Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: VRDrvJVJj0C6peVWoHq5mHKiyx4/4oScH7HTxmLd0uM=
Subject key identifier: 30:35:2E:8E:FA:97:C9:8A:2F:A7:0F:EF:88:80:BA:BA:AD:D7:A2:DD
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 0194BCAA228B28989D989B12F3EF06884F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: 4ekqJ0ShOsudm3NjqB8EzsLIznQ.roa (hash: bsmaITtT/q9ZrtwjMFlkhST+mxUMFa59Ikk72Us4Vtc=)
2: IVNXij-StlwFeQNzqAVOIR_s5UY.roa (hash: SitPl6cMloLrlgSBvA7o7zdkDMuevHChw+flrI14V8E=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: RW+IIlSk8GSaqUgl1P3iKAz50DgC2d/aVZnUzqYo8mE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:22:8b:28:98:9d:98:9b:12:f3:ef:06:88:4f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=30352e8efa97c98a2fa70fef8880babaadd7a2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:61:e4:eb:1b:ba:31:50:ef:d6:69:ee:c4:
d5:66:28:55:59:19:20:6a:83:b9:ce:5f:d6:94:e4:
73:39:8a:87:1a:e1:34:03:9a:9c:52:5d:e2:53:59:
1c:57:17:d8:6d:09:80:29:a4:50:4d:fe:b2:7d:f2:
47:24:2a:b2:18:e8:69:70:c6:37:fb:1a:de:ed:8c:
c7:33:c8:2d:5e:fd:b8:cf:36:4d:f6:77:8c:a8:36:
ed:3a:55:56:10:9b:f8:16:22:d8:c6:49:ad:79:b4:
b8:77:84:e8:b4:4f:0a:23:8a:a9:3a:99:eb:35:4a:
8b:5a:ca:86:32:30:07:e6:43:62:7a:0e:a3:ad:cc:
80:97:5b:29:d7:d0:f9:99:66:93:a0:eb:42:2b:e1:
81:1c:fc:eb:4c:0d:69:ef:f2:7a:ef:57:2d:1d:4c:
7e:80:03:b0:56:c1:52:47:a6:3d:14:08:93:77:02:
20:6c:70:e9:2e:16:54:0d:db:bc:08:63:dd:04:e7:
a1:43:6f:30:43:97:92:07:0b:04:55:87:b4:43:1c:
63:0d:86:40:ec:b1:54:64:b7:50:a0:8d:73:8c:9e:
d2:b4:31:e8:1d:69:bc:2c:ed:74:32:0d:9d:11:01:
c9:b1:44:50:e2:ed:7f:de:da:e4:a0:12:5b:55:9e:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:35:2E:8E:FA:97:C9:8A:2F:A7:0F:EF:88:80:BA:BA:AD:D7:A2:DD
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:72:d7:59:ec:59:7f:42:15:eb:2c:b8:91:84:b3:fd:90:84:
b8:ed:a7:7a:aa:62:be:04:0c:1c:32:2f:1a:fc:ea:b5:cd:1c:
69:ef:78:a9:d1:95:d7:42:85:da:ab:e4:48:e2:cb:12:af:ad:
51:a2:0b:2a:c5:34:73:20:55:4c:3f:4c:dc:fd:7b:0f:8a:9f:
5e:ac:a7:be:4f:08:17:9f:be:9e:33:be:8d:71:c5:d0:44:3d:
a1:ee:99:08:2b:29:2d:ee:99:80:7c:da:80:5a:44:0c:e0:a2:
78:91:08:33:1d:82:98:e7:43:a6:8b:4b:ed:9f:3f:78:9c:c1:
9a:3a:de:16:db:d2:fa:f7:0a:48:c0:5c:c4:85:f7:3d:14:d9:
fa:71:90:ed:71:1a:d3:e5:e9:e8:ba:8e:ee:38:ba:d6:7c:20:
94:09:2e:e5:22:d1:c1:13:32:fb:e2:9a:d9:17:50:2b:fc:b8:
f2:12:d4:c1:4c:a2:ed:1f:7e:cb:de:ce:d1:f0:95:98:16:0d:
fb:5b:6a:56:c0:ac:fb:79:1e:de:3c:ca:ca:f1:c2:4b:12:49:
b0:28:a6:13:28:46:75:c5:f8:fe:2f:9f:66:80:5e:71:dc:ba:
2d:fd:fc:61:10:1d:3c:71:f8:4e:55:d0:47:20:0b:05:11:02:
99:b6:51:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:33:02 2025 by rpki-client