Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: m5BFK0xRtsRqTNoCumouB+NitJli7AdIwLE/OAvvYUA=
Subject key identifier: EA:35:9C:E5:0E:36:9B:9D:7F:07:A3:AB:05:E5:3F:43:14:6B:54:55
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 0194BCE06C54D9F1EE10F2D142A67217339C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: CaD8SfEdywooETv97hW1lj5NkpI.roa (hash: dNHQXwrYM02G5vgMbWxu9GN4iMzITZjOe38V63Kd+Zg=)
2: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: VWGKMm0BkCp13hbBIVQiTCfM+jGgkBZwJGxf2ExH25U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6c:54:d9:f1:ee:10:f2:d1:42:a6:72:17:33:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=ea359ce50e369b9d7f07a3ab05e53f43146b5455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:f5:ab:30:2e:a9:b7:f6:ce:81:e7:90:8e:
0b:a6:60:ff:67:4a:19:fa:b5:ec:68:75:c7:6f:f5:
97:52:8f:79:05:3f:90:3d:08:cb:f1:0d:78:50:2b:
56:19:24:05:bc:1f:0f:b0:9e:98:57:de:d6:20:38:
e2:2d:ff:b1:0c:36:3d:d6:99:0c:ec:a2:3b:89:77:
02:3b:0b:f4:81:f1:74:1d:61:de:bc:a2:c2:50:3e:
dd:18:83:dd:e5:2b:f2:08:c1:97:e4:8e:52:e3:69:
7e:5a:c5:bc:0e:0b:ea:8e:48:44:46:dd:81:40:a6:
03:df:e2:34:e6:ce:69:16:03:96:0d:cd:70:61:8a:
ef:7c:6f:a4:a9:70:77:32:d7:c1:e5:3c:4e:bf:52:
be:e5:c4:fc:5f:46:85:a2:36:e2:7b:b2:fd:bf:8b:
c0:a6:2b:d4:2b:85:0b:89:d8:6c:74:bb:b5:42:e2:
f7:4c:7d:21:c3:13:b8:a6:2e:8c:b6:e2:1d:a3:87:
d7:c7:32:f5:d6:31:70:2e:06:e2:e4:dd:fb:21:8e:
11:ce:e8:16:4a:bb:3c:16:ff:c9:78:d2:e9:57:81:
bb:db:be:47:8e:c8:97:e9:af:cd:e5:8a:be:78:4b:
b9:a1:8c:8e:00:4c:f0:6b:5f:0d:72:bc:57:29:bc:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:35:9C:E5:0E:36:9B:9D:7F:07:A3:AB:05:E5:3F:43:14:6B:54:55
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cc:70:11:d9:50:32:1c:a6:dd:58:36:34:e5:ae:80:fb:62:
5c:7b:7e:9f:ef:43:4a:32:1f:f0:c7:09:82:fd:e9:67:fd:12:
bb:60:26:d0:8c:26:3e:db:9f:60:7c:a7:f9:51:2b:4c:98:02:
cd:0e:f4:21:ff:91:c3:49:b2:11:6c:2f:40:58:ff:84:2b:26:
06:a7:10:e0:07:8d:3f:16:7d:08:c4:7e:fe:87:f7:aa:10:1a:
6a:3d:12:02:4f:28:f7:4e:ed:04:8c:12:63:6d:60:ba:dc:b6:
9d:c4:4e:3e:60:c3:dd:cf:71:f1:93:8f:ed:36:35:7c:3e:fd:
ce:c5:b0:8a:d0:4c:90:06:32:da:c0:8d:b2:21:36:cd:3e:14:
95:68:f3:7c:a8:82:02:09:62:cb:44:a1:db:a9:20:6f:85:bc:
92:86:14:f4:b6:2e:ee:9d:53:e9:61:6f:34:44:c3:27:16:9e:
7c:dc:c7:3c:0d:0d:62:dd:e5:0b:65:0c:68:7e:e3:af:da:82:
3d:19:3b:06:7f:10:ad:16:aa:eb:4c:2a:af:86:e8:26:ff:79:
fc:f7:b2:47:bf:09:64:cf:99:52:93:84:4f:1f:b4:63:e4:3b:
96:52:94:36:0d:00:24:db:da:d9:36:3f:6d:9b:38:c3:f3:62:
96:70:40:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:57 2025 by rpki-client