Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
File: fI5wl5kOWmcXjil4daDZ9GBYkqY.mft (raw, json)
Hash identifier: dwIFTluzscbgsxrXf4bO148qLXbDLwpQMuScW8tCXrE=
Subject key identifier: 1A:94:74:F9:0B:A2:29:8C:66:C3:AE:0C:80:3A:8E:88:C5:7B:DB:5A
Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Certificate serial: 0194BD17940B7AA33C873752BED078372FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
Manifest number: 0AE6
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: fI5wl5kOWmcXjil4daDZ9GBYkqY.crl (hash: +aI2bxtKhHUoGsdMVe541h6fMU3GoED3OY6DCQsYZlM=)
2: x5BCA2nXSzjfqsyhw28GUZqlIA0.roa (hash: XYC94H5SlTsc3HXQBpsVEd85N9+lJ9Ig2x3jNjrZbWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:94:0b:7a:a3:3c:87:37:52:be:d0:78:37:2f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=1a9474f90ba2298c66c3ae0c803a8e88c57bdb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e0:c8:61:d7:e6:ac:b8:5a:66:ba:cd:5f:a4:
45:4d:d1:52:bb:34:f1:bc:d6:28:8b:f6:f2:98:56:
90:ef:cc:0e:e7:0e:3e:39:24:92:c2:2e:80:e7:89:
e9:c7:82:91:2e:e3:c7:a5:3b:a6:aa:f0:02:d2:28:
0d:05:4d:cb:91:62:44:e9:1f:bd:96:55:c0:ca:ba:
74:d9:ab:43:69:b2:e3:52:f6:3a:6a:94:9c:60:e5:
e5:ee:90:d5:f0:a1:1d:f8:94:56:06:77:6b:42:b4:
32:98:77:b7:49:22:95:95:d2:d1:ac:cf:cb:53:66:
ab:76:d8:6c:03:04:67:c9:fc:be:27:56:83:06:b8:
b6:c0:fc:69:f8:3e:4e:e8:fd:77:19:ea:68:db:59:
b8:75:4a:6e:9b:9a:b7:47:9f:0d:fd:0e:88:d7:24:
2b:e1:a6:d3:50:3b:df:2e:e4:b8:2a:ab:62:08:a1:
1b:c6:55:7a:10:4d:de:bd:41:0b:e7:8e:20:d4:4d:
c4:5f:21:03:3e:e1:d9:2b:f8:50:e2:87:c8:e8:d6:
da:e8:cc:dc:a2:c5:69:3c:99:3f:80:db:c3:2f:c8:
ab:a6:07:2c:db:d0:a7:65:64:00:cc:dd:5d:59:02:
fb:33:cd:c8:74:1c:c5:c7:2e:81:63:6e:ca:01:a4:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:94:74:F9:0B:A2:29:8C:66:C3:AE:0C:80:3A:8E:88:C5:7B:DB:5A
X509v3 Authority Key Identifier:
keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3b:37:3e:b4:db:92:9a:02:ed:e5:66:ec:18:1e:09:e1:55:
b7:ef:a1:c3:09:fd:41:8e:32:77:9c:2d:93:2a:e5:fb:a9:2e:
13:96:0f:f2:72:dd:7e:a8:68:ae:83:3a:d8:3f:cb:87:7b:54:
69:94:d2:21:ba:2e:d5:cb:b8:64:7b:04:6b:dd:15:21:0a:56:
58:f5:40:97:de:f2:ba:4c:0d:1b:43:23:95:46:f1:af:bb:3f:
79:61:13:36:b5:dc:1f:b2:af:47:64:45:a8:2c:30:57:60:d7:
9d:fa:2e:a8:c8:2a:ec:ec:ed:aa:13:19:79:7b:4d:2d:99:33:
4d:56:e2:5b:06:59:ff:2c:06:e5:ca:35:37:09:2c:f3:4b:10:
88:e1:b5:de:ba:f3:95:85:7c:8a:18:c4:93:74:84:f3:f1:ea:
e2:d5:aa:29:0c:12:fc:00:20:cb:2b:0b:e9:0b:09:08:60:59:
96:7d:c5:74:e6:78:f3:12:c8:81:02:7b:7c:97:1d:5d:c0:59:
da:e3:36:77:c6:42:06:38:77:64:77:91:78:fb:44:3b:04:2a:
bc:34:f2:92:ee:8e:df:b1:b3:8e:98:7e:10:a9:c5:26:26:d5:
ea:a0:fc:f2:92:81:5e:22:9c:2b:0f:1a:b7:96:80:74:19:e8:
58:4f:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:59:23 2025 by rpki-client