Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File: fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier: jPH6FCccys2TZNALrkPiIljuV7AA6vFwk9MFMsRrt/Y=
Subject key identifier: 0E:FD:3F:55:3A:7D:9A:B2:1E:94:DB:F9:F0:63:BF:F3:AA:0D:CC:A0
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 0194BBCE35D07F8BFFFE8EB68732C2276DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number: 1264
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: UK9YjHWc92sXiUJt3VZoNIq4t0k.roa (hash: igI+4irUGdklUjezFA8tc/PWzUHzep3VbVTtAZ5nupE=)
2: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: /T+9U282UG14eNkAxrbhQw6oITdM/EjIv+v5KF9vjuM=)
3: zUIN-vPBSWAo7u0peNQbk111_tY.roa (hash: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:35:d0:7f:8b:ff:fe:8e:b6:87:32:c2:27:6d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=0efd3f553a7d9ab21e94dbf9f063bff3aa0dcca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:89:93:e2:19:d0:a8:23:51:89:39:2f:c9:
68:16:00:bc:91:aa:54:c4:a5:31:7a:b2:60:94:3c:
ca:56:98:b6:13:4f:32:f0:58:04:e8:a3:b9:30:6b:
06:d6:d6:7b:2d:b5:c3:bf:06:37:1c:9c:ba:d4:ed:
d7:29:dd:ca:fb:98:db:e5:4c:fa:93:6e:ab:0b:1f:
83:9e:76:46:70:09:f1:c3:95:dd:b6:68:17:c0:3d:
77:82:cf:e1:7c:14:b0:5c:ea:2a:91:bc:e6:f8:3c:
5c:bb:59:e7:46:ed:1e:ba:7f:f1:ce:5c:03:31:c6:
a2:a9:89:f4:c6:13:3d:da:42:5f:15:c3:8f:7a:53:
3b:f0:22:34:45:12:5d:4a:52:b7:39:f1:6a:a9:bc:
89:89:83:c3:26:2b:e3:28:98:5e:70:87:c9:b7:ca:
04:94:b8:f3:26:0d:43:93:c3:a2:57:a0:aa:4a:b9:
31:29:bd:a0:1a:72:25:58:99:18:fb:dc:8c:2c:26:
64:b0:11:85:c0:c8:44:f3:7e:1d:3c:d6:df:fe:52:
39:3d:12:02:cf:a4:0f:bb:0e:4c:56:df:d9:f3:a4:
17:c9:de:6d:47:15:f0:23:c1:ce:f3:5b:36:b2:16:
29:39:ec:56:ef:57:d0:fe:1f:b9:c2:c1:2d:24:44:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FD:3F:55:3A:7D:9A:B2:1E:94:DB:F9:F0:63:BF:F3:AA:0D:CC:A0
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:98:b0:b0:94:e1:16:4e:60:e2:65:eb:5e:0c:bb:fc:55:3d:
f8:e4:47:9c:f2:6e:77:3c:05:8b:c9:8a:83:18:17:f7:df:69:
44:2f:a3:b0:2e:79:02:6c:2b:40:38:b0:8d:88:ac:19:85:4f:
bf:13:13:fa:0c:59:61:a3:14:6b:a0:c8:74:1e:7d:42:3c:9d:
95:b2:38:d8:e1:07:fe:2a:f2:24:c0:f8:e8:e3:3b:2b:8d:60:
c8:fe:51:0c:c2:06:39:fd:ef:cb:af:60:8f:15:d2:40:d5:eb:
ac:4d:8c:69:79:60:6f:95:75:a2:6a:25:68:2c:ca:1d:53:e9:
ee:08:b0:8a:f5:29:56:25:ec:4f:b9:60:60:b5:08:b4:7e:9f:
9f:a3:67:51:10:d4:b0:ca:2d:31:80:88:7f:37:a6:80:fa:54:
fa:6b:6c:e7:ce:1f:95:24:77:f5:08:50:6a:16:d8:de:b7:47:
c3:e4:5e:87:b5:74:0c:87:c5:7c:41:02:ec:0c:9b:3b:70:7e:
2a:46:39:a4:56:2f:7a:ac:86:1a:8c:77:6f:ac:0f:6c:4b:9c:
7a:f4:f8:12:fc:3d:84:fb:ea:6b:9f:1f:d7:49:e1:51:71:59:
69:3f:18:37:02:16:d2:4d:fc:c0:43:91:f4:ce:62:bf:5c:c0:
d5:d9:d0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:42 2025 by rpki-client