Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
File: fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json)
Hash identifier: 1O7XVyM6xRUj1iNVAI0DJh6j1NMTl8zkKnmnHNsf7kM=
Subject key identifier: 4C:9A:CE:4F:09:DD:AA:85:D7:61:AE:4C:0C:16:6E:03:99:E9:32:C4
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial: 0194BCE0BA9265289F5F1A94EE4EC3023CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: JcAhZrilsZkvSyojajHWDjOF_6I.roa (hash: W7eqhWRP/GcuUd5Q71f0zaMk5StnfS4hfdbNGseVYE0=)
2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: Xc1qUXpNM1VD580tF/IGqED0wYusg2ZoxKrieXmxeV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ba:92:65:28:9f:5f:1a:94:ee:4e:c3:02:3c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=4c9ace4f09ddaa85d761ae4c0c166e0399e932c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:10:53:fc:91:58:1e:f4:7e:0a:f7:8e:69:
b0:5e:bf:bf:a0:59:f0:37:6d:4e:8c:56:7a:10:3c:
e8:8b:9a:f5:64:a9:f3:b7:63:a8:bd:d5:5e:79:a5:
67:ee:19:b6:8a:5e:fa:6f:f9:fd:b8:75:81:37:0c:
83:97:c4:dd:64:ab:45:a9:a7:13:04:0e:96:9d:6e:
02:18:51:36:2d:25:97:8b:4c:35:b4:6f:69:14:d9:
fe:8e:24:32:3e:3d:92:8e:b1:cd:92:9d:ab:7e:34:
b9:dd:28:ae:0e:0f:d6:eb:50:99:d2:75:de:11:d1:
d2:49:0a:11:cf:8d:2a:d8:95:9e:2d:a9:76:0f:cb:
60:0e:d6:ab:94:f4:2e:c2:91:53:5c:0b:35:d9:66:
df:87:c1:6c:75:9c:80:ff:c1:26:bd:4d:5a:81:76:
ae:25:e7:bd:92:69:21:53:78:af:59:f2:66:18:0e:
4f:b3:22:73:96:86:78:43:8b:13:fa:6c:66:c8:df:
87:8c:09:4d:f9:6c:7c:e2:69:3b:b1:4d:d8:19:47:
cc:0f:fd:0e:74:1d:ee:17:12:04:58:a1:4b:1f:51:
8a:8d:24:36:5c:3a:b1:c4:9f:b9:93:0a:42:3d:94:
1b:3d:f7:00:c4:c9:c8:55:81:be:65:7b:94:75:b3:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9A:CE:4F:09:DD:AA:85:D7:61:AE:4C:0C:16:6E:03:99:E9:32:C4
X509v3 Authority Key Identifier:
keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:65:e8:c1:4e:09:f5:d8:dd:71:8d:e6:f9:9f:60:9a:99:d6:
a5:ba:e7:a7:cc:66:4b:e2:4f:bf:b0:32:37:df:8c:0a:c7:91:
24:02:61:87:19:8a:44:03:da:48:83:48:d2:d2:d1:4f:ea:10:
b8:d7:f7:d3:ee:77:2a:7a:da:5d:f2:23:95:0d:39:17:44:41:
4b:ed:92:b1:11:84:33:8d:40:c8:24:75:5e:3a:96:9b:b7:71:
9a:b1:9e:88:24:da:6d:fb:a7:db:f4:ad:f7:5a:bd:03:7d:2c:
7e:ae:71:17:bd:8d:23:5f:1f:1e:62:07:0e:fa:24:8d:4f:21:
c6:e1:d1:4a:f3:f3:3c:ae:21:80:f9:e8:1b:44:7a:1c:c5:3c:
72:24:8a:ff:be:af:42:24:16:23:ca:a6:99:19:9b:87:3f:0b:
7e:38:bb:35:63:5c:46:bf:1d:28:97:e1:3e:6a:81:2a:9c:2f:
63:f4:84:fd:0a:7b:0c:79:c5:30:47:e7:9c:71:44:67:95:5c:
14:85:b6:af:8f:32:13:9f:8c:bd:13:e4:1f:cb:77:68:5c:51:
90:90:f3:c7:1b:9b:52:27:5b:5c:26:bc:9d:0b:d2:16:68:f8:
0e:22:ad:98:bf:6f:25:21:36:9d:95:a2:75:e9:4e:f1:bf:a0:
61:a9:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:48 2025 by rpki-client