Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
File: rKL3dI_jY9xZOem4VPwAQDEw66U.mft (raw, json)
Hash identifier: XTuepgsbjNqxAiqXP7+KUaVbMIh7nX+p0oWDY9VBmbM=
Subject key identifier: FC:D5:45:AB:F1:4F:0C:C6:37:C3:E0:66:90:0E:77:A0:98:1F:44:AE
Authority key identifier: AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
Certificate issuer: /CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Certificate serial: 0194BCE06C81C878C8F5FC038018F17BF640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
Manifest number: 10A0
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: j1MFNSh109TR4xhuIO7hEIzzLx0.roa (hash: m4Zoo8iLf6w6vYmDzKqVKXqfQB+bfWM+4JfQ0Ih+lSM=)
2: rKL3dI_jY9xZOem4VPwAQDEw66U.crl (hash: /p/ap1UlRcTiBz/yjLxHYoLGfcpXTaCtPIrUf278W5Q=)
3: u7VG8MqdZGcH4gUtF3RkiJXAbmg.roa (hash: 2LYlYxgKHIzR/5x4DJBXFV3DllJcEY1kUeTRo0v7v2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6c:81:c8:78:c8:f5:fc:03:80:18:f1:7b:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=fcd545abf14f0cc637c3e066900e77a0981f44ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:21:e1:34:ec:6e:07:8e:9d:ed:ca:5e:cd:f2:
fd:34:e1:5f:13:57:90:ba:e8:89:e8:4c:62:fa:19:
cb:ad:90:d0:45:10:90:7f:cd:e9:cb:af:a6:2c:a4:
30:6f:c7:3e:6b:32:ec:77:da:4f:ff:f3:68:04:ff:
6f:19:49:3b:36:12:9b:a7:27:d6:6e:74:40:37:16:
27:6b:99:32:d9:4b:67:80:e1:3f:41:ff:7e:0a:07:
10:5c:07:32:ca:42:2e:09:54:21:1b:a1:7e:73:19:
0c:30:5f:3a:3a:ec:1e:05:3d:e6:83:c1:57:74:e3:
24:99:e0:01:fc:4c:db:76:a1:91:8c:a7:aa:27:de:
7b:fa:8f:35:b2:08:58:7e:df:78:3c:f2:54:a1:b2:
06:6b:e4:80:b6:ca:f1:e8:b4:67:40:44:da:fe:41:
1e:55:73:eb:22:b4:c0:57:c5:68:0f:23:0f:f5:4d:
72:2f:c3:66:b0:12:6c:af:fc:f7:46:8c:2c:eb:48:
9d:46:23:61:20:de:ed:9f:02:62:83:40:67:6d:51:
63:32:d2:68:c0:69:c7:10:87:04:79:14:c9:21:fc:
e1:3c:2e:c4:ad:1b:fc:74:a7:af:00:ba:79:56:3e:
c3:25:cb:e4:7e:19:61:88:71:4f:d6:30:da:4e:23:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D5:45:AB:F1:4F:0C:C6:37:C3:E0:66:90:0E:77:A0:98:1F:44:AE
X509v3 Authority Key Identifier:
keyid:AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:06:a0:02:7b:45:79:ef:ae:0b:4e:42:1d:f8:8e:10:17:1f:
37:75:fc:ad:9b:81:94:7a:43:ab:79:73:df:99:76:f4:d0:57:
82:e2:df:30:01:b2:d2:66:f6:59:9c:c4:d4:5d:8d:21:61:8f:
e8:7e:80:12:b9:2d:05:25:f9:a6:4f:5f:85:a6:e6:fb:65:00:
29:5c:08:20:c8:4b:ef:9a:e2:b7:04:ed:d3:f3:db:e1:40:90:
fa:02:14:9b:fe:53:55:4f:7a:68:13:ad:25:29:8b:73:95:1d:
e9:f3:b1:10:36:0f:a8:ce:84:51:44:bd:bd:02:24:d6:c6:5f:
79:54:53:a9:82:a1:8d:65:b0:48:22:a8:d9:cd:d4:1c:db:09:
fd:38:28:40:97:64:9a:9f:cb:11:bb:74:6c:00:6b:fc:9b:23:
c5:21:4a:02:4b:47:b8:15:04:3e:14:db:7c:d5:0d:d4:71:01:
42:5c:cd:15:71:e9:d2:68:4b:ee:51:53:a3:1e:08:ce:b4:fc:
d7:76:45:31:56:52:ad:d1:90:91:dc:94:33:a3:72:e6:60:b0:
ed:3b:8e:20:04:5b:77:73:4b:8f:90:b1:5a:1a:a6:fe:39:0c:
e1:ad:f5:f4:19:44:51:e0:7b:74:e2:e9:4e:c7:09:d4:d0:e9:
01:c4:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:53 2025 by rpki-client