Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier: b9/punC2lC3c4ERA6u+iuAZlHRHFZqdf3YI0iLJyLjs=
Subject key identifier: 55:59:54:2F:DC:BE:24:A4:AB:03:A1:E4:1C:B9:A8:78:81:A3:E9:7F
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial: 0194BC3BD6C3AC5E0931C54EED49C73DA6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number: 0C84
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: lGmOO8yD40yVrhKWgeyM+7if5l+sF5WlCycaK9Uowuc=)
2: r6JJsn0eajhp7sOEpygQyvJsZMU.roa (hash: cxRi0/gis8Ga5ROT0QtFOFL60z01cmboldkWqbkptMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d6:c3:ac:5e:09:31:c5:4e:ed:49:c7:3d:a6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=5559542fdcbe24a4ab03a1e41cb9a87881a3e97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:3b:77:a6:24:5d:9d:ce:42:1a:07:fb:d2:
af:2a:b5:d3:af:96:56:3b:e0:25:c8:bf:f8:66:be:
94:39:ec:45:6f:95:42:c9:26:6c:4b:3c:88:9b:6f:
14:ec:68:02:89:14:0f:28:a0:60:14:47:eb:79:ad:
c4:da:da:a7:c2:77:4b:0f:e6:01:05:07:97:b5:ed:
df:45:02:22:50:0a:bb:e8:42:94:75:2f:54:b8:77:
ec:95:e1:69:7b:c2:5b:7f:b8:2d:14:25:8f:c1:0b:
b1:24:1e:98:c0:80:90:97:83:2d:ec:19:5c:2f:62:
7a:e3:1f:eb:2e:d9:61:f5:51:93:77:b1:1a:af:cb:
89:aa:a6:01:98:b2:0a:2a:72:a7:e6:08:8a:cc:5c:
aa:2f:cf:a7:d9:0f:1b:09:09:95:ae:66:91:a2:f5:
12:e1:68:7d:e7:2f:f5:c6:c8:2c:d8:12:ca:7d:c5:
df:6b:13:73:97:ac:8e:19:e7:18:85:c0:32:f7:9b:
60:ce:ac:ca:08:08:f6:8a:ab:6d:da:38:84:d3:9b:
0b:a2:89:27:d5:6f:56:06:80:bb:21:46:bf:92:8c:
6f:0a:41:44:d8:17:f0:1b:0e:48:55:e9:13:b0:03:
59:94:64:79:fa:e7:83:5e:99:96:ec:5f:1c:cb:30:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:59:54:2F:DC:BE:24:A4:AB:03:A1:E4:1C:B9:A8:78:81:A3:E9:7F
X509v3 Authority Key Identifier:
keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f0:31:79:68:77:57:5b:ac:05:8e:b9:51:6e:12:01:27:b6:
7f:46:c6:b7:78:85:84:03:57:d5:53:25:8f:e6:d2:5b:5a:cf:
2a:34:70:c4:55:d8:41:43:d8:c5:5e:8b:10:d3:ff:f7:69:a7:
62:51:b8:c9:b9:65:ec:77:b2:6a:52:42:33:ba:00:04:b8:b9:
16:30:8b:7e:74:c0:f0:99:2c:6e:26:c7:c7:46:83:59:f7:e5:
0b:db:53:15:29:04:09:28:37:d4:15:94:80:4f:be:ef:ce:9d:
8d:89:f3:4e:30:92:da:fd:85:06:dc:23:29:b3:4f:3b:86:f4:
d1:5c:dd:01:c4:e3:48:2a:ba:d6:55:b7:6e:72:69:3c:5f:de:
88:55:c2:ff:c2:06:36:9c:bc:30:8e:b8:9e:0e:a2:a9:89:8a:
42:49:ea:74:21:c2:fd:41:e5:cd:5b:e3:45:20:4f:06:42:36:
a1:73:bc:b9:d4:c9:0d:3e:3e:7c:31:0c:f9:bf:3f:60:33:4a:
ad:ec:3e:f2:f6:91:ed:70:4e:84:1a:19:1b:48:60:e0:63:06:
41:8a:11:70:9f:13:ac:45:1b:fc:f0:f1:91:3f:4c:f7:a0:8d:
f6:ab:65:01:c2:0e:98:cf:75:da:c7:f5:2d:0b:a3:d2:0f:5e:
20:10:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:51 2025 by rpki-client