Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier: di78TO9zn2xfHzzboAtosdZPQ07dRq7MlheFV5r8hvA=
Subject key identifier: 23:E7:A8:66:13:E4:19:89:B2:38:47:16:A7:9F:1C:D9:B6:66:58:18
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 0194BC3C6704100BEC5D77765901A4A32597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number: 08F1
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: c0Cf6YCbscr3sGW2nWgoXFY8xps.roa (hash: 5gRboI0NrXJxmfngbqENdfvUiQ0ds61NdsYGIZfYOOU=)
2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: 0XnoB3aKTT5eD4Qt3VaC8TxF/kK/wUGvFQQEFTeJD6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:67:04:10:0b:ec:5d:77:76:59:01:a4:a3:25:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=23e7a86613e41989b2384716a79f1cd9b6665818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d2:12:c2:7f:5c:49:6d:ad:2c:74:1c:67:cb:
bb:ca:c3:c3:a4:19:69:b1:b7:50:51:0a:5d:d7:03:
0b:c7:eb:72:e8:e4:3b:0c:6f:30:2e:b2:5c:f3:a2:
a9:45:42:c1:d1:cb:cb:24:22:ea:ca:db:b6:15:4a:
24:ad:a2:d8:9b:5f:4c:1b:37:25:15:98:11:5d:5a:
e0:fb:e1:b8:a9:e6:e7:88:81:83:8e:a3:cb:b8:8d:
fa:a3:79:55:b0:9a:4a:f8:45:a2:2f:25:e4:2b:fb:
0d:92:34:47:18:93:34:2e:59:fb:8f:b4:f4:11:8f:
d2:e6:1f:04:ac:d8:58:cc:5e:78:4c:bf:7f:3f:a2:
41:3c:1c:42:3f:18:61:34:ea:ce:b1:15:31:24:50:
b4:cf:e0:7e:96:29:94:f1:1d:9f:4a:d1:be:be:1f:
d2:8c:98:f7:5e:9a:33:c7:43:bf:9b:79:cc:fb:b3:
d0:0b:20:32:67:f0:07:69:b4:ea:a7:64:ba:12:60:
0d:44:8f:7f:9f:44:05:2f:6e:f7:13:cd:07:0c:18:
83:0a:09:cb:19:ff:a3:97:b8:64:6c:5c:33:cf:81:
3a:5b:91:98:d0:a6:e2:fc:2f:88:d2:02:c4:75:73:
67:d3:3d:9a:e3:c9:9a:64:61:ce:1a:a7:b6:93:5b:
39:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E7:A8:66:13:E4:19:89:B2:38:47:16:A7:9F:1C:D9:B6:66:58:18
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8a:4f:a4:b2:4a:15:4a:e8:6c:49:35:55:80:87:2f:f6:b6:
7c:24:f4:a8:e1:2a:cf:b0:22:3f:75:08:8b:dd:3b:37:82:27:
84:aa:86:60:10:d7:df:dd:46:96:19:6c:50:84:bc:b6:5d:b0:
ff:00:1e:93:71:21:ac:55:9d:5d:6a:66:7f:a9:8d:ac:9e:e5:
c9:75:b5:62:cf:e2:ec:2a:51:c5:b4:b8:9a:e9:c0:0b:c7:5b:
ce:d6:49:5e:6d:96:37:fe:bb:27:3c:4c:4c:fe:b8:8a:7d:1b:
e0:c5:80:e9:15:63:52:ab:82:ca:a7:04:3e:a4:57:80:b8:34:
3a:41:47:7d:cc:53:39:31:ff:60:1c:2c:74:e7:57:69:0a:78:
27:f2:cc:72:b1:77:e1:8d:05:e8:d9:78:96:32:15:7d:75:4b:
d0:7f:5b:f7:2c:3c:34:51:b1:f4:7b:28:03:b2:d2:74:2f:94:
d4:ae:9b:ba:ad:59:22:78:58:5f:6c:5a:2a:58:38:32:ab:27:
f8:1d:d5:9c:23:c0:2a:e1:08:b2:5e:65:3c:a3:05:87:87:6a:
25:37:18:84:06:ea:e3:74:7d:45:d4:f2:8e:d5:1a:21:f1:8e:
63:e3:83:e0:68:70:a0:41:31:fd:4a:f8:55:00:1b:9a:ae:39:
36:61:60:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:29 2025 by rpki-client