Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier: XxyAmnfdfO9KEutKlgpYAWaYEdGVDLHpFHBLd+Z+3Y0=
Subject key identifier: DD:11:17:B6:8E:C2:54:DA:7B:55:10:66:4C:0A:FF:EC:47:73:F3:67
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 0194BD8559E1D394424DB6ED82FF4B21F694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number: 03E0
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: C1AYBuKCRR4rnjMRdEfMNlp4O9uvWlJ9Ny0gnmYpu2I=)
2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:59:e1:d3:94:42:4d:b6:ed:82:ff:4b:21:f6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=dd1117b68ec254da7b5510664c0affec4773f367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:d0:ab:9e:5e:04:4f:cb:14:78:73:6a:30:
d8:0c:27:93:ca:38:cf:9d:a6:c3:dc:62:cb:5d:07:
41:2e:85:b9:58:2d:4b:93:ad:de:0d:55:6e:eb:2f:
4c:ed:e2:e8:2d:de:67:c4:ab:14:4d:ea:97:5b:0a:
8e:60:fe:fd:58:fd:ff:31:28:04:2e:9b:25:4f:28:
4c:62:10:42:c8:1f:a6:67:4f:84:06:c6:ba:0e:6c:
df:0e:c3:e9:13:7b:b6:5c:8d:63:8f:78:92:03:d4:
16:88:0c:16:94:82:7b:2e:76:70:c8:c2:c3:97:b8:
23:b5:10:cb:36:85:7a:2a:38:6e:e7:b3:d3:d5:2d:
f4:f4:18:ae:d7:d1:b5:54:30:95:03:72:95:fd:89:
2c:21:fa:3d:b6:8b:45:40:26:95:e8:c5:3b:20:bd:
6e:36:c3:01:37:b2:f4:b0:7b:ec:73:35:b3:81:21:
e3:b1:cd:7f:2a:5b:97:91:4a:80:59:b2:d2:28:75:
d3:78:1f:c0:ac:e9:f5:70:36:d2:01:38:35:c4:56:
0c:29:80:12:59:16:e0:d0:11:40:77:8b:77:9e:5f:
a8:8f:05:46:1a:ba:b7:ef:3e:e0:a2:5b:fd:a5:fc:
79:13:88:45:35:49:fe:2c:d3:1d:50:1c:24:59:c2:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:11:17:B6:8E:C2:54:DA:7B:55:10:66:4C:0A:FF:EC:47:73:F3:67
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:69:a2:52:bb:33:e3:5f:7e:07:97:d8:3d:d3:8b:a0:19:6a:
98:a5:03:79:d9:ba:13:e3:57:f2:c1:cf:5b:e1:36:7d:48:ae:
76:03:9e:db:d3:d7:a3:fa:41:ac:e7:26:b8:41:7c:7a:71:5b:
06:07:36:16:bd:17:2a:d7:78:54:e0:f4:74:bc:2c:53:11:1c:
06:2e:50:88:76:bd:40:3a:95:87:b1:ca:65:27:a1:64:e7:48:
9c:52:c6:2d:3c:17:ca:34:b5:99:03:71:8e:3b:18:8f:2a:d9:
7b:57:ec:4e:55:7a:65:07:57:d4:07:63:b0:6f:27:91:e2:7e:
d5:c6:07:c8:30:b5:0c:b3:5a:ed:b5:5e:fa:b8:ad:0e:92:88:
8c:a3:91:64:db:e2:2e:50:6a:25:17:64:cf:f6:a5:a1:b4:42:
fc:86:45:70:69:ab:f2:0e:9a:a2:c6:6b:ac:6f:fb:50:39:19:
c5:b1:f0:70:39:eb:5e:96:39:1c:b0:89:e9:fc:09:3c:27:06:
76:08:1c:70:38:ea:cf:d2:ec:0f:bd:51:83:84:29:15:3c:81:
00:4f:13:7f:90:25:b4:c8:65:cb:50:ba:40:5d:96:44:fe:b0:
7f:b2:fa:e5:59:f3:fa:f9:b4:ea:d1:ff:06:a4:fd:a3:45:6f:
1e:ef:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:38 2025 by rpki-client