Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
File: 87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json)
Hash identifier: siq5bVNFgEjnCySqlb5ggs+/miusFHQbTLjpL5JBLv0=
Subject key identifier: F9:6D:7C:29:9C:DF:02:F7:4E:C8:0D:01:49:AD:A9:4F:10:4E:01:F1
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial: 0194BD4EA03F3129FD680F2FEC74F91DA0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
Manifest number: 099F
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: 1-Umc9hOt2tpo1ZchNi7HZONvobM.roa (hash: uKhjdfQ+p8B+ov8GKsdABY8fRu2epUYrzObWxrEfxuQ=)
2: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: 10fYyamh7Vn2bUqybUbAVjBSow518+tjd/1a9ZMy4+o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a0:3f:31:29:fd:68:0f:2f:ec:74:f9:1d:a0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=f96d7c299cdf02f74ec80d0149ada94f104e01f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f6:16:cf:96:30:82:37:45:0c:86:75:1d:32:
af:36:c8:99:95:9e:b3:4e:26:a8:da:44:9a:6e:32:
88:9f:f3:ab:63:15:fc:be:f2:dc:bd:de:43:71:24:
62:d8:f9:16:03:3e:4c:e8:b0:3b:3a:34:42:43:50:
e0:b5:32:1b:38:8a:1d:7f:30:c3:0a:a1:6d:0d:cc:
d5:d6:e9:54:e7:17:2c:d5:12:c6:b2:b7:7a:7b:dd:
5d:33:e5:7f:a4:bf:a2:56:01:d0:00:96:13:57:36:
0d:90:6e:f5:a9:f4:62:ae:d2:3d:df:31:75:54:14:
ca:b6:4b:ef:92:24:5b:d1:24:5d:29:f4:cb:44:e9:
e9:dd:df:6d:25:6e:2e:25:63:05:81:ea:20:13:4f:
e3:9c:dd:ed:23:d5:e9:87:e8:7e:40:f7:b1:32:3c:
c3:37:e2:dd:db:9b:65:52:25:4f:13:86:38:43:d8:
7b:35:ad:de:2f:05:2c:b6:ef:d7:6f:6e:fb:34:2a:
c5:41:c0:52:5e:5d:c4:b2:0d:91:6b:11:57:89:6c:
4a:de:27:f2:3e:dc:69:79:72:65:cd:90:33:a5:5e:
f3:5d:36:c9:7b:c7:f2:cc:57:cf:de:6c:34:e7:84:
65:ab:d9:18:ef:77:a2:95:a4:44:97:3c:bb:36:43:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6D:7C:29:9C:DF:02:F7:4E:C8:0D:01:49:AD:A9:4F:10:4E:01:F1
X509v3 Authority Key Identifier:
keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7e:9c:65:59:30:f9:52:47:f9:a9:b7:3e:88:cf:f5:e7:5c:
c9:1c:77:9a:71:48:f9:88:a2:95:eb:84:14:49:d7:ef:1d:5b:
c4:5c:cb:37:56:2d:44:e2:1c:3f:f4:86:a1:d5:14:ac:fb:42:
aa:60:57:53:84:27:b3:58:ee:1b:71:17:e9:a0:d4:d8:68:33:
2d:63:2f:18:70:72:ae:b9:a7:f4:09:4b:0c:e0:2d:1c:66:6d:
e1:83:b6:d0:f6:c3:d1:a1:41:73:7b:b1:a1:f5:66:52:88:0f:
c1:30:a7:65:bc:7c:17:b1:0f:9f:bf:e1:49:62:4a:08:1b:23:
04:56:7c:8e:31:90:c5:fe:27:f6:ef:c3:30:1c:2a:76:8c:7e:
ba:01:92:c6:1e:f4:36:f7:12:ec:9c:e1:0f:8a:95:0d:a6:c2:
7a:90:99:02:2f:64:3f:38:a2:88:e4:25:74:50:ec:4f:66:75:
1a:00:74:46:67:f0:bc:eb:f3:68:e1:33:43:34:65:a6:b9:49:
62:63:68:30:f8:03:71:2d:0f:fa:f6:b4:cf:f4:50:aa:14:40:
8a:aa:dd:2b:1b:39:f2:b3:71:97:f1:f8:65:c6:c4:be:c8:24:
ed:6a:08:6c:6b:6f:75:97:16:c1:56:0c:22:55:81:9e:92:d0:
6b:c7:85:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:07 2025 by rpki-client