Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json)
Hash identifier: Px7wwrMpAGx0YOw5WiGwGQPOYviU6T3e7BvvWUm9F3E=
Subject key identifier: CD:BF:1A:53:F9:5B:0B:61:25:26:99:3E:65:2B:9D:63:FC:A9:2E:B0
Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Certificate serial: 0194BD179FE5DBB61171A01AB4E7B23D22C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: 4BcmRfIKbtyHA5W50P0xfaSluTc.roa (hash: EUIfaPrgoy0kpcCTAuIPs2vRwCWnSayvJLiSWEhojBk=)
2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: 5xLU9ofAC16GhZmDSsaAs/2defip6j9mte2m0J+pRKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9f:e5:db:b6:11:71:a0:1a:b4:e7:b2:3d:22:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=cdbf1a53f95b0b612526993e652b9d63fca92eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ef:41:bb:e9:59:76:5d:95:f2:f8:72:c3:54:
18:87:88:15:c5:8c:b6:15:6d:48:5a:d9:3f:38:98:
c7:81:c6:10:69:8b:ad:ae:d3:a8:23:8f:11:20:cd:
a3:f8:c2:13:3d:2f:22:18:6a:0a:66:d8:0d:4e:eb:
62:65:66:ba:51:6f:a1:c5:4b:3f:51:35:a5:fd:0f:
70:ed:75:44:9f:96:ac:08:42:ff:88:f0:8b:e4:52:
2a:ad:9b:99:f5:29:f6:19:e4:8a:10:7f:81:d9:56:
0c:ff:bf:11:8c:e2:a2:06:1e:4d:98:94:19:17:31:
da:96:a8:98:cd:5a:f7:96:67:06:46:f1:25:1c:e3:
32:eb:7f:d9:55:d5:37:49:04:1b:34:81:06:73:7a:
25:ac:72:d0:6f:fd:7f:a4:31:e0:6d:fd:cc:e1:2c:
53:e0:79:93:db:e9:01:be:3b:1f:63:af:d9:71:98:
d2:41:5f:f9:ec:08:ac:e9:91:96:e3:38:c0:ff:82:
10:e6:e7:94:db:19:23:37:79:7f:10:b4:b5:39:75:
d2:2f:f3:7a:d9:14:8a:0a:2a:43:65:99:74:13:16:
d0:81:b4:f5:3a:c9:75:71:f7:02:03:ac:84:1b:5d:
e3:e8:5c:78:c1:2d:3e:3e:17:e0:c4:ef:8e:63:96:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BF:1A:53:F9:5B:0B:61:25:26:99:3E:65:2B:9D:63:FC:A9:2E:B0
X509v3 Authority Key Identifier:
keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:41:29:2b:9e:e8:8d:31:7f:d7:73:d6:af:f9:ec:21:67:af:
10:d1:2a:0c:7e:cc:7c:38:c8:51:d8:c7:5b:42:29:f8:71:76:
bd:a8:83:e1:51:11:a1:fa:84:cc:fe:c5:bd:03:4b:17:d4:d3:
6e:02:b0:f8:32:27:67:ed:82:06:66:96:80:38:7d:74:d8:8d:
04:d1:ae:6a:e4:c7:af:a2:0a:f3:4b:3c:27:5f:a9:60:61:45:
27:bf:47:63:8a:ee:3e:b9:7e:a0:4f:b4:0b:0c:86:c6:74:5a:
33:b9:17:8b:cf:96:20:c7:a9:0f:cd:b5:46:a5:1d:4d:dc:5d:
c0:51:9f:e3:86:fc:c3:ad:a0:d3:c0:d0:cc:21:9d:a8:d2:80:
b8:a2:a7:77:30:d3:57:ea:4e:5d:fd:6d:06:bf:da:a4:5c:26:
7d:45:8b:71:20:62:d0:ab:fa:91:e6:e3:ae:ab:4f:e4:70:1b:
e5:61:be:5a:28:bc:6f:db:42:31:d3:91:84:2c:22:ee:46:04:
83:40:7e:7f:cd:24:04:f6:d0:a7:8a:7d:ff:c0:65:01:a3:e0:
db:c2:cb:9c:a5:55:2c:a9:68:dc:d2:38:fb:8c:80:6d:50:fe:
63:93:54:bb:66:39:46:d6:39:23:36:8e:67:77:98:7c:60:52:
83:6e:07:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:39 2025 by rpki-client