Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: CWd1BeqaEeZPblmOuwa+0xrLjO8viFY37Jtju+p8g2U=
Subject key identifier: 32:F8:58:E0:4F:94:11:76:9C:03:FC:24:F9:64:A4:F4:66:59:45:38
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0194BC3C755D18A1ADFF6E2B1F11BDBCEA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 1474
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: 1-S5qvxIivACajgHOImV6A7PzZ-Y.roa (hash: 5eaYwgknJFi+92ZpSL4oXHKKT0v0I9SvQziQ7JjTslo=)
2: Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa (hash: /b5aRnHH3wnxArlR5kFKg9d+odQfqWviv5wIlL2Kwi4=)
3: LuPOINyFzX9xpTNNLpVMhkc3RGs.roa (hash: CVfqSYlx9earVowtUFnY2vr9Ypav6ng0WSshJUDgEG0=)
4: W0y-zOIi1-67OubMNwYseTI2YtY.roa (hash: o3q76eBrYuH9u8MB8bIslqFqm+BZyQwFbiFNU/6C+2A=)
5: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: 2FEDBlkwpudKj69LOHqhnf17yhzxDdTfLOrqVktl0qg=)
6: k0BbLfW1pH9JeekCNksDJuhLIU8.roa (hash: I7bsd1t0LSwpkWSpjQNC0fheclbb8PLVx1rVQYbgTzo=)
7: nh1DAdGlkCnqMoRCOw5nSf1eUrE.roa (hash: 6CL3sDa/YSgMH6T3lPf7wvZWcq37OdDdy32xWrUSt1w=)
8: zavgzNemz0PuzWJnrL1r_g_mOeM.roa (hash: GhTFQ6FabhR00Vo0TF/PdK9RjLjp+971izL/zbfm494=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:75:5d:18:a1:ad:ff:6e:2b:1f:11:bd:bc:ea:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=32f858e04f9411769c03fc24f964a4f466594538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:e0:5e:9a:84:44:58:1a:f1:ed:6a:45:66:
05:f0:5e:f3:17:39:93:59:c4:c5:3a:9f:f4:7e:97:
40:45:10:3c:4d:89:3e:b5:05:15:3f:eb:88:dd:bb:
5f:ad:40:81:1c:d9:33:d8:f3:f2:48:31:19:e9:83:
e7:74:ab:88:f6:91:9e:ca:56:6d:19:c8:b1:82:23:
51:22:8a:da:3a:b6:e3:2e:55:c9:71:c4:e6:3d:c4:
8b:55:4c:03:2e:a4:e9:77:23:b5:a3:4a:4e:09:db:
6b:78:ba:67:41:5f:6c:9e:a3:49:cf:98:3e:47:59:
d2:60:1c:62:40:b7:2a:71:28:ae:bc:cf:1a:e8:97:
48:9c:89:ee:f6:24:64:6e:a5:32:57:1b:c3:af:9f:
a9:6a:8a:ce:6a:84:cd:44:7c:50:c9:82:b6:70:3e:
47:22:7a:dd:db:b7:df:2a:72:6c:bc:96:ac:9b:46:
92:cf:7f:16:6a:58:87:0b:19:bf:62:6b:14:a6:b1:
7e:f3:aa:e4:e9:97:57:3e:59:00:da:d6:58:f7:5d:
e1:06:e4:14:80:1c:3b:bf:1c:6d:07:f0:64:39:92:
9d:c8:6b:35:09:84:39:84:e2:2b:51:bd:88:31:94:
2b:09:99:df:a5:f1:ba:d0:52:9c:f6:02:6e:95:b1:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F8:58:E0:4F:94:11:76:9C:03:FC:24:F9:64:A4:F4:66:59:45:38
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:41:f4:b3:80:eb:21:2b:19:d7:17:23:c3:3c:04:d5:dd:c7:
a1:0e:10:6f:21:b0:ec:b9:61:bc:22:a8:1e:a1:22:41:38:fd:
51:17:58:72:93:06:3f:5e:ec:17:7b:21:8d:66:7e:92:a3:25:
93:b3:77:ac:9d:69:cb:26:d5:16:75:97:e5:66:4c:02:f1:a1:
4d:de:59:16:5c:e6:3e:db:da:b8:ce:67:2d:20:33:30:b3:4a:
d4:65:51:00:99:9b:bd:2c:c7:43:73:64:3b:b3:ff:c5:6d:3d:
7c:cc:0a:3b:6d:3f:0b:2a:f0:5f:cd:b2:5e:e6:50:cc:41:df:
fe:34:a1:e0:e2:5a:0c:d2:8f:5b:8e:ec:ce:19:3a:dc:75:37:
8b:9e:e2:67:95:a1:c1:43:d8:cb:6a:84:8a:28:8f:80:b0:08:
a5:d4:cd:62:7e:d2:ac:17:94:62:5e:2d:66:c5:ca:cf:a9:1c:
7e:bd:42:03:6d:7a:95:a9:49:d5:90:d1:98:f5:4c:fc:22:17:
a1:f5:1f:56:28:14:72:5b:13:28:ff:04:d0:37:0f:9b:d8:8c:
17:da:d4:3f:11:12:bd:80:5e:60:db:71:aa:9a:9c:e0:c7:7b:
7e:72:00:3c:b2:9a:03:d8:82:65:cf:74:48:51:3a:24:cd:83:
9d:55:8b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:44 2025 by rpki-client