Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
File: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json)
Hash identifier: S01KS+QlprW+qbH22Qz0oFXuTUmHdwxlfdcjiPnq1Co=
Subject key identifier: 73:CA:BE:96:78:77:2D:D8:17:5E:92:06:91:FA:A4:3E:40:A2:82:FA
Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Certificate issuer: /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Certificate serial: 0194BCA9B6E66273092975F58ED82FF04E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
Manifest number: 0285
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: 1-irVsmvhgC9shKeonnyDEPMDuh0.roa (hash: 1FiwJeXR31pl2bxgdy1T8oVV/E4LsfaNte1AvGr9OZg=)
2: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: /j8udKqTof7HkjiqVqrYUJA5w262wfRkF9EJn8e+g7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b6:e6:62:73:09:29:75:f5:8e:d8:2f:f0:4e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=73cabe9678772dd8175e920691faa43e40a282fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:2b:12:4e:c7:88:7c:a1:cc:0c:b9:7a:bf:
3a:7a:c3:d6:79:bf:86:b9:bb:60:9e:95:bb:ac:b6:
1c:e6:4e:bb:40:5e:e8:73:fc:8c:2b:33:2a:51:f7:
ec:1e:36:46:16:42:9a:63:71:e2:3a:fb:27:ce:e9:
bd:35:f0:c7:36:c0:b6:03:53:ca:f0:33:25:a7:55:
08:7c:f4:a1:8e:6e:af:ed:1a:c0:bc:3b:2b:c6:68:
70:8a:97:fe:a4:b3:bb:0a:69:67:c8:ee:ec:df:fa:
92:e6:e8:d2:68:18:ab:62:c3:a8:47:97:bd:42:e6:
3d:8f:32:d4:89:b2:20:84:d7:83:d7:ef:03:88:02:
8f:ee:c3:ea:c4:49:b6:5b:71:15:75:17:97:01:05:
7f:65:78:b4:6d:a0:00:e8:d9:13:5f:ed:7f:28:91:
71:11:92:bd:54:bd:a0:8c:c4:f9:e5:c2:38:7b:2d:
89:fe:81:49:1a:70:e4:2d:6e:d1:9f:77:2c:a3:04:
96:e4:2b:5d:95:b9:d7:14:fb:03:c2:fe:62:7e:5b:
84:79:b6:6f:bc:43:01:57:bd:15:ac:2e:ff:2b:09:
9e:53:80:14:f3:45:91:54:c8:cb:f0:2a:35:7b:cb:
ca:45:6a:8b:96:64:72:d3:cb:5e:91:0b:79:a9:46:
6e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CA:BE:96:78:77:2D:D8:17:5E:92:06:91:FA:A4:3E:40:A2:82:FA
X509v3 Authority Key Identifier:
keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:75:cd:f1:12:98:50:ff:d2:d9:93:83:da:73:b9:5b:3a:32:
f4:4b:82:7b:73:11:64:6d:92:ac:f5:b9:58:22:f9:0d:c7:17:
f4:8e:25:74:1b:14:68:79:08:12:16:42:3d:0c:12:4f:3c:94:
c2:59:da:6c:94:92:f3:46:7a:f2:87:a0:dd:84:95:1a:f0:9f:
dc:d7:df:e7:56:48:26:90:31:ad:c3:37:bd:d1:0f:e5:a3:1d:
35:e7:30:95:be:2d:6f:ea:95:28:30:c0:56:be:97:b1:f7:be:
8f:46:7b:18:4c:a3:e9:13:00:f7:1f:af:56:02:c1:81:b7:26:
8a:ef:15:ca:0f:e6:00:34:1d:43:12:ec:e4:58:a0:b0:9c:f8:
8b:57:0d:e0:94:3d:59:13:4a:cc:ea:77:98:cd:ee:ce:8e:57:
63:6e:0d:39:57:d8:7d:fb:19:8e:ad:e3:1d:28:d8:a7:7a:dc:
b1:54:9b:ab:6e:a0:c2:d6:27:9d:da:f4:d0:c6:0a:7a:dc:40:
4f:87:63:63:3c:f9:c4:cd:c1:6f:6b:3d:b2:8c:4d:ca:bd:be:
f3:71:cf:ee:59:09:fb:bb:1f:48:52:51:c5:5e:9a:0a:7d:cc:
bb:45:e4:73:b0:ee:ed:3e:8a:73:96:7d:ee:f0:bb:be:88:b1:
9e:e0:1e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:24 2025 by rpki-client