Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
File: fpCf6oHjmP7ZMEndegB-_WlzVWM.mft (raw, json)
Hash identifier: G4EcYCrsYCQnzjzIM+8CNNcKQSV0MnmecDI+ZdH2B/o=
Subject key identifier: 23:5C:8A:06:BD:A5:37:E9:71:F4:D7:CE:11:15:B1:CE:D8:4B:F7:63
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Certificate issuer: /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial: 0194BC3C1194D869872EC9FE9EE9E1D97579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
Manifest number: 0A1D
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa (hash: XasTDlDBbIh1cL69G7L/yxnH5MsXPkwslxjCA22OVkQ=)
2: fpCf6oHjmP7ZMEndegB-_WlzVWM.crl (hash: CQR4RjRKQkLl7etK6AInb6yxTFAb6kznhh+0IwLH6gw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:11:94:d8:69:87:2e:c9:fe:9e:e9:e1:d9:75:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=235c8a06bda537e971f4d7ce1115b1ced84bf763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:33:1a:6c:9a:65:ef:16:6f:4d:1b:70:da:38:
33:2a:54:2c:bc:82:6e:6e:a7:e8:83:56:8b:85:e7:
fc:9d:20:61:56:0b:33:5b:22:e7:3d:0d:03:e7:4f:
e0:d4:87:a8:0c:60:72:a7:19:1e:51:40:a7:56:96:
a9:8d:4d:18:b3:a5:05:a1:06:18:96:fa:e1:a8:e1:
44:81:76:14:74:67:cd:00:56:e9:0e:5d:e6:16:57:
60:b9:63:41:48:b1:20:a8:eb:ad:9d:1c:e1:06:62:
d6:17:58:43:0d:95:83:07:c9:78:00:29:f1:ae:29:
52:fa:bb:5b:20:74:83:a9:ba:bf:6b:01:e6:b9:ef:
2a:4f:5e:d2:36:51:de:82:40:fe:94:ec:2b:0d:e4:
71:2c:b5:25:a7:6c:e7:41:de:0c:63:a3:9a:77:5f:
bf:9f:c2:7c:b5:f0:8d:54:93:6f:c2:17:dd:6b:d7:
66:0e:1a:5e:d9:b9:54:96:ee:63:81:c3:ac:d5:93:
f6:26:2a:4f:b4:c9:19:1f:b3:bb:cd:51:22:f0:52:
7a:f3:f4:f6:0b:fd:8c:ed:d3:11:d0:cb:ed:0c:be:
d1:c3:17:d6:c4:18:70:4d:a8:20:84:67:7d:77:ce:
a4:97:47:dd:bb:a3:ae:a4:ca:23:99:0d:ea:16:92:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5C:8A:06:BD:A5:37:E9:71:F4:D7:CE:11:15:B1:CE:D8:4B:F7:63
X509v3 Authority Key Identifier:
keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:15:7c:7a:58:34:f3:87:11:e7:7c:3a:e0:b4:37:bf:bb:77:
ed:e7:4a:23:aa:7e:c4:e2:c3:c2:f2:50:bd:18:40:f6:80:b4:
52:0c:54:aa:d4:d7:53:cd:48:28:ff:5c:c5:dd:55:74:4b:98:
61:74:2c:ad:05:e1:b2:8c:ab:f2:d4:c6:5a:f7:96:9c:f1:92:
89:64:0c:4f:0a:c1:22:76:e7:d6:c8:e4:e1:25:78:49:7e:70:
00:92:84:9a:96:17:27:c5:40:34:87:b3:73:99:a7:75:c8:96:
79:27:9f:f2:a5:f8:50:37:c8:bc:20:b1:91:ab:fb:24:93:62:
a8:f7:99:56:dc:bd:f3:3d:70:5c:94:ae:ce:6a:6a:e0:fe:ea:
02:de:bf:0e:da:21:8a:10:0e:9b:15:7f:2a:7c:cf:b3:73:c2:
21:99:ee:e5:4d:25:d3:60:74:2d:69:2c:32:01:7d:2a:84:e8:
45:34:49:af:3e:d2:b3:53:b1:de:cc:3d:7f:0a:25:fd:35:84:
ba:21:7a:a3:92:2c:39:ce:37:f8:53:39:d2:c8:cc:ea:08:93:
41:75:a6:c0:db:c8:a0:f3:f2:5f:14:54:06:c0:f1:60:51:1a:
6d:ac:6d:40:dc:ec:42:4a:96:98:16:94:7f:dc:b1:c6:d5:c5:
65:1d:ee:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:23 2025 by rpki-client