Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File: fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier: +exoQOukX3Lqdg0/MIkSb/K+2Hg/8PaTLf4k8k7e0Jw=
Subject key identifier: 59:DC:2D:C0:68:F7:51:20:D8:40:3B:BF:EB:71:3A:23:13:43:2D:0A
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 0194BC05245E0FACEEDA77196B5E90B16A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number: 0B51
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: 2CYNXB5qZHN7in7RGaGVmXvb7Xs.roa (hash: n74UAylTv760Shvrd+PI6ipCj4rV+2WaR3QnP3+8e6Y=)
2: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: RxQHlS7v7eQq5b+W8Jz3vYhCiaqr+mti7UAk2EkPt/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:24:5e:0f:ac:ee:da:77:19:6b:5e:90:b1:6a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=59dc2dc068f75120d8403bbfeb713a2313432d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:02:fa:f0:64:f8:86:c3:56:54:5c:a1:54:b2:
2b:9f:e9:38:9d:a8:ad:56:fd:f3:ab:fc:9d:a7:c3:
2b:d3:d2:93:fc:26:34:d5:e6:23:ca:52:e2:ca:09:
e4:18:80:9c:f1:99:a9:53:47:d3:1d:6b:14:8d:a0:
fa:d3:66:07:ab:01:81:38:ee:db:9b:b8:07:d7:56:
64:3c:df:68:6e:ca:51:d2:e7:db:96:96:fc:d4:a4:
6d:30:84:26:55:c3:16:79:a1:48:65:d6:7f:9c:47:
97:3c:73:f9:d4:c7:36:cc:6e:d0:11:ff:ac:94:0b:
4b:28:f8:33:1a:23:80:b1:34:61:ec:80:74:8a:ef:
4c:b8:ef:5c:07:a5:34:b7:91:56:8e:02:e0:67:be:
fa:1a:49:33:86:ae:04:80:47:ab:21:a8:91:f3:24:
a2:c6:be:62:2d:d6:bc:30:c0:ad:04:cf:a6:24:8f:
46:b4:82:33:07:a1:b4:a3:05:19:14:c9:94:d1:cc:
bd:25:a4:28:5a:dd:60:ee:75:d7:91:99:5f:9a:6f:
90:e8:c3:04:5c:04:75:ce:91:10:26:57:6a:ae:98:
59:e9:d4:05:d0:93:d2:67:65:9d:26:c6:95:0c:70:
3e:e5:21:94:55:c4:f9:60:18:45:9d:fc:e9:69:39:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DC:2D:C0:68:F7:51:20:D8:40:3B:BF:EB:71:3A:23:13:43:2D:0A
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d5:f9:79:bc:04:85:d4:fd:65:f7:78:d6:af:04:fc:c9:79:
4d:86:02:9e:fe:42:27:ce:3f:8a:83:b0:c0:f7:18:f7:e0:68:
2c:25:46:14:f8:e2:3d:98:97:fa:29:d8:86:72:13:38:d6:83:
1c:79:95:ef:eb:eb:db:fd:fa:29:b2:26:0c:4b:62:c2:b1:28:
4e:bb:62:dd:13:ae:b1:59:e9:ba:cc:7f:a8:9d:aa:34:be:f0:
cd:e4:fb:df:0c:3b:ab:17:40:d8:bc:91:c3:ac:e6:8b:60:20:
bd:13:41:3b:1e:ec:b9:9a:36:10:5d:3b:26:b4:4c:68:e7:3f:
fb:9c:ad:b8:cd:b2:12:e0:4b:32:5e:04:c4:21:62:0c:11:b7:
a3:da:7f:2c:49:da:55:53:fa:7c:37:8d:6d:db:f9:7d:8e:45:
41:c5:3c:8e:ad:59:a3:84:8d:09:c0:66:67:f3:e3:43:4c:fb:
3f:83:ea:d7:c4:96:78:c0:b9:be:86:20:22:55:98:da:f7:27:
b7:e1:0b:c5:d7:7d:91:ab:33:78:e5:be:2f:e6:cf:55:a0:b6:
8d:1b:14:f0:64:1c:ec:93:49:af:e3:b3:7b:03:11:5a:5c:79:
2c:39:ca:1f:22:e9:9d:91:9c:e5:29:40:08:8f:58:79:dc:fc:
33:0b:11:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:18 2025 by rpki-client