Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
File: fmdQ5YygordfLFO99vYf9j7IMcs.mft (raw, json)
Hash identifier: NX9JO8ktNAPGOJIkzum0qeVJU7FA7u6EqfiNZ3g5+gk=
Subject key identifier: 4E:7A:4B:3D:A6:AD:08:2E:07:A3:6D:FA:6A:2D:07:1A:D9:DE:A9:02
Authority key identifier: 7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
Certificate issuer: /CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Certificate serial: 0194BD859FFE27721E8CE0202DD98DC2D3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: 1jPmqvt1ilYlmNcTs9vv0mQwV2Y.roa (hash: eLo4dRJvSmA8RvGBVuxw5fjwL9gDtsf1LW0xwTy98e0=)
2: fmdQ5YygordfLFO99vYf9j7IMcs.crl (hash: 3ImOU5u+1NWzW9BoVdqVIARI7ok4A7TYUCGpMaje+R4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9f:fe:27:72:1e:8c:e0:20:2d:d9:8d:c2:d3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=4e7a4b3da6ad082e07a36dfa6a2d071ad9dea902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:3b:2f:81:01:49:d6:7b:0c:ea:44:4c:69:
47:b9:1d:13:cd:d9:0b:b6:93:1a:51:0c:0c:16:00:
98:f7:25:39:53:6a:f7:54:3a:64:e5:88:d3:1f:bf:
91:50:b5:6e:b9:cc:82:89:a5:90:ad:16:aa:e8:53:
1f:eb:b5:97:52:1f:26:64:8c:65:cf:3b:d0:3c:c9:
41:b9:da:0a:6c:2b:87:64:55:14:e8:7a:cd:63:f7:
3b:5a:74:25:09:b4:ac:4c:c9:0b:4b:da:6b:fc:3b:
c3:0d:6d:71:82:90:b7:cb:e5:71:4b:ab:20:61:e3:
92:43:a8:7d:e9:6a:5a:d3:9c:01:36:9d:4f:be:6c:
23:b9:a3:f6:99:de:21:2c:02:13:50:71:bb:14:39:
32:4a:8b:96:6f:15:85:bf:71:cb:11:f6:d7:4f:56:
05:d8:05:90:f0:ce:06:c8:32:18:82:6f:03:5e:5a:
92:a7:19:40:bf:e5:66:70:71:4a:54:bb:21:42:e6:
d1:fc:d1:46:64:47:4f:16:29:fe:03:bb:51:00:92:
8e:11:4d:fe:07:99:54:d3:16:c1:08:ae:c4:95:88:
a5:4e:bc:c4:dd:cc:bd:0c:52:25:d9:f7:18:f2:03:
13:67:37:dc:b0:47:64:c2:59:14:2e:10:79:57:bf:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7A:4B:3D:A6:AD:08:2E:07:A3:6D:FA:6A:2D:07:1A:D9:DE:A9:02
X509v3 Authority Key Identifier:
keyid:7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a1:62:47:17:de:80:01:5f:a3:e1:60:42:92:48:77:3a:11:
26:69:f2:7b:81:54:4d:b2:c3:1e:41:06:65:2a:54:8c:4a:51:
fb:73:de:36:32:9a:84:b8:60:f5:e3:ad:57:a3:8c:bd:42:de:
f1:76:91:cc:de:3d:89:0f:9c:f6:28:43:e4:a2:4c:98:86:04:
1e:a2:cc:6e:4b:5a:90:3f:b7:c8:b2:c7:fe:25:c4:dd:4f:07:
fc:7f:e9:1d:53:64:9e:6c:ea:c1:e8:f7:fa:f7:d3:29:c6:06:
06:66:14:46:e7:34:b6:70:79:8e:66:69:c5:e2:c5:3c:ad:96:
95:c5:67:79:31:91:dd:b9:c0:91:b3:ed:6e:f4:21:39:fe:59:
e9:92:0f:93:f1:ca:51:1e:b1:90:5d:eb:3f:f6:9c:1f:30:e0:
22:09:b0:5f:71:76:25:d6:35:48:2f:4e:31:dc:d0:14:05:e4:
ca:3d:a2:52:9e:2d:06:e9:52:14:ca:83:b2:54:8b:8a:41:db:
5e:88:a2:15:75:95:79:61:ad:c9:8b:02:85:05:20:17:b6:c7:
59:3f:e3:68:fe:18:f8:22:3e:7f:b5:50:8f:9b:ea:aa:47:c4:
81:1e:db:0c:4b:94:50:74:f4:9e:c6:8e:d6:4b:36:3a:05:18:
82:72:6f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:18 2025 by rpki-client