Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
File: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft (raw, json)
Hash identifier: 72fVY6n4PM4+cE3U5UXyLQnEOGiIt93U6LRnr8HN8UQ=
Subject key identifier: A2:FB:2A:94:C4:8F:55:F6:11:E3:EB:C6:B6:A4:7F:A0:47:96:24:7B
Authority key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
Certificate issuer: /CN=fbb0a25810d02646656f909c44eb2ba939d23209
Certificate serial: 0194BC0510243A4C27B4A4277E220B319723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl (hash: aY48m45G6Imc9HJOQu6Tvcbi38hYj/IJ4guDbMNoZKU=)
2: bXTr3E6VnWX26W0oqBoPPL1PlHA.roa (hash: G0OUsQqR41YHtb5AbPT1gfl1AXhku70rwPK53DaTikA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:10:24:3a:4c:27:b4:a4:27:7e:22:0b:31:97:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb0a25810d02646656f909c44eb2ba939d23209
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=a2fb2a94c48f55f611e3ebc6b6a47fa04796247b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:cd:e3:09:6c:cc:74:eb:16:b2:86:0f:ee:
3b:c1:00:88:a8:a7:2d:ba:6e:03:83:93:c5:e2:63:
af:04:5e:89:8a:c0:9a:c3:3f:e2:db:59:b8:e1:6a:
ff:08:fd:39:d4:43:be:e6:73:f8:a8:ea:d6:f7:d5:
8f:d1:94:15:3f:8c:5b:30:c3:59:25:54:33:28:d9:
5f:fb:2f:0e:3b:2d:b7:6e:5c:97:f2:88:6e:4b:3c:
2d:e3:aa:e4:b7:16:26:69:5a:88:45:61:4f:26:93:
5f:5d:5a:7c:1d:5f:61:39:b8:6d:68:e5:1c:3f:15:
cd:db:9c:71:21:15:f7:3d:94:34:16:15:58:ff:ec:
ff:42:41:8e:a4:da:63:1d:68:00:1c:e3:10:34:4d:
c8:21:2b:01:45:20:f1:fb:ae:7f:42:a3:59:30:7f:
8d:a3:3f:8b:98:95:0c:b6:21:68:8e:4a:2e:a1:d5:
8e:00:e0:58:0c:e4:77:6f:e3:ca:18:42:bb:67:9c:
bc:a5:30:6f:c9:a3:b2:ed:d0:ee:26:40:67:f7:59:
13:9e:36:a4:52:b7:ff:1f:e3:b9:53:b3:a1:23:05:
2d:45:23:0b:92:10:a9:22:9e:9b:bb:d9:96:82:b8:
f1:b1:b2:81:80:39:d3:00:8f:ed:fb:0c:c8:f1:f6:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FB:2A:94:C4:8F:55:F6:11:E3:EB:C6:B6:A4:7F:A0:47:96:24:7B
X509v3 Authority Key Identifier:
keyid:FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e4:da:f7:a8:29:cc:36:a4:f5:37:fd:bd:c7:24:35:72:81:
ad:b5:f6:95:d1:b9:65:2f:82:45:ce:0b:dc:db:e2:d5:0e:0d:
11:f7:27:1a:f1:3a:75:28:d9:c9:08:2f:9c:e7:25:f8:5b:a3:
19:c0:b3:e8:74:d8:64:f7:49:d8:87:fb:0a:76:c2:d8:36:93:
09:c8:2a:06:31:b8:5c:95:91:b1:df:ba:5d:87:a0:f4:11:50:
92:3a:1c:9d:4b:a1:d9:ac:7d:ec:dc:25:c6:69:13:52:96:27:
b8:dc:09:5a:6a:24:85:49:05:7e:68:24:9b:d1:c2:06:4f:a7:
38:e7:28:f0:d0:57:36:09:e9:b7:2a:f4:58:11:14:0e:fa:0d:
b5:64:9e:86:21:b6:57:55:4d:51:c3:b8:ca:ff:55:7d:fd:32:
ea:cc:c4:88:2a:2e:78:d2:4f:d1:a3:31:59:72:25:9f:f8:b7:
56:e9:6e:1e:99:51:27:f1:b0:9d:c7:2b:db:1b:9b:c5:9b:91:
31:09:9b:ef:df:ae:9a:c7:94:e3:82:9b:a7:07:af:39:a8:2f:
ee:11:31:2d:45:fa:ab:64:6c:c9:b1:b3:18:b4:9a:7d:80:a4:
7c:d4:e4:5c:dc:77:93:43:87:1a:7a:e9:00:8d:a0:65:e7:1f:
8c:ad:7d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:04 2025 by rpki-client