Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: +rywXamuM1K3sDT5jXKDo5o08Jhz/SofG/dR6OswmqE=
Subject key identifier: 63:91:C6:31:F9:3F:A2:40:6C:D3:17:0D:34:11:25:F8:CB:B2:FE:CE
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 0194BD4E52FAF616B51529E1415E0BD1AA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: MLwEXlz7vUwc5SjWgOx55jqHjfY.roa (hash: nEFYTn5TUjsaiq+RhC3lF8ai3Uf+0UFa/4rn5vibuks=)
2: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: tTtrA+f+Z41RM/SMCdnYI5ws/9pketb8Kx+ehKTCuhQ=)
3: mfViMC5WzFmHy2d2V9evB-1C54M.roa (hash: AYo63SdEVlQlgz+glCe/AMcSKXW/Zi4rvSvNYshL2xk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:52:fa:f6:16:b5:15:29:e1:41:5e:0b:d1:aa:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=6391c631f93fa2406cd3170d341125f8cbb2fece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:e1:f5:86:66:3c:3b:b6:24:ef:ff:78:57:
b8:f1:2d:61:f3:cc:29:f2:78:30:52:23:53:aa:ad:
0c:fe:ae:89:88:76:f8:dc:fb:eb:3b:e0:8d:b4:05:
3a:02:b8:ec:4f:5d:21:43:de:c4:e7:2b:ad:df:19:
3a:b0:85:b7:82:44:fd:ea:1f:8d:52:b7:c4:c9:c1:
26:70:95:53:99:5e:3e:46:a1:fb:33:e4:c3:b4:a9:
06:39:49:1b:99:18:00:93:02:d6:29:74:7b:a3:00:
e3:76:e8:c0:bb:d4:4e:83:aa:02:0d:2e:88:43:3a:
ec:44:5e:6c:76:46:66:61:86:71:6a:49:e0:d6:18:
42:0e:b3:9c:a1:29:91:c6:64:ba:39:50:1e:1b:2e:
ff:d5:8b:8b:af:cc:64:5b:ce:04:44:ba:9e:e5:47:
7c:cd:86:f6:5d:cc:7a:7b:02:35:46:08:5b:1f:ef:
af:2d:bd:47:7d:b5:bd:92:02:d0:f3:25:d0:bb:ca:
32:df:31:2e:37:18:0e:06:ab:fd:d6:8d:ef:8a:76:
b1:8e:10:6e:e1:21:6d:91:d5:b8:fd:58:ef:27:c5:
4e:13:ef:25:07:ea:60:3d:e4:49:65:a1:21:96:43:
c7:09:d8:3c:0a:ac:f0:6d:f6:7b:b8:97:be:20:26:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:91:C6:31:F9:3F:A2:40:6C:D3:17:0D:34:11:25:F8:CB:B2:FE:CE
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f0:91:80:b1:47:16:79:9f:f3:9b:a5:93:d8:45:0a:bf:a7:
9b:67:b0:99:99:4e:c7:ec:fb:9f:2c:f8:5c:49:ec:0c:b6:36:
8a:82:53:c4:0b:ab:28:6d:75:98:86:35:aa:7e:01:39:99:e8:
0d:0a:8a:dd:ea:8a:88:6a:ba:7d:0d:ca:ff:98:61:93:9d:14:
00:90:65:30:ab:b9:8f:b9:49:a2:3b:26:b4:7b:df:2a:96:12:
7f:df:48:38:e2:c6:2b:24:d5:a9:51:fd:6a:8a:a1:44:30:2c:
73:3a:6b:17:49:6e:03:f7:93:dd:9b:60:7e:cd:fb:88:46:92:
e0:6c:31:a7:b9:40:48:fa:35:76:0e:ba:50:a1:b2:0f:f3:da:
33:a2:64:8b:a1:ab:1c:d3:96:95:f8:b9:48:d6:64:f4:f8:a1:
d3:a2:62:2c:92:b7:73:5e:89:9a:35:a5:ff:62:70:aa:68:7f:
65:1c:59:5f:0a:3b:8f:1c:87:69:56:9a:30:9b:80:d3:81:90:
43:fc:17:4b:52:50:4c:ff:53:48:df:ab:b4:01:b7:25:0e:5d:
a7:40:f4:f1:e4:01:86:55:67:5b:82:2c:b1:c2:1f:86:6c:8c:
cd:92:8c:56:45:34:f8:3f:73:74:5e:d6:c3:ad:69:d2:d7:4d:
9c:17:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:54:39 2025 by rpki-client