Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: QLH/PtKkq6tf3wQ0gI63T0fqtxRNrwIZf7OpAaxE8yg=
Subject key identifier: F2:5E:F8:92:2C:75:84:3D:B3:76:0D:0F:06:84:D2:13:8B:37:6C:27
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 0194BCA9B612F758CBE6EE75FD6239584B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0B12
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa (hash: CneTmiRYnA+2gIbWw8P2gftXT9GSMXZurQf8UEQYJtM=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: z9ujSUXnF0Pm7r4vvkYLSSMXY8/nb92f+D37KyvJgIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b6:12:f7:58:cb:e6:ee:75:fd:62:39:58:4b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=f25ef8922c75843db3760d0f0684d2138b376c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:cf:53:87:b6:91:03:ec:c6:72:34:e6:5f:
ed:51:15:de:10:18:48:c3:03:c5:13:ff:33:11:13:
6a:b8:f4:e5:33:78:21:71:21:e5:02:cd:90:2b:1e:
56:a8:66:37:6b:65:b2:96:9c:b1:33:a2:36:63:75:
88:69:d8:fb:b6:7d:cc:30:a3:84:2c:6b:3a:d8:0c:
3f:cf:5d:6d:cf:9b:ea:5d:dc:df:08:4c:a1:e8:e2:
13:27:10:6b:b2:55:34:44:92:80:20:48:b9:0d:94:
e0:4f:4a:91:83:50:64:aa:d1:6e:d0:54:e6:c5:60:
05:e4:eb:16:15:7f:06:86:90:f1:a5:ac:8a:5b:ed:
c1:38:b2:1a:10:1c:ec:dd:33:6c:b4:70:d7:e5:0f:
eb:89:97:45:a9:04:3d:7e:48:3a:47:f7:d1:4b:45:
d8:de:51:2c:e2:28:01:a6:2d:43:c6:94:e7:58:68:
89:47:85:1a:e0:d2:24:62:ee:eb:4f:94:83:9d:61:
bd:80:61:41:07:56:4e:56:6b:78:8d:38:7a:b5:3d:
58:74:b5:e3:1b:13:9e:e1:5e:ac:3f:4c:0f:fc:5a:
39:01:8b:52:1c:23:17:4a:c3:aa:e9:10:2e:db:0b:
e0:f0:e5:fb:23:43:33:cc:a3:79:f2:fc:d4:3b:b4:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5E:F8:92:2C:75:84:3D:B3:76:0D:0F:06:84:D2:13:8B:37:6C:27
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:08:75:af:6b:86:c9:5b:99:01:37:1f:2d:e3:9a:e0:3f:9e:
75:a1:b5:2a:78:8b:cf:11:b7:18:a1:ab:4c:9c:48:bc:27:28:
85:6d:29:37:f2:78:5e:26:ae:d2:c4:d3:f1:fb:4f:e8:d8:a9:
0a:51:c3:e1:cf:7b:66:4b:fd:45:78:25:b0:fa:53:72:8b:d7:
f8:0d:71:61:7b:d3:f7:ce:41:53:19:d0:62:83:b9:5c:49:e7:
0c:5e:fa:60:5e:45:f8:17:e5:ff:a2:f2:90:f3:d7:89:94:14:
2d:72:be:cf:f0:e8:a0:32:c8:67:d8:d7:25:4c:85:41:92:b3:
27:e2:e3:d7:71:ab:4f:ab:c2:a3:60:fd:a1:f8:72:53:76:c2:
03:0b:6c:c9:2f:a6:6f:a9:c1:8c:4d:b8:a9:29:67:f7:13:28:
24:ba:fe:4d:14:0d:5f:6c:a0:55:71:67:69:71:a3:ec:65:ed:
90:50:64:3c:cb:26:c6:f8:b7:6b:09:e3:3e:b4:9d:9d:c5:51:
ed:97:98:70:b9:41:4f:1c:41:13:e3:62:f8:21:52:fb:dc:70:
ed:2d:cc:39:ba:20:ad:7f:e8:73:f0:07:12:fa:81:f4:62:4c:
88:c5:f0:3a:28:30:7d:db:59:49:6c:f3:50:c9:c7:15:fd:7d:
e2:95:00:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:24 2025 by rpki-client