Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier: XppSuXIADJ5m7154+Cr1Brkct0R4EKMEsTbzdIRsq+E=
Subject key identifier: 4F:17:48:A0:92:81:07:D6:A5:EE:11:F3:3F:B8:ED:CA:7C:94:69:C5
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 0194BC733254D90523F53456CB73A1727E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number: 1129
Signing time: Fri 31 Jan 2025 13:00:53 +0000
Manifest this update: Fri 31 Jan 2025 13:00:53 +0000
Manifest next update: Sat 01 Feb 2025 13:00:53 +0000
Files and hashes: 1: AcPmWwo94r8m4Vj4-gToYDvTsGU.roa (hash: +evKtbSFjpYA6xBirW2To9jZahtd3cCQYx8e8YIZ/g8=)
2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: kVHGgrTbYJrE+zC+2aYHrZxMKa6jsV5zhe+/oMY0JpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:32:54:d9:05:23:f5:34:56:cb:73:a1:72:7e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: Jan 31 13:00:53 2025 GMT
Not After : Feb 1 13:00:53 2025 GMT
Subject: CN=4f1748a0928107d6a5ee11f33fb8edca7c9469c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:6a:2c:95:64:66:7e:9d:01:b6:8b:7c:8f:
41:62:98:65:a9:4c:ed:04:68:c0:79:45:d9:f0:44:
fb:9b:77:93:46:03:03:32:31:26:db:ce:97:7a:a4:
57:b0:0f:13:fb:47:87:4a:7a:8a:1d:35:53:98:c3:
aa:62:d9:5c:75:ff:05:a4:b4:7c:9e:99:76:31:aa:
73:86:12:74:a1:7f:90:79:31:d9:8b:39:da:36:aa:
18:fc:5a:78:c9:24:cf:f9:c4:ff:9f:5d:00:3f:cc:
f8:67:34:a1:2e:7a:a9:dd:d2:e3:34:21:98:10:19:
00:77:22:c1:7e:35:50:07:74:ec:53:9c:57:d7:a1:
60:9c:54:5d:3b:3a:86:2d:60:fa:c4:f4:d1:6c:13:
63:65:b0:af:f9:bb:5d:bd:01:b1:8f:d5:5a:dc:bb:
6b:41:dd:b3:cd:26:6f:8e:97:1c:86:19:47:23:1e:
a4:fa:26:ce:79:8d:99:ec:05:49:43:f5:f6:5c:32:
28:d7:ce:e4:08:38:df:90:99:fc:3f:73:db:df:a1:
94:0a:c2:cc:29:54:1a:73:ae:db:2e:10:fa:bb:a1:
e7:5d:00:18:57:65:58:4e:8f:ff:c8:a6:82:00:96:
de:05:6d:81:91:84:a0:95:aa:77:13:34:64:a3:ed:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:17:48:A0:92:81:07:D6:A5:EE:11:F3:3F:B8:ED:CA:7C:94:69:C5
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1a:69:72:e5:74:f3:a1:41:13:cb:9b:94:8e:cd:cc:f3:f1:
f5:0c:3e:ee:2f:fd:b4:42:82:62:f0:fd:9b:12:94:49:eb:9b:
22:6c:a6:65:7e:40:83:45:3f:36:69:c0:e9:bf:03:b5:89:e3:
34:53:89:81:dc:19:62:5d:ad:5a:1a:dd:79:ac:e2:6a:e8:4b:
30:08:2a:2d:c1:d2:61:76:68:6e:cc:b9:ef:0f:a6:09:a9:3f:
d9:0c:70:cc:cb:f4:1e:d1:07:4e:12:b4:c0:f5:ae:91:34:04:
a5:6b:59:f2:3f:b9:ad:7c:97:d8:50:db:55:a1:f8:ee:e6:b5:
23:df:93:c7:b4:11:a2:9c:42:c3:eb:d6:fb:26:b7:53:2a:f4:
ef:37:b1:17:11:dd:ea:c1:4c:3f:82:17:9a:4c:f5:54:c2:ac:
57:ae:dc:90:01:44:21:c9:5e:a5:e6:01:14:78:8f:86:b1:71:
2c:3a:df:c7:b8:ba:46:f2:9f:94:44:d4:e1:3f:a7:62:e9:11:
26:79:e9:6a:e1:a5:6e:85:7f:50:3c:31:04:f9:a2:2a:da:f4:
42:17:02:cf:6e:68:0c:9c:57:1f:8e:d9:eb:e9:55:bf:07:e5:
59:29:8c:c7:3c:b8:af:63:b4:a5:9e:b6:da:97:89:9c:37:15:
ef:25:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:20 2025 by rpki-client