Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: +anQo1NWaKTg635bvsw9+UNFcs/yeTNOndWn0bpF+fI=
Subject key identifier: 39:4D:47:EB:5A:93:0F:F1:77:9C:F3:2D:B4:DA:6E:72:07:B3:3B:8E
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 0194BC3BDDC59242203B7E5846C63AC06630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: O_lyoeGqf219CPNaRILiVGtpSnw.roa (hash: MBjGGTF1i33MT6liDQumorJo2rjHXFkdaYBR/A83Hr4=)
2: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: dPL6aJArhF8JKJ6e0JUTsQWt1r+Jhg6mClnib1Mo6S4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dd:c5:92:42:20:3b:7e:58:46:c6:3a:c0:66:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=394d47eb5a930ff1779cf32db4da6e7207b33b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:c9:15:fe:83:50:9d:18:ec:be:7f:af:f0:
b2:4d:b0:4b:91:3f:4e:89:5a:8d:9f:c3:a5:0a:80:
56:9e:f2:3a:51:9a:20:de:4e:29:fc:bc:f5:94:17:
ca:d1:1b:a0:2f:7e:04:7e:43:a3:ca:48:15:4e:c4:
eb:ca:e9:7f:4b:ed:24:09:fd:68:87:4b:95:5d:44:
7e:99:40:84:d5:c0:da:4f:07:05:e2:cf:d3:f0:59:
a7:6f:e8:3b:42:84:22:d1:94:b2:bc:fa:24:c6:5a:
1c:f5:3c:66:d8:5c:93:ce:e2:d9:fb:a6:ad:61:f0:
24:c2:a8:6b:f9:40:65:d7:85:0d:3b:3a:a6:8a:0a:
4c:8a:40:43:48:81:db:4d:9c:33:86:80:e9:2c:69:
73:a8:d5:92:da:55:07:8f:cb:7a:db:8d:3a:47:90:
52:22:fe:7f:b1:62:2f:a8:4c:4e:c4:be:dc:63:26:
da:8a:71:17:03:58:48:c1:7d:f3:f4:e5:e6:20:65:
9a:20:48:8b:c8:7c:40:94:8d:ed:6d:e6:9f:3e:f4:
dd:75:64:0f:49:e6:46:de:23:c2:05:a2:96:f4:a2:
25:0c:85:00:90:d5:e3:4c:80:dc:38:46:25:c4:94:
cc:79:c3:8f:44:1b:fc:40:bc:b8:05:44:c0:26:a4:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4D:47:EB:5A:93:0F:F1:77:9C:F3:2D:B4:DA:6E:72:07:B3:3B:8E
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b6:93:59:e7:64:ac:f0:61:c3:07:e8:44:fa:10:76:87:d1:
7b:16:4e:b1:7e:96:31:46:10:70:1b:32:5b:07:d6:0f:4c:a0:
9d:e4:4b:02:72:44:43:19:f4:eb:24:6c:c5:9e:12:5e:d4:0c:
87:d8:f9:11:7f:26:51:bb:ae:af:de:01:14:bd:c5:8e:ea:b2:
a6:d8:c8:92:9e:76:ad:b7:f8:27:6c:fd:d1:f2:39:d4:c3:b4:
65:9a:3f:3a:62:1c:af:15:cd:94:4a:8a:09:fd:0a:b1:f2:84:
5a:ce:95:60:e8:ee:1c:1b:fb:f2:c5:15:99:c3:32:d2:25:63:
8d:96:41:cd:a4:94:ad:77:de:15:44:86:46:25:ed:27:60:14:
7e:e7:e3:d7:d5:98:fd:96:97:63:1e:b3:0e:49:65:a6:34:74:
05:e2:5a:70:13:98:00:46:ac:cf:b0:0d:35:9d:de:c1:5a:ea:
ba:23:03:cb:ac:39:2e:1a:de:dc:71:c0:82:5d:ae:9b:a1:a9:
74:19:10:41:45:8a:4e:6e:05:f0:01:c9:db:bd:8b:c3:40:f6:
6c:78:4a:90:5d:e3:92:44:36:f7:fc:0a:91:a2:dd:d0:8d:7d:
72:a6:42:d5:ff:f3:81:fb:6e:57:94:4b:95:05:18:92:1e:5f:
9f:d2:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:13:50 2025 by rpki-client