Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
File: fDUy5S6q_vlIxCyLHVEUXKydTJY.mft (raw, json)
Hash identifier: taOStdCGuGe4H/+rpepoEf3mFYtJlSjLOhutJktZrEM=
Subject key identifier: 5C:67:C3:D0:02:D8:42:CA:EC:B1:8F:FE:9B:EA:DF:B3:35:CD:8C:35
Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
Certificate issuer: /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Certificate serial: 0194BC04B204C9CA2A18C5AF924570E1B976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
Manifest number: 0A19
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: XCHPvb-EkH1zGNPsBprEZBKSmdE.roa (hash: Sji1HnCVrncrNibsWO7N88ENDvFcUSSKPSq/SoaOpWI=)
2: fDUy5S6q_vlIxCyLHVEUXKydTJY.crl (hash: SDWUqdHiQwUsVC2qvLxIbHipEo6CyAsRN6iVKERPGcM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b2:04:c9:ca:2a:18:c5:af:92:45:70:e1:b9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=5c67c3d002d842caecb18ffe9beadfb335cd8c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:7d:e5:d0:ed:1d:8c:29:33:66:f5:70:72:
dc:29:55:41:6e:35:b3:d6:51:07:02:4e:82:e6:c5:
76:5b:88:0f:3d:bb:b6:20:d5:a4:fa:89:73:f1:9f:
08:53:8e:37:cd:22:5c:8c:de:f5:fe:b5:d7:ae:96:
18:29:5d:fa:ca:08:90:8a:a1:86:a6:41:64:76:20:
48:48:34:cf:c4:ba:39:dd:18:9b:9a:29:08:0c:36:
8d:c7:7e:ee:56:99:e3:19:42:b9:97:60:8d:7d:0c:
2f:a6:25:5e:49:d9:59:b9:ea:82:c8:32:a9:51:cd:
ea:3e:71:47:59:af:a1:fd:17:ed:77:1e:4b:f3:c0:
cc:5f:da:6c:1c:3d:05:ea:96:3b:d4:4f:84:e4:44:
a1:92:bf:dc:7d:86:98:3c:8a:b8:b8:ab:8b:8b:b6:
08:c0:c8:a3:46:ae:1c:44:24:ac:6d:dd:96:c6:24:
2c:10:33:64:1e:e7:9e:79:71:a6:9c:d9:9c:be:7a:
da:e0:81:a6:64:ca:ef:1d:cb:4c:c6:95:ba:92:a0:
b1:18:59:a4:d5:b9:ea:d0:e3:67:cf:4c:18:d6:94:
a6:04:52:9b:f2:ec:f1:2b:c0:18:ab:5f:85:7c:c6:
0d:a8:39:1e:2d:fc:01:06:57:47:a1:3a:b6:8f:e7:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:67:C3:D0:02:D8:42:CA:EC:B1:8F:FE:9B:EA:DF:B3:35:CD:8C:35
X509v3 Authority Key Identifier:
keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1e:3e:0c:da:98:00:14:9e:7e:9c:e9:28:12:95:8f:9c:55:
67:48:f2:67:69:70:11:b1:01:89:2b:aa:24:97:18:8c:f9:b2:
d2:0e:36:2f:07:34:dc:d9:5f:07:6f:38:53:69:7e:0a:3e:57:
b7:f1:c8:c0:8c:21:d5:06:f0:98:f1:c2:b9:6c:a1:d5:bd:a5:
3c:e5:48:2f:1f:49:87:8b:2d:ca:60:fc:01:6b:2a:6b:8b:11:
70:2c:40:4a:a2:45:80:da:f6:c2:ec:5a:e2:e4:e3:36:75:3c:
38:0a:35:1d:98:a3:00:08:0d:af:44:41:34:b5:3f:5e:61:ff:
73:87:54:30:ec:ec:f5:16:c4:08:18:17:87:53:1a:b3:eb:9e:
9a:a6:64:27:5e:53:e0:e8:d8:5d:e7:92:1b:13:f4:9b:11:21:
34:14:e0:37:48:0a:2f:f8:ce:cb:51:a2:e0:5f:f7:53:36:45:
14:b4:f6:aa:d6:8b:b1:7e:b1:08:8a:ad:0a:1a:48:41:0b:a8:
d3:04:7f:2c:12:1f:fc:65:18:f5:8f:69:3c:d9:fe:38:67:e9:
d4:7a:41:cd:79:a4:86:c5:80:88:d1:6a:31:4d:b0:bd:1e:38:
80:f6:99:5a:f9:83:70:0b:7f:1f:bd:a7:93:11:82:2e:c5:32:
11:8b:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:21 2025 by rpki-client