Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: BvNnGq7ig9+hW4h6q+H7SrCn8spAd3YtHqGmDs7APw0=
Subject key identifier: 72:9A:D1:5A:4B:E9:02:27:2F:A0:17:F8:B4:5A:69:58:E5:59:68:F2
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 0194BD4E626E6682F06A2B0CBCE3FA164399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 0144
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: 0tNtBf7e6WxPWspboWFVY9prkK6UJMKeANhtQ/Edegs=)
2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:62:6e:66:82:f0:6a:2b:0c:bc:e3:fa:16:43:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=729ad15a4be902272fa017f8b45a6958e55968f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:43:6f:0d:f5:57:ee:16:d9:d1:c9:e4:c3:04:
28:4d:be:0c:4e:34:f0:9e:c6:1d:e4:76:17:19:67:
a7:95:5e:86:c5:aa:37:58:f9:0b:62:c3:9f:49:f6:
b3:0c:6e:a8:29:cc:4e:64:ee:8c:b8:1c:1b:68:f7:
b5:50:26:21:d0:d1:71:0b:ed:80:9b:dd:ad:5c:2a:
01:36:f7:5a:f7:e4:63:f8:a3:be:e3:57:f9:e7:49:
ca:27:b9:9c:0f:fd:a5:ea:f1:b9:6b:3a:4b:d4:f8:
21:44:09:e5:97:dc:b2:6f:d1:0c:e6:f5:95:e8:28:
3b:4d:0d:ad:2a:29:2c:19:31:5d:92:15:d3:7b:07:
27:aa:0c:45:22:f0:eb:d4:1e:f5:f5:d4:fd:01:17:
6b:d9:e3:2f:6a:ba:cf:48:37:ff:98:f3:a4:f5:46:
49:84:af:1b:e9:c0:e0:9f:46:c4:0d:80:2a:cc:6d:
48:e8:b6:90:ce:da:6d:79:7e:2a:ca:63:15:24:a2:
cc:84:14:b1:95:b6:c0:bc:01:48:64:f1:c5:a8:21:
8c:6a:b0:7b:4f:9d:b5:b8:2f:29:f3:db:39:0f:f3:
7a:9e:c3:2d:ff:a2:26:88:6a:4a:a1:74:c5:19:49:
67:3e:17:6d:8e:1e:93:ca:51:07:01:30:9e:5e:85:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9A:D1:5A:4B:E9:02:27:2F:A0:17:F8:B4:5A:69:58:E5:59:68:F2
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c5:e4:cc:6f:6c:4a:a0:4b:98:c6:14:c9:06:66:e2:53:b2:
2b:2d:b9:48:f7:15:b7:33:77:1c:51:24:ff:73:25:c9:92:d7:
af:4f:bc:b5:2e:02:67:7b:97:a3:8b:0b:72:e3:46:09:b5:f7:
6e:bf:4b:12:a3:91:5c:87:e3:d7:89:3a:6b:3a:0c:34:b8:15:
e1:a6:19:5c:8e:b8:34:ae:60:46:b7:e4:c9:2b:1d:1d:0b:9d:
ed:71:18:32:4b:dc:ec:0b:9e:fa:c6:83:93:c3:7d:e3:e4:de:
db:f1:8a:43:b7:ba:69:14:47:f2:e8:23:76:28:97:d2:9e:bd:
a6:14:6b:09:ab:d1:b4:6a:8e:4d:f8:3d:26:4e:47:5e:f9:11:
c1:5c:72:e3:82:a8:4e:17:8c:0e:4f:61:f2:e9:dd:e2:98:34:
85:8a:39:40:db:4f:cc:55:b7:be:76:d8:25:3d:15:aa:70:0e:
76:6a:f6:b3:20:75:d5:5c:0a:ee:6d:ee:0a:ad:2f:68:0b:f2:
29:fa:a8:b6:3e:69:36:99:9f:e3:fd:1a:e0:f4:45:57:7c:b5:
9f:5d:ec:00:c0:73:17:5e:07:8e:20:0e:27:9c:de:07:88:ab:
df:b5:d3:6f:80:5a:97:b2:1e:fe:ac:c1:83:bb:2d:09:4d:e2:
ae:4d:5f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:22 2025 by rpki-client