Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File: fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier: xzndnXQ0tMohXmIZwxMPTGBkZPHJr2G8H9+6t5M0lSc=
Subject key identifier: A4:46:A0:82:0E:67:B2:F1:30:24:13:A6:64:CD:24:60:95:8C:AE:AC
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial: 0194BD17D3367A4E756D91303848E9C0C060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number: 0F1D
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: 5yaV1N9R7XS3kOcITOq9YcHuY/umpiX8n+9JrmeI+yk=)
2: wiYzsjUHBoFDTAUV4-NsiZxerM4.roa (hash: zXyEKo9i/zxSUuQwDuOSqU58LlPxkyV+OyzpHePFkS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d3:36:7a:4e:75:6d:91:30:38:48:e9:c0:c0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=a446a0820e67b2f1302413a664cd2460958caeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7d:d9:82:7f:1a:56:a3:42:c3:81:cb:c9:b6:
b8:08:30:cf:c2:81:42:04:38:81:fb:6e:9b:c0:af:
d2:bd:e6:75:31:0b:ef:76:59:6f:72:11:d7:64:b2:
8c:d2:02:01:5c:11:c0:0a:2f:2f:dc:31:8f:4d:26:
61:57:82:1d:8b:84:28:22:46:70:fc:6f:bf:dc:c5:
61:85:c3:96:98:ac:09:2a:ab:9b:cb:f9:7c:62:c5:
07:6b:42:0c:bb:97:8d:46:d5:3f:48:5f:75:9b:1a:
83:4a:8d:3f:de:f7:ad:2e:82:59:4e:c5:fb:c4:bd:
bc:bf:ce:df:31:41:c1:f5:7a:9c:c2:53:60:12:b4:
f0:4d:fc:a6:e1:a2:33:d1:91:83:32:94:ad:ed:65:
d1:e2:a2:fb:c1:62:2a:e7:3d:a0:6b:71:58:e2:ac:
38:be:13:93:41:3d:d9:f7:14:cd:44:6c:22:49:15:
9d:6c:ab:a3:df:0e:ca:65:41:98:f8:04:07:0d:62:
d9:dc:60:35:3a:1a:83:58:2f:3d:8d:e3:41:ed:4f:
67:52:d5:c2:95:19:ff:a3:60:79:47:63:7e:35:21:
d6:29:75:27:20:ab:f4:eb:85:9e:79:68:ef:08:31:
0e:a7:c0:54:fd:f3:18:1f:3f:77:0c:77:a1:e3:43:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:46:A0:82:0E:67:B2:F1:30:24:13:A6:64:CD:24:60:95:8C:AE:AC
X509v3 Authority Key Identifier:
keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:b2:95:80:52:d8:75:17:a1:e6:44:12:5b:eb:27:3a:a7:
8a:ff:f4:04:e0:1f:1b:31:61:dc:7e:8b:44:d3:7f:bf:c0:a5:
16:23:be:f4:50:d1:fa:1f:d6:7f:1f:bf:6d:9a:31:cd:91:20:
d2:05:0a:cc:18:8d:f5:96:cd:6b:43:d6:f7:ab:1f:cc:47:c6:
e4:2c:31:21:d1:12:07:dc:cc:18:da:eb:1d:7e:40:0d:ca:87:
dc:8a:12:99:ae:a4:7a:f9:1a:0d:ff:92:27:b4:8b:c9:73:2d:
ba:0a:23:95:a6:d1:41:95:38:90:04:c1:43:a3:61:48:4a:06:
dc:54:5d:09:c7:e6:d9:74:9f:02:c7:f3:38:38:a6:1e:a6:e2:
dd:59:da:ee:c8:ea:9c:99:13:0b:03:1f:c6:89:1d:87:60:d7:
49:78:54:4b:3b:ce:dd:a1:96:43:61:e9:44:84:2a:26:17:fe:
dc:27:78:0a:7a:84:53:44:33:33:9a:b1:65:61:3b:af:e1:fc:
7f:7b:47:8d:0b:05:47:dd:ab:b2:4b:bf:cd:bc:e8:a1:7b:b7:
50:64:df:be:f2:d5:1e:0c:a1:56:31:a3:72:01:6c:f5:6c:f4:
32:dc:01:95:b8:52:15:0e:3e:7a:00:f9:6f:f4:a9:08:5a:f1:
c8:3a:de:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:28:16 2025 by rpki-client