Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
File: fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json)
Hash identifier: U8z39SxVeXZUp8JH1L9ED8yQKLj60gup+icV9B/Akf4=
Subject key identifier: 4D:00:39:3A:9E:D6:56:E3:1A:05:16:3F:BA:E1:71:EE:AC:31:EA:4E
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial: 0194BBCDCA41914D7D04FF7D534E4F9559C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: 8sHq76M9+7e1im3PknBf/kFfPZTUjojiItXY+kxXnGA=)
2: k81sGP_nTYcnr-ydvL_qIPOJOvk.roa (hash: 5IYqtPSCzWY5rft+/OTv7pak8S3Yrmu5rpVtbzra1bc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ca:41:91:4d:7d:04:ff:7d:53:4e:4f:95:59:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=4d00393a9ed656e31a05163fbae171eeac31ea4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:24:ec:63:8c:36:3e:bb:e4:81:8f:8b:44:
c1:43:68:b8:77:d2:23:0e:f1:3d:59:80:24:73:24:
67:34:90:7b:2d:65:ec:5d:45:a7:9c:2d:97:cc:88:
9d:0f:e5:e8:dc:57:1d:10:78:2c:f6:3e:9f:9e:c9:
7e:01:86:72:7c:84:20:0d:11:e1:21:1a:69:95:cd:
06:3c:d1:70:23:8f:c0:e0:75:4e:29:f3:96:80:fe:
04:85:08:cf:ab:36:99:46:be:86:36:40:aa:7c:1f:
93:b1:eb:b9:7e:47:58:b0:d9:df:15:5b:6d:c9:ba:
57:74:ae:2e:90:27:75:46:67:92:ea:ed:8a:64:a4:
66:d8:26:4e:7d:64:cc:db:d1:cd:3f:b6:15:69:87:
8e:88:d3:44:79:bd:4b:8b:d1:03:eb:a6:59:79:aa:
75:4f:10:58:91:0e:bf:5d:fc:6f:99:06:12:4b:52:
96:9f:59:9d:71:a9:b9:e7:03:f2:46:a8:4a:b4:54:
b6:42:bd:48:cf:92:bf:a6:b9:4c:11:1a:06:b6:70:
94:6f:b8:91:3d:ec:4f:45:b6:5c:74:e6:79:e3:55:
35:0a:cf:9d:11:ca:6e:a5:57:ec:73:31:79:42:4d:
a7:c2:9a:87:a2:de:c2:3e:ea:4d:86:8d:cc:ed:94:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:00:39:3A:9E:D6:56:E3:1A:05:16:3F:BA:E1:71:EE:AC:31:EA:4E
X509v3 Authority Key Identifier:
keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2e:2e:0f:e0:b5:7d:90:31:7c:0a:f3:5f:f0:48:80:f4:7a:
1f:90:77:a2:80:6b:c8:28:3c:a4:9e:05:a0:d2:d7:98:00:91:
e3:a0:26:e9:a8:8e:f0:3e:54:e5:41:36:b9:6f:15:02:92:84:
2b:9c:a1:79:70:a7:45:4c:47:af:a3:b1:c6:5f:e9:ce:b7:79:
1f:28:04:b9:57:99:94:0a:4f:6f:17:9b:40:05:0c:c1:2a:e9:
d4:ef:ff:9f:51:f9:f7:0b:bf:c8:95:49:ac:2d:6e:59:34:bf:
11:82:26:b9:96:64:5b:cf:28:6f:b7:9c:5c:20:c9:72:52:e1:
04:e8:b7:b0:ef:d1:8a:6f:c3:ab:a3:63:dd:01:81:f6:ce:ec:
35:75:e9:2f:0c:65:c2:0f:62:ff:95:78:5f:3e:e8:29:16:83:
09:f1:47:03:25:79:e5:24:1f:6e:d7:87:5b:9c:45:2b:98:c0:
ba:94:28:79:a5:26:e1:d9:c5:15:e7:64:4c:b7:ff:6d:e3:4a:
38:3d:a9:bb:c0:81:65:cf:22:a2:66:06:63:ac:6c:d5:c5:96:
ba:77:21:be:93:37:8a:29:53:7a:0e:d4:00:c2:77:4c:80:d6:
5d:dd:6a:5d:71:81:82:4c:e9:45:54:8c:08:b3:6c:a1:25:b2:
75:55:97:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:55 2025 by rpki-client