Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: l/UjN6eQgEMY0SKYNWVPqOViUMM2SqUsydsTa3QsUZc=
Subject key identifier: 10:33:8B:F4:A2:F4:28:7F:30:E5:40:CD:65:90:2F:5D:B8:73:69:DE
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 0194BC72C4A300077630C327B588EBD65398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 115F
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: VSyCKUnHxzAQ7a0HESRSqJnaWDg8hBn6E7gCcL5T8vs=)
2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c4:a3:00:07:76:30:c3:27:b5:88:eb:d6:53:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=10338bf4a2f4287f30e540cd65902f5db87369de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:a4:88:b6:44:7c:c7:68:ff:e2:e5:e2:1a:
52:44:d5:5f:a1:bc:26:7d:a5:83:77:21:c8:72:64:
0b:6b:18:da:06:66:ac:01:fe:c5:20:5e:56:a5:62:
f1:e5:3e:01:80:2e:6a:8c:91:6d:3b:03:4a:37:26:
03:46:70:82:ba:fb:3d:b4:58:4a:75:87:1a:52:df:
98:0b:a6:02:84:c7:1c:bd:9c:93:89:eb:04:0e:4e:
ea:0f:88:6c:0a:03:e9:c4:70:ed:c0:48:e6:39:17:
01:70:f9:c0:da:c4:02:36:e3:0a:dd:69:5b:c0:dc:
43:e8:08:93:48:a2:53:19:81:24:1c:ff:12:57:26:
73:14:5d:4f:c5:f4:55:04:1c:3c:14:a8:90:c9:ca:
8d:71:e7:3d:a0:fd:fe:8a:88:24:20:f0:e5:c7:8c:
6a:4d:10:77:c1:c5:f2:11:b0:1e:0a:d9:84:20:1a:
2e:2a:06:62:0b:7e:02:75:e5:b8:42:60:c5:8c:8e:
be:ed:75:3a:d9:fc:c8:b5:79:59:25:92:0b:68:80:
e9:d7:3f:b5:c4:05:31:83:aa:f8:fe:a1:54:24:0c:
c8:96:7b:3e:49:51:01:24:ba:9d:d3:bf:ac:ef:20:
7a:91:b7:71:1b:2e:38:69:d9:55:eb:a1:5b:ba:d8:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:33:8B:F4:A2:F4:28:7F:30:E5:40:CD:65:90:2F:5D:B8:73:69:DE
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7b:b5:d1:9c:ac:24:68:75:8e:5f:88:42:bf:81:14:1f:1c:
52:d6:7f:88:fe:e3:ed:8b:4e:e6:de:79:96:f0:c3:d1:e9:63:
42:43:e3:79:a6:d3:aa:9f:6a:ae:e2:fe:33:db:17:a3:d2:80:
0c:07:61:fc:6a:74:09:1d:79:ea:65:91:dc:d6:f0:82:a2:1b:
df:ee:a0:bd:40:d4:4c:91:10:e4:f0:66:ff:9b:e9:58:86:76:
c6:cc:41:eb:26:71:77:cf:d5:6a:f0:0b:21:17:a6:d1:63:f0:
d1:a0:bc:fa:eb:d2:a0:20:e5:ae:d9:4d:b7:58:5d:ed:d5:73:
42:2b:6a:94:af:70:85:78:12:07:ee:8c:86:f6:90:e7:f3:04:
de:ff:f3:6a:15:75:35:35:d5:10:4f:0c:d1:82:c9:7a:35:7c:
7a:ee:31:bf:5e:be:13:47:e4:27:01:54:66:6c:c6:2e:4a:14:
9f:13:ba:3b:ec:e3:33:4d:9c:3d:4e:f2:7e:c8:74:2e:15:21:
1c:27:4b:e5:0a:c3:4e:58:dc:85:01:0b:be:4a:2e:a5:d5:30:
f6:ed:e7:d0:b0:11:48:50:04:7f:03:49:11:da:f8:33:79:60:
2f:57:27:1a:ad:43:24:75:24:28:6a:49:81:76:f0:cc:95:f9:
44:97:0f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:45 2025 by rpki-client