Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
File: fFdTLhz9MccnMuRONTn_bglsKkc.mft (raw, json)
Hash identifier: HJWBQJ+MwQKDAUIaDkYHyMC2HBnDRCC+Zk54fF83WQs=
Subject key identifier: 26:2C:79:B5:BD:7E:8B:DA:DA:A8:30:2D:F3:A7:00:83:2A:BC:19:48
Authority key identifier: 7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
Certificate issuer: /CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Certificate serial: 0194BCE0A95F51AF95FF592307964A710340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: fFdTLhz9MccnMuRONTn_bglsKkc.crl (hash: h0tn1vbcP36BemUNwYKxNDOYithxQOJ2XIVYB/YxrC8=)
2: gq5QbYLmKExu3_jiX8nvuPbkj4s.roa (hash: CUD+O9KICmmQQx1gdUSevF1umi42aYgBLH/jxWWsdAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a9:5f:51:af:95:ff:59:23:07:96:4a:71:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=262c79b5bd7e8bdadaa8302df3a700832abc1948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:06:be:fe:f3:00:a0:53:38:f7:e2:6e:7e:
9f:2a:95:9d:08:a6:3c:dc:58:db:4b:e9:48:e8:22:
e6:02:49:8c:56:56:3a:ed:14:c2:12:b0:17:60:60:
b9:43:d7:6f:16:00:24:cd:c6:5a:83:8f:91:50:0b:
92:f0:58:15:d0:14:d7:19:a0:91:cd:cc:37:3e:7a:
38:98:7f:99:e2:12:76:68:56:b4:b9:01:2a:78:5b:
15:da:30:82:26:db:70:ae:d9:0e:c9:a4:f7:47:90:
c0:7c:78:45:f8:42:27:f2:97:25:72:af:1e:19:38:
e7:86:3c:6e:ab:80:e3:3d:3f:81:5c:10:aa:26:11:
6d:ff:a1:90:ca:b7:36:9e:70:75:39:97:9b:d6:1f:
55:4c:46:32:d3:d9:80:2a:3b:6f:d5:64:0e:06:bc:
63:ff:0d:1b:08:72:f9:44:13:e1:f7:38:08:ba:83:
06:36:d8:96:e0:f5:c4:76:45:35:c6:e8:ea:27:a7:
13:da:d6:a1:2c:2e:21:47:11:8d:3f:4f:4e:52:0f:
cd:72:88:5f:f6:7e:8e:55:d9:2c:1f:59:03:fa:d1:
09:6f:72:4c:8b:e2:7d:70:87:14:c8:47:3f:f8:e8:
72:b2:11:a1:ed:d6:96:4a:cb:91:f9:88:a5:22:c8:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2C:79:B5:BD:7E:8B:DA:DA:A8:30:2D:F3:A7:00:83:2A:BC:19:48
X509v3 Authority Key Identifier:
keyid:7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2b:fe:cf:be:29:cc:85:c1:2f:e5:64:76:67:e3:4d:8f:ab:
8b:f4:0a:a8:26:0d:0a:38:31:1a:71:11:9d:ae:c8:d5:84:06:
a3:14:39:cb:44:25:de:65:33:3c:b0:c8:9c:85:cd:79:c5:14:
90:d8:c6:57:05:81:b8:8a:32:ac:38:7d:e6:18:35:03:4d:03:
23:1a:57:4f:8c:8f:51:5b:31:32:5f:5a:01:1e:00:f3:e7:17:
74:76:98:17:28:b1:50:e9:cf:f2:89:af:22:db:ff:54:9b:e6:
59:79:20:fc:68:5e:57:c5:82:b1:b5:fe:ba:67:d3:3f:a8:1e:
0e:77:bb:a2:93:3c:d2:f8:c5:61:02:09:64:c3:f7:23:dd:95:
8f:82:52:eb:7d:2e:82:43:7b:e8:8c:95:8d:d8:c3:f9:af:8f:
66:e7:2a:12:41:52:87:3f:60:7c:81:e1:3d:e4:21:ad:2f:51:
4f:5e:60:fd:aa:70:1f:f8:67:79:29:b6:8b:b9:3c:58:b4:1c:
e3:6f:e0:da:75:c1:f2:67:1e:5e:83:a7:67:b4:cd:c8:4b:1c:
d3:b5:2c:6e:d7:c5:fe:7f:52:9a:f7:2e:5b:b1:ef:e5:94:88:
12:c8:48:55:1c:67:71:21:65:cf:9c:ab:c6:58:75:5b:7f:62:
48:b0:c1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:51 2025 by rpki-client