Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
File: fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json)
Hash identifier: miA6LtbnftRDJhnYwXHQlMnk54O80JF+cog3GQVNv4Q=
Subject key identifier: 95:A5:CA:6A:1A:91:BA:DF:91:03:40:59:4F:05:8F:DB:8C:5C:35:52
Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
Certificate issuer: /CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Certificate serial: 0194BD85A7323BC09D58DAE1422BAF07147B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
Manifest number: 1169
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: 787yu0Xx7LAqYI4eV6FlvWwe4sU.roa (hash: 0rdw2IxnG2UduKLMx9SDd9m8DvhrTv12ADsR6eydjg0=)
2: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: ZWTmwG4fkmoT+z0tz1mqIDGum1fj+Y3Xeb0wNaUhetk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a7:32:3b:c0:9d:58:da:e1:42:2b:af:07:14:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=95a5ca6a1a91badf910340594f058fdb8c5c3552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:a5:2b:6b:0c:34:fa:d1:3f:e9:04:6a:3a:
95:68:a9:fc:70:aa:e1:47:da:b9:ee:1a:fb:bd:a0:
a3:8a:83:48:d8:ec:03:c5:05:17:1f:94:14:3f:84:
83:3c:3f:70:bc:b8:69:8b:46:fe:ff:df:53:e1:63:
e7:12:da:5b:39:7b:bc:ff:65:54:7b:b8:32:89:67:
c3:0d:1e:c0:3d:11:f7:b4:c3:3c:96:9c:28:49:8c:
72:df:d9:ba:68:c0:33:4b:38:79:7d:55:57:35:52:
98:f4:ce:4c:d6:2a:63:b9:f5:0b:24:69:5d:1b:42:
74:e4:92:c6:a8:82:9b:4e:5c:23:af:aa:72:5a:eb:
66:2d:6e:a0:63:cc:06:fd:35:07:23:f0:c1:cd:34:
ac:af:5f:24:dc:8a:46:2a:49:e1:36:f7:d5:a7:2d:
43:84:8b:2b:46:64:dc:c4:b7:7f:b2:70:a9:51:76:
cc:6d:b1:da:d7:57:f2:a9:dd:6e:67:6e:e1:0b:93:
7b:90:f1:9d:b6:34:d8:d0:5e:91:f4:4e:05:41:c3:
ea:af:a8:cd:0e:b7:96:71:6a:f5:6a:18:95:fe:59:
17:f7:bb:36:bc:71:b2:6e:00:fe:64:b2:49:14:bb:
94:ac:09:c9:7e:61:90:3d:c5:96:62:c1:a6:46:cc:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A5:CA:6A:1A:91:BA:DF:91:03:40:59:4F:05:8F:DB:8C:5C:35:52
X509v3 Authority Key Identifier:
keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:70:e1:96:24:92:97:ce:a9:d8:98:d3:07:43:c1:8f:09:dc:
9d:d0:fa:ba:75:26:b5:09:ca:4f:6b:5f:1e:aa:6c:10:bb:77:
81:72:81:59:38:45:8a:70:95:e0:67:13:ad:22:77:af:4e:90:
6b:43:ae:79:9e:a3:a0:1d:67:a4:88:08:ac:4b:b9:4e:65:8d:
2d:ef:0d:e8:9b:a8:f6:da:c9:5c:69:88:03:04:c3:7d:ae:26:
50:92:8d:20:3e:8c:4c:88:32:e8:06:75:e9:d5:a4:cd:9e:89:
d2:79:f4:9e:51:ca:fa:7e:b9:0c:6c:ac:48:56:82:8a:b0:e8:
4a:e2:fc:0a:05:a7:a8:d2:b4:0d:b3:af:27:1f:ec:5d:cb:21:
0e:12:1c:62:a6:5b:be:db:fd:c6:9e:0a:9e:4c:1c:64:a5:28:
01:e3:ef:5a:0f:7e:e8:13:aa:c7:58:58:b9:75:fe:23:ae:89:
0e:07:1c:7b:cb:73:21:5e:37:ec:18:16:c5:c2:71:3c:f9:1e:
c4:e5:69:3e:e5:73:bf:1d:81:b9:f2:55:de:f6:e8:57:c2:8c:
fd:eb:c7:d9:ec:e0:57:3d:76:ca:d1:29:8a:a4:8e:06:69:71:
fc:cd:1d:f8:c3:ce:8c:bd:89:ce:59:43:5a:52:6d:17:19:1c:
63:51:11:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:04 2025 by rpki-client