Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
File: fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft (raw, json)
Hash identifier: 7ZX24Q75Re+dcrsALsW265YxnCX3uMxhunT5JkKFEqg=
Subject key identifier: 28:D3:21:3C:EE:D4:9E:ED:87:AC:30:E8:3A:7F:DD:FB:28:44:78:03
Authority key identifier: 7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75
Certificate issuer: /CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75
Certificate serial: 0194BBCE1F25638AEA2A264B9152D2C643D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
Manifest number: 35
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl (hash: RGmqa2xV4C9feACFxAoibFTBJLsWV71J4uX9yQt3sIs=)
2: kgTnhPtf5U0Bz8tjOOggGBZkLG8.roa (hash: HNiluWUdkJ/NWqiUVgEDQcdv9s5KKhDvu8H4CNi9wMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1f:25:63:8a:ea:2a:26:4b:91:52:d2:c6:43:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=28d3213ceed49eed87ac30e83a7fddfb28447803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:e4:f0:7f:e8:a8:46:51:f0:5d:bc:4f:fb:
f6:e4:41:aa:39:1b:ed:2f:52:d1:e8:be:cc:5e:55:
c6:ea:65:5d:bc:ba:1e:3c:14:c5:ae:67:2d:e7:72:
1c:5d:8e:4c:31:58:e4:1a:0d:57:fe:42:8b:41:62:
17:4a:91:34:a8:b5:75:99:96:c1:2d:57:58:06:33:
b9:5a:f7:ef:a7:60:43:71:14:0d:6a:18:13:27:ad:
2b:0e:39:11:24:d0:09:dd:d9:a7:e4:3e:44:8a:de:
75:c1:0d:d0:22:93:68:32:96:7f:e1:cb:5e:02:a8:
15:9a:95:36:8c:db:d4:6f:e1:2d:6f:e7:fe:80:3c:
ef:9b:f4:ef:ee:49:c7:76:a9:a1:03:d9:31:9b:64:
dc:46:13:65:b1:fe:f5:ae:79:2c:2d:f7:1d:3c:58:
ba:d0:57:d7:d6:43:95:57:2c:23:d4:8e:c7:bd:07:
3d:1e:7e:83:de:f1:9d:ea:60:98:48:85:ab:13:79:
9f:1d:1e:0b:54:5d:1c:5a:dc:24:25:44:e1:9a:8a:
53:ab:5e:c8:80:b7:2d:da:3a:36:39:4e:65:fc:19:
78:4d:54:e3:27:4d:ab:11:5e:5a:c1:c1:38:2a:b2:
94:b2:04:be:94:78:fb:46:6f:05:2c:67:7c:1b:d2:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D3:21:3C:EE:D4:9E:ED:87:AC:30:E8:3A:7F:DD:FB:28:44:78:03
X509v3 Authority Key Identifier:
keyid:7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:32:48:b4:27:55:4f:fb:ba:e9:04:7d:2f:10:4d:68:14:0c:
bc:8f:44:2a:b8:fe:5c:0f:38:a3:61:c7:84:2a:a3:a1:71:c1:
dc:02:98:93:66:cb:5a:8c:08:1c:20:25:a6:1b:52:62:84:68:
13:de:85:7f:18:57:23:03:48:99:8f:09:00:15:70:ec:5a:b2:
c0:f4:ed:7b:d6:c8:55:57:3d:d7:29:57:1b:23:28:ea:79:85:
1c:f8:ae:77:4b:60:72:5c:9b:05:7f:f2:f2:c3:d2:21:17:84:
84:81:3a:de:e4:40:8a:2e:5c:18:eb:65:b4:fb:7e:bd:93:2e:
ec:0d:06:2b:69:b5:16:7d:2e:ed:b0:2e:f7:cf:0e:95:58:01:
17:74:ad:3b:35:de:24:64:08:e2:b5:0b:b8:05:72:0b:b4:8b:
28:80:50:92:0d:db:d1:a6:4f:f7:1d:9d:83:81:7e:40:81:a1:
69:7e:81:a5:a8:28:ce:23:94:ef:f5:19:90:ec:10:4c:e4:c2:
91:2e:30:e8:5d:83:cb:89:c3:1b:48:d3:11:f7:9a:11:77:ee:
76:56:14:f9:2c:18:1c:02:47:c3:6a:23:89:6c:48:73:94:c3:
d4:93:22:1c:a2:5b:71:de:89:08:0b:41:dc:95:6c:91:c9:a8:
98:55:55:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:52 2025 by rpki-client