Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier: A9mDd7+0xVXWM3H9oweYfF7yXDsPJAAJutwHPEyiSX0=
Subject key identifier: CC:FF:3F:F2:3C:2E:4E:27:8B:9F:7E:D9:F5:9E:28:49:49:AE:E7:0A
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial: 0194BCAA39B1FB5DD70443AB30C0B675441C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number: 0108
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: RdOdP3DlBfXpnxBBT7lO73v8oG8.roa (hash: 9+BQ0Xt7iU/x6pUN6YyjEsb6BHBaV2Ejuirq22nlRh8=)
2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: nhxG/zIbdpvzPIPtfi7pt7Q+ez6lqlAnOs58dS9kt6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:39:b1:fb:5d:d7:04:43:ab:30:c0:b6:75:44:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=ccff3ff23c2e4e278b9f7ed9f59e284949aee70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:e2:10:da:0d:a9:a9:27:f4:df:57:e0:e5:
8e:45:0b:59:af:cf:48:38:f4:5e:12:2f:d5:94:ec:
14:f9:cf:44:2a:4a:14:55:ee:91:05:da:a0:f1:68:
ab:88:8f:4d:cd:8d:39:37:eb:bf:b9:4b:92:fc:62:
5d:61:51:8a:8c:af:a5:f8:f1:77:14:e6:32:22:09:
0b:df:25:b0:2a:1c:f3:a8:ea:81:ea:f3:60:5c:5d:
58:89:62:8d:34:e2:33:cf:58:9b:12:50:50:e3:64:
06:ed:6a:23:1a:2d:26:fa:fd:39:56:5d:57:42:73:
7c:d9:ed:ba:fa:28:a3:1f:89:2f:48:79:c1:31:fd:
a7:49:29:9e:aa:aa:0a:f9:eb:c3:d8:46:89:ff:ea:
21:bb:53:d6:63:af:5e:7d:a7:a4:1e:23:49:aa:90:
d5:ed:48:68:9f:61:98:00:1b:ce:b9:0f:4a:a7:dd:
9c:79:3d:3d:44:b6:b1:c4:5d:ba:75:76:0a:36:52:
f0:d8:79:f1:b9:c6:7c:26:08:21:cb:c3:4a:84:b2:
91:36:7b:af:c7:9d:73:e8:b9:05:3f:a6:d4:99:da:
0d:84:88:37:57:84:3d:78:75:1e:d7:18:f5:40:c6:
7e:b8:44:07:89:fb:ef:82:e7:ed:04:ce:47:3c:d8:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FF:3F:F2:3C:2E:4E:27:8B:9F:7E:D9:F5:9E:28:49:49:AE:E7:0A
X509v3 Authority Key Identifier:
keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a8:09:8a:c6:81:08:75:68:8a:86:4e:0e:18:ef:92:80:c9:
ad:e6:fb:1d:6f:f6:ad:cf:04:59:55:bd:e1:b6:ad:09:5e:72:
03:c5:98:8c:9a:d0:7d:3a:ea:6a:6f:c6:e9:b6:56:31:7a:dd:
c3:e3:74:85:01:f1:e0:23:d2:55:3b:95:10:82:f9:a6:30:f0:
40:c2:20:69:9c:52:75:89:be:a7:14:48:f5:a9:df:2f:c0:a0:
7d:1e:37:bb:1b:b6:a7:5a:d7:24:44:37:b9:94:86:38:93:9d:
0a:d7:5f:c8:05:da:88:4c:e9:22:5f:b9:98:2d:c5:97:83:35:
ba:cb:ab:46:97:40:6d:8f:09:18:75:70:23:e1:6c:4e:d5:70:
de:fb:bd:19:f7:73:de:2f:52:60:81:af:50:a0:04:97:89:d6:
3c:2f:83:58:6f:42:a1:0c:17:85:8f:89:9f:0b:44:d8:86:54:
2a:39:fe:7b:08:f4:88:81:b3:1d:83:a5:8c:46:75:1d:e5:c6:
15:e1:5f:e4:34:8f:40:ac:eb:da:14:89:73:bd:84:e8:e9:45:
28:6f:02:a7:92:3e:2b:ed:14:a4:e7:1b:ae:f3:b3:6a:7d:85:
c2:e3:32:e7:af:91:27:e7:47:d3:2f:2a:53:ea:67:e1:bf:da:
ae:02:27:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:33 2025 by rpki-client