Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File: fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier: sCnIrs44UCJeYLdYWLPXuUjnVJzIWIGi7XssAA1lmiI=
Subject key identifier: CC:FC:B6:96:2F:28:F3:58:B3:7C:55:EA:93:1B:71:AF:B4:0E:E7:95
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 0194BCA9769C5B545F0ACF5AAD63F4A7B48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number: 132C
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: EIKOgQFi5mojMPucev_-8ewm_-E.roa (hash: a2bhdKBZ8yPIzwYvUQAAVhbdMilJSR3ugkNV2LMmk80=)
2: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: 5l4kjHgBo5tjrl+ufO7n8q51/dYUsZ1m0zuuLVChEbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:76:9c:5b:54:5f:0a:cf:5a:ad:63:f4:a7:b4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=ccfcb6962f28f358b37c55ea931b71afb40ee795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:19:4f:a6:a3:20:8f:d1:fd:aa:ea:47:54:09:
45:7d:e2:32:68:72:ae:6e:de:53:f2:9e:5c:b7:00:
11:4c:c8:82:ac:83:c4:17:37:8b:6e:97:0e:d1:7b:
32:11:2a:78:e2:b0:f4:3c:f6:6e:53:e2:1c:c5:f1:
2c:eb:27:56:33:38:72:c1:5f:ec:f9:aa:26:04:a1:
85:7d:57:49:de:db:7b:93:28:15:5e:30:15:4d:f4:
59:81:2c:f8:63:81:88:70:86:f3:47:95:67:be:4b:
38:f4:85:9e:8e:91:ea:5d:61:ca:19:82:8d:4f:e5:
9d:d0:d7:94:b6:9b:67:b2:28:c2:fc:e9:94:84:cf:
af:90:f7:9d:4a:2b:af:7e:6e:62:6a:c9:db:2b:92:
4d:4b:35:3f:d6:d5:ae:36:f1:89:c3:99:96:e1:52:
2b:77:ef:c7:2c:ed:7b:44:e9:d7:62:a1:97:e4:86:
90:66:2c:93:52:ba:ff:4e:6c:98:a0:12:2d:60:4a:
42:2e:a1:40:52:09:18:52:39:37:90:0d:8a:3b:fc:
07:8d:7b:77:2b:9f:fa:1f:ea:2a:a6:26:36:fe:15:
10:eb:b3:94:47:57:97:df:76:eb:66:8a:94:fe:50:
47:a9:b6:da:98:32:0f:9c:fc:db:75:9c:7a:88:57:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FC:B6:96:2F:28:F3:58:B3:7C:55:EA:93:1B:71:AF:B4:0E:E7:95
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:84:33:31:45:69:4e:92:f4:2e:87:89:27:00:35:6f:d8:87:
aa:66:14:01:34:44:de:18:5c:0d:22:72:40:b6:fb:20:32:23:
d8:30:30:81:c5:07:05:ff:39:9d:ff:c8:bc:72:60:db:c9:0c:
9e:9f:b3:24:2e:bb:dc:17:30:e0:dc:38:ed:05:35:86:b4:5f:
e0:22:c0:d5:59:81:54:4f:08:cd:4f:48:05:39:fe:e2:34:67:
22:59:fa:20:b2:f2:c6:60:33:0b:58:83:34:a7:9c:e3:89:f6:
a9:0f:8f:73:8c:30:ba:26:81:b1:5b:27:2e:72:1a:4c:31:87:
1c:38:8e:6b:30:4e:f8:a1:37:64:2a:fb:ad:0d:d5:d8:1a:11:
cf:6a:69:cb:c0:cf:a4:6d:e6:e1:0d:db:18:a0:82:35:4b:38:
d0:03:f4:c4:07:81:3d:26:b9:f1:2f:f1:54:13:86:38:7b:d9:
de:ea:ab:0a:6a:cc:e0:59:99:c6:e9:17:a1:32:6c:98:e8:11:
de:24:8f:77:c8:9c:7e:66:a3:ce:c5:7a:9c:be:73:42:4a:ab:
48:4f:de:8c:65:50:a3:8c:01:22:7c:3d:f9:f1:ea:3e:44:40:
1b:59:74:13:94:94:8f:b7:75:13:40:d6:77:1e:6a:a4:df:0d:
47:97:16:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:39 2025 by rpki-client