Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: u1hFRH9MQql/dCoQaKZds1me5x0RykcAnJcQZErKl9M=
Subject key identifier: D9:B8:BF:55:C7:F7:BA:0F:1F:01:27:71:FB:16:6F:7B:07:96:6D:2C
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 0194BD4E4D64C53CB399F4AEE872CD4B971D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: hDXJqHhRVakrUpAy2mxJpw32amA.roa (hash: Q2fYQzDzeuJHoaVaTN2Do0bb6ba0BBCZfekXkM6wQUY=)
2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: Z5nPh41yXP202N6olVFp+KhkqohRdS5rH2c4wYyAhw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4d:64:c5:3c:b3:99:f4:ae:e8:72:cd:4b:97:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=d9b8bf55c7f7ba0f1f012771fb166f7b07966d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:60:ca:95:06:fd:69:13:ce:75:1c:d0:b5:
2b:1b:5b:ad:9f:c2:ec:3f:ee:03:93:78:e5:29:f3:
fa:ae:a1:0f:39:f5:71:85:83:a1:43:b3:d7:59:e2:
5a:2a:69:ba:99:cc:a0:4e:3d:dc:ec:3f:39:f8:fe:
32:8a:d8:96:4d:cb:7e:5e:30:0c:a5:13:03:26:a1:
c5:ca:35:84:de:d1:63:2c:7c:78:53:42:5b:ff:80:
9c:7d:56:cf:4b:e6:1c:8e:b9:09:26:9e:3f:d9:55:
27:f9:8e:ca:eb:d9:ae:e9:d5:cf:4f:dc:c3:20:bd:
b3:62:1a:0e:23:4b:c0:d8:a5:f4:ab:1a:10:6e:05:
d3:34:94:3e:1e:15:7e:d1:07:ba:50:cd:41:bb:ce:
aa:40:d9:8e:00:4c:23:2a:a4:ea:48:b3:c8:32:b9:
a5:6c:74:3e:38:31:54:cd:45:2b:02:a6:9f:47:92:
d5:f9:d0:e5:de:4d:04:cd:53:35:00:d2:24:c3:bc:
63:1b:89:8d:d3:de:3f:d7:fb:66:65:20:87:fa:11:
e8:27:3d:49:b2:97:1b:ef:41:13:48:61:5c:42:a8:
3f:79:54:44:a5:41:e4:43:cd:55:1e:9f:5a:07:e8:
09:13:68:a7:55:7d:51:45:87:e5:30:e5:12:51:28:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B8:BF:55:C7:F7:BA:0F:1F:01:27:71:FB:16:6F:7B:07:96:6D:2C
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a7:de:a4:09:54:6e:14:38:be:14:25:82:1a:9f:f4:9b:cd:
ba:fc:7d:88:86:39:66:c0:3c:2b:71:96:36:52:bf:0d:f1:e3:
f9:95:c6:85:d6:aa:a9:91:02:33:70:ff:aa:19:ac:37:15:49:
5f:ad:48:1e:33:a8:99:06:fd:ee:0a:16:6d:be:a4:4c:39:ad:
49:2f:a2:f8:cf:d9:b3:22:9d:75:e8:a1:e1:b4:96:cc:13:b7:
8e:20:c4:82:fc:03:ea:6c:23:55:61:3c:9e:0b:ba:c8:f2:6d:
34:29:1b:f7:d6:87:80:c4:d1:12:2f:59:37:88:ce:bd:92:5c:
91:4e:51:cc:f7:5d:fa:f7:04:33:2d:f7:fb:93:0e:bf:72:a9:
6a:39:f0:c4:8b:0a:69:70:4a:02:ab:5e:34:64:ca:a4:08:17:
6e:5b:63:d5:fd:49:cb:90:a5:bc:64:77:96:d3:0a:e6:08:08:
44:83:15:ba:6a:33:75:f6:14:6d:5d:76:cd:10:6a:49:de:86:
c7:d4:66:f9:6b:54:19:df:b2:89:92:42:3a:70:ce:b7:48:de:
9d:ce:cd:aa:b8:c2:59:79:d7:bf:46:5d:43:eb:d0:60:38:fb:
6e:5c:1f:77:0c:1f:71:02:05:6c:5a:3f:a3:17:67:64:58:b3:
3f:6d:54:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:26 2025 by rpki-client