Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
File: frsTAxu1qUujKTO0JdyRUBYclSg.mft (raw, json)
Hash identifier: 6SaI2JUjjgh5gTWZ6MEEMIJEa6U5u3z1p7rCa2STtV0=
Subject key identifier: 3D:79:C5:47:03:43:28:79:13:14:81:49:EC:BF:E6:F5:62:E2:09:02
Authority key identifier: 7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
Certificate issuer: /CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Certificate serial: 0194BBCE5F60A43DE2D8C2BC0880726D2459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
Manifest number: 8E
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: 1GrjD_MVlSSqPSOTstmSZn6OW-8.roa (hash: 0bCgzOJOxNfXuOJ/KwofBbHHt3oNngCqpnJt0zyGNL8=)
2: frsTAxu1qUujKTO0JdyRUBYclSg.crl (hash: 5Lx2jPQyzM809gcJF+yG+IDdnn9BnyOJB0fLg0CwdJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5f:60:a4:3d:e2:d8:c2:bc:08:80:72:6d:24:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=3d79c5470343287913148149ecbfe6f562e20902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:6b:af:a2:8f:97:1f:9c:c0:71:3b:08:89:
61:83:a3:95:d9:96:80:35:91:89:e1:c7:ed:b6:1e:
81:c9:a6:39:87:93:3c:02:6e:f7:4b:d7:23:52:be:
eb:b9:b7:14:d8:e0:97:49:62:ab:87:d8:05:e1:25:
bb:02:90:9b:b8:df:f9:0d:f9:e0:17:13:f0:d0:ce:
2c:15:9e:f9:7f:df:1f:f6:f1:7f:3f:f2:69:43:50:
b2:93:72:02:e8:ff:9a:76:be:ad:83:02:95:1f:b7:
61:ac:3e:58:76:8a:2c:11:8b:ff:fc:09:58:7c:0b:
31:31:aa:d5:08:b3:84:c6:59:29:3d:4a:40:26:fc:
91:1c:d7:a7:c2:09:32:36:6e:36:4f:74:c7:e7:e1:
c7:1a:d3:09:c8:60:a6:01:6e:ef:63:63:17:54:66:
a0:93:b1:98:4c:02:56:11:d5:40:f6:2a:a7:47:ba:
15:b5:0d:3a:3b:59:7c:6d:44:bd:99:63:fd:57:af:
4b:7e:88:f7:dd:30:b4:11:07:85:34:46:f5:dd:c0:
58:65:3d:60:c6:0c:5b:e9:da:fa:b4:2d:ea:c9:57:
fe:93:8b:55:8c:cd:c5:24:0a:23:44:f9:ba:70:2b:
db:02:f7:6e:16:b7:19:cc:f0:1d:7e:75:0a:45:97:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:79:C5:47:03:43:28:79:13:14:81:49:EC:BF:E6:F5:62:E2:09:02
X509v3 Authority Key Identifier:
keyid:7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:bf:1a:91:15:0d:c6:ca:32:ff:5b:7d:36:86:65:8d:80:97:
9b:46:0b:12:fe:de:e3:80:89:67:1d:dc:e1:e0:9f:58:a0:88:
7f:f2:df:40:d1:02:28:86:6f:4f:d3:1b:d1:6a:dd:df:83:5a:
db:f8:76:f4:76:d1:6d:0e:2e:dd:50:b9:84:3d:6b:ef:a6:34:
90:4c:b3:73:d1:43:6b:ca:9b:4c:cf:f4:61:67:86:b5:29:02:
b0:15:1e:81:e8:b8:ad:ec:e6:9d:43:e6:19:39:a9:2b:f0:84:
c0:38:e3:97:a9:db:12:88:7a:31:4f:a2:da:83:0a:87:b1:ad:
a6:df:45:df:ee:8d:be:fc:7f:38:1b:87:1c:2d:0a:12:93:b2:
70:e6:e1:46:35:e6:75:f1:87:d1:2a:f9:50:ba:6e:c2:ec:76:
d8:bd:dc:79:72:0b:47:89:4c:42:67:7f:e1:a5:54:27:6f:a2:
fa:7f:68:b3:54:12:75:c5:27:d1:e0:33:11:ac:ce:b0:77:b6:
3b:6d:e7:9d:78:00:db:2e:84:77:27:35:12:78:9d:1c:4b:e0:
10:04:67:a9:c4:16:07:33:f4:f8:6b:05:54:01:49:7c:ab:49:
ca:d0:5f:9d:78:0f:fe:8b:ea:9c:6a:47:77:a1:96:e8:1e:63:
20:69:15:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:13 2025 by rpki-client