Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
File: fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json)
Hash identifier: qHrZTmLBSJyWK3TYQOdoAD10fCgpz5p1JdD5rWosaUo=
Subject key identifier: 2D:7E:A0:55:A6:8A:D4:30:43:F3:0A:BE:4B:CF:DA:D9:E9:1F:16:78
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial: 0194BD17964397A12043177061ACB94C19A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
Manifest number: 0E9A
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: 3yNnQ8YznAMF7ZncVAYjflpkjJRJvU7XBYV1RMEWhOY=)
2: iSrIgRlu5YD7Koa8bEOEIApsG1I.roa (hash: 1rQNsMYOVuSbFnE+oDLQ6neckAWKt+MSYxXbU0fBqpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:96:43:97:a1:20:43:17:70:61:ac:b9:4c:19:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=2d7ea055a68ad43043f30abe4bcfdad9e91f1678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fe:b6:dc:9f:64:5b:cc:ec:84:7d:b9:0a:9c:
48:79:e1:8d:b4:d4:84:68:a7:26:2d:ec:56:d6:75:
08:b1:9c:30:3f:8c:ed:5e:c3:c4:3a:33:92:d7:41:
b0:20:8d:85:24:61:4b:73:f7:e2:65:36:9e:63:6e:
b3:08:d4:aa:53:dc:c0:40:a9:36:35:18:de:31:b7:
31:f8:3b:aa:7e:4e:ed:83:52:fe:3d:b7:86:3d:ad:
66:b2:58:54:22:dc:f2:e9:a0:f9:5e:6d:d5:06:af:
37:10:c5:25:71:6b:b3:1f:1c:bf:41:50:26:6e:e9:
ce:99:03:17:13:9f:fd:bc:b6:74:bb:da:d2:79:5c:
e8:31:81:8a:8d:b0:5a:05:b8:83:1f:04:c6:f1:95:
59:35:1a:db:ef:ae:a0:3c:43:73:b9:4b:ff:35:46:
78:38:40:5e:9c:3f:0a:31:d1:96:c4:1a:0b:cf:0a:
d6:02:d1:73:b0:a2:24:c3:20:85:00:7c:0c:ff:d9:
ee:a5:e1:99:93:d4:78:9c:bd:1b:68:e8:ba:b5:1d:
59:c9:92:d4:b7:29:ce:00:2d:6b:53:ac:dd:fb:83:
c5:d7:33:98:d8:a5:f3:dd:87:70:f7:39:2a:f5:73:
fb:9a:89:93:75:05:7e:02:77:d9:ff:93:79:d7:8e:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7E:A0:55:A6:8A:D4:30:43:F3:0A:BE:4B:CF:DA:D9:E9:1F:16:78
X509v3 Authority Key Identifier:
keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b2:0c:53:9f:a4:17:f5:cc:d0:27:69:4d:fb:e8:af:de:0f:
c3:c3:07:d9:7b:13:ef:a6:5f:12:96:43:f0:08:b2:8b:3d:53:
ed:34:13:b7:11:cf:8d:05:57:56:be:5f:19:79:db:05:2e:b1:
e0:b1:4b:e0:d3:b5:1b:36:a6:ea:ff:22:2d:30:42:4f:c9:ac:
5a:16:35:cf:53:af:a0:50:60:dc:c1:28:06:8b:25:17:c6:c7:
94:77:9f:12:72:f7:21:b3:62:e1:70:58:a4:bc:6e:01:52:5b:
2d:fb:26:b9:01:13:42:d3:3f:ef:f8:97:8e:d7:f5:15:fc:33:
f5:31:a6:05:a5:df:31:2d:4a:e0:c6:75:b5:9c:5b:fb:7a:4f:
bc:96:b8:2f:66:92:b9:59:34:0f:02:b0:04:d1:26:e8:8b:d8:
c1:72:0d:43:f6:8a:ce:0d:37:1f:2a:26:db:ea:47:5c:45:c5:
d6:23:62:a9:2f:dd:3a:c4:e5:f1:e6:0b:04:48:96:d2:2c:d0:
d2:9a:fe:44:7a:d1:04:17:09:3d:2a:42:5e:34:4c:e4:22:4b:
a8:76:8a:ec:1e:2c:68:bf:44:d5:a2:c7:b4:5e:b1:4a:fc:f1:
e8:24:ae:ca:e5:a6:c1:72:88:61:ac:4a:34:88:b2:9e:1a:fb:
39:8b:bb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:07 2025 by rpki-client