Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
File: flVV8aLO6JtxNGVghvBU15Y1PB4.mft (raw, json)
Hash identifier: jgOi0BrAo8kmdgzhHyVQyVCgFffLW61z6bMjPM40u1o=
Subject key identifier: 5E:A1:43:B4:99:EC:47:EA:86:8F:51:0D:70:3E:3D:07:B5:EB:57:43
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Certificate issuer: /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial: 0194BD854D797ABC6937B03B59049F2F59AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: KqK95kA_OeRU7nACiSd3lAze0vY.roa (hash: B7AMB5/+VeIa1+pxAsGTh2RB/UvVZMPeKnxdMUh4GP8=)
2: XDVhwmlTf_nqhCgNATZSd0ar0Aw.roa (hash: 4sk0t2n52t1+zIieedKbu6GF5jguH4obuoBrZPYHYOc=)
3: flVV8aLO6JtxNGVghvBU15Y1PB4.crl (hash: xBpEtrPODHtNh8HeLFxI1w3sKrDLQZL4UFlF95t5DN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4d:79:7a:bc:69:37:b0:3b:59:04:9f:2f:59:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=5ea143b499ec47ea868f510d703e3d07b5eb5743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:21:26:a4:35:50:9d:1f:0e:4b:37:9a:25:aa:
cd:6a:a4:11:5e:46:cc:de:b2:c2:d4:42:22:e0:fd:
cd:b4:b5:2b:e9:ce:76:c6:c9:44:69:04:50:31:dc:
4d:d6:35:28:ef:a2:80:e1:72:53:5b:f6:92:36:bd:
9f:14:b1:83:20:ac:6c:d9:60:c3:be:d8:a3:a6:c4:
f4:17:34:cf:98:72:18:d1:73:92:e6:07:e3:5e:2e:
79:4a:1b:a2:a1:40:af:36:05:04:71:01:66:4f:b1:
6f:6b:15:dd:56:ea:01:40:f9:26:da:09:c5:9d:1c:
ad:c2:54:75:8d:58:50:ea:30:55:3e:78:e9:72:46:
8f:66:2a:e4:00:a5:2f:18:47:e7:36:0d:97:d8:8d:
bc:42:bc:59:28:13:0f:ed:44:f5:65:75:58:d0:5c:
fa:f6:46:a3:e4:fb:79:24:76:cd:bc:a1:6c:19:6a:
c2:74:bd:e1:c0:ed:ab:7c:a5:e5:c4:19:9b:74:14:
e6:18:88:85:93:c2:e1:22:c9:71:3d:20:e9:e8:ec:
9c:2c:f2:6e:fa:c4:54:0e:45:22:db:35:00:2a:29:
67:82:89:70:fb:89:3d:fb:fa:0c:0c:24:81:4a:1b:
6e:aa:61:f8:ac:46:26:ec:d9:bb:45:e1:57:0d:97:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A1:43:B4:99:EC:47:EA:86:8F:51:0D:70:3E:3D:07:B5:EB:57:43
X509v3 Authority Key Identifier:
keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f6:63:0e:96:42:68:32:8c:30:9f:bb:5c:c7:2f:c2:8e:c3:
b8:9f:5b:a0:ac:a9:f2:c3:50:ff:86:39:25:9c:5a:81:a9:bb:
80:dd:fc:50:1c:63:24:44:8d:3e:07:e6:0a:27:7b:be:17:39:
1a:fd:23:f1:65:47:42:cf:fe:16:32:e2:63:8b:bd:92:06:0c:
2d:9d:0f:c7:c2:c8:56:7f:f4:0c:cd:ec:f5:0d:0b:2f:1a:58:
c4:9a:bd:f3:ff:f4:29:70:47:ed:13:92:ac:34:d4:1a:78:e9:
0c:a8:b7:3e:01:0e:89:58:b4:5d:6e:29:d2:2d:ca:da:6c:79:
56:4d:90:ae:bf:3d:fb:30:36:71:19:00:ef:4a:2a:09:b5:9f:
09:64:7d:6c:0a:13:7e:ed:d6:5a:fe:d3:77:fb:5d:33:80:63:
6a:db:3b:b5:6b:64:85:77:48:af:99:ba:d8:65:56:21:77:c4:
22:d2:83:45:bb:98:84:d2:8d:b9:47:0e:50:cf:12:c0:88:2c:
7d:45:eb:e2:c8:2d:a7:cd:f5:18:06:c4:e2:b4:64:b8:d7:42:
57:f7:ca:ed:63:ad:c2:ee:5b:6b:72:06:5a:09:b3:1f:00:7c:
cc:d2:7c:7a:fe:05:1d:15:63:67:8f:6a:3f:f5:26:e5:16:83:
28:90:4b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:41 2025 by rpki-client