:8e:ca:23:
2a:bb:80:75:ec:7a:b9:ae:f0:58:15:c9:9e:61:27:c6:65:3e:
47:60:e9:e8:23:b3:5b:85:f3:aa:4f:e1:f3:5e:6a:b4:cc:41:
b0:94:b9:6e:0d:5b:26:10:23:ca:30:a0:29:e1:d8:65:55:79:
fd:72:0a:31:49:76:0d:42:8e:22:3d:29:0c:36:6b:68:27:c0:
42:dd:d0:8a:24:f8:6b:91:47:30:42:03:80:68:59:c5:2c:77:
c8:d6:41:20:80:65:fd:6e:49:25:49:95:1b:42:11:9f:ba:c4:
5f:db:81:8c:81:e5:0e:25:58:41:68:5b:93:f2:8e:19:22:46:
31:04:e5:12:e8:ee:ee:f0:5d:f4:9b:79:bb:60:03:28:12:00:
c7:dd:f5:60:8f:11:9c:4d:7e:97:7e:12:09:19:4e:82:b3:c3:
6b:54:36:87:da:0f:30:5c:05:da:a6:23:e9:e9:b2:39:28:89:
9c:01:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:56 2025 by rpki-client