Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
File: fggLq1W_NHMYjCDHNmpssETHGVw.mft (raw, json)
Hash identifier: QTga3JDvwVPlEyMWC2ZGR33a8MpQdLwy/4iZZxNHNjk=
Subject key identifier: 1C:3D:EF:5B:41:75:97:92:5D:10:E0:DA:EF:F9:DF:CC:43:BA:C9:D6
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 0194BC3C9E455BED92AFF067126F977319CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
Manifest number: 0ECE
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: Uv3JwVQ6qmZXz-KzsQGMat5fy64.roa (hash: KmeqC7qJ5pr9JdG5IMPDKnlb1123tAE+TD1n+lvaaWk=)
2: fggLq1W_NHMYjCDHNmpssETHGVw.crl (hash: Kp126Cgx51GR4uoJEZBs5bzTR08IapyaLMpwfCxCn6s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9e:45:5b:ed:92:af:f0:67:12:6f:97:73:19:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=1c3def5b417597925d10e0daeff9dfcc43bac9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:ac:c2:8e:7d:4b:41:21:fa:1c:83:74:fb:
2d:bc:d0:bb:a1:b1:37:ac:c8:e8:17:57:e8:7d:82:
7c:04:c1:dd:7f:dc:0e:65:96:cd:56:d3:c6:d2:cc:
a4:d6:5f:0b:f1:43:5b:30:3c:e5:cd:eb:6c:e6:cf:
44:48:f2:d7:ea:fc:d7:65:ad:55:ad:f2:25:a5:d6:
b5:5c:eb:c4:3b:b0:b3:cf:af:42:7c:3d:95:b4:92:
38:da:5e:5a:e5:cb:ae:05:e5:d3:f4:d9:77:a9:92:
64:da:17:21:1d:21:1e:1e:ec:52:8b:84:8b:df:f4:
c6:3a:36:a3:71:52:31:48:17:f4:f5:9c:5a:8d:ee:
99:c7:71:08:5b:0f:d4:5f:9b:15:0e:ca:8d:9a:53:
37:07:2c:4c:b2:e6:d6:ee:8b:c0:fb:3a:df:e2:bc:
2c:07:46:d1:46:60:66:ff:63:ee:86:86:57:9f:27:
47:8c:b9:e8:62:e2:f1:4d:0c:e0:01:78:13:ab:fb:
88:57:43:cc:48:d2:f8:8d:48:14:39:17:3a:e9:40:
f9:3f:e2:3e:60:78:fc:b4:b7:f6:b6:82:69:04:b3:
9d:08:73:d3:8c:5d:2f:8f:0c:72:00:0f:0d:fc:45:
12:30:94:d5:5a:14:6e:7b:91:7d:62:6e:12:6f:c6:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:EF:5B:41:75:97:92:5D:10:E0:DA:EF:F9:DF:CC:43:BA:C9:D6
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:63:94:90:59:f1:fb:37:9c:5a:7a:ae:7e:ab:37:c1:33:00:
27:3c:d8:5e:cc:e9:0a:38:27:c2:27:d7:08:8a:05:29:57:8d:
5f:92:f4:c2:99:73:01:bb:ad:1c:e4:0b:45:a0:4d:9d:a5:31:
2d:6e:14:0e:7e:55:fd:34:6d:91:54:3a:b5:c6:a3:e0:3d:6a:
73:32:77:2c:e1:87:b0:04:53:91:fb:30:bc:2b:c3:85:88:50:
25:32:c9:46:f2:78:a1:a5:2b:82:fc:94:0c:66:8f:40:7f:d0:
c8:6f:32:46:8b:2d:ea:ad:64:1a:d5:48:69:5a:55:56:5a:00:
04:c6:cc:76:61:c8:2e:7a:91:bf:9a:4f:db:89:70:51:36:64:
4b:1d:9d:f7:5f:d2:47:f6:10:61:3d:dc:f5:bb:76:3e:b7:08:
b1:aa:e7:f8:b4:44:03:3a:a8:e8:39:5b:22:c9:01:ce:59:10:
da:96:e3:60:e1:94:b0:f6:9f:31:56:9c:56:37:fd:0c:73:6e:
89:52:a4:97:87:3c:5f:fa:4d:f3:e3:9f:58:8e:ff:f5:f1:b3:
fe:e7:43:f5:f0:22:54:58:4e:53:f0:42:e3:5c:4f:7c:f3:cd:
04:da:9a:03:51:3e:98:c3:c0:8f:9d:66:d0:ba:5a:62:cf:2e:
ab:08:7b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:51 2025 by rpki-client