Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: x4LLQVKzWQxFvniKoKMV6UPWKrguE6Qgutz3cf9hfUI=
Subject key identifier: DD:30:54:D4:50:5D:88:E0:F9:D3:D9:86:33:DA:60:2B:85:53:7B:9C
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 0194BD8565B9C958B39A341440A1136AA3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 078C
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=)
2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: j9TzXc8QIHPV1alWzoxQmuPCdaRopj22BjKxgiqBDu4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:65:b9:c9:58:b3:9a:34:14:40:a1:13:6a:a3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=dd3054d4505d88e0f9d3d98633da602b85537b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:09:d1:af:66:52:f9:9e:0b:a7:a5:aa:f4:
f3:6c:8d:94:df:67:8d:3a:37:3f:1b:12:fd:d6:1a:
b0:0d:5a:9d:94:8e:98:5f:17:69:0e:a7:4b:99:12:
9e:70:98:9c:bc:dd:2f:4a:e8:d9:91:04:99:9d:cb:
ed:b6:ff:59:85:61:27:71:dc:41:2d:33:8f:80:ca:
48:88:5b:46:89:99:df:17:3b:17:a1:bb:61:f8:fd:
c6:ea:8f:d9:66:64:ed:a3:d6:43:5b:12:b4:15:fa:
00:59:fb:df:32:5c:28:65:67:a5:02:c0:59:5c:0c:
f8:06:8c:d3:2b:9c:6b:15:cb:64:8e:a7:ec:6f:1e:
bd:8a:3c:80:69:98:fa:dc:8b:b6:89:cc:92:0f:a7:
3c:cf:f0:91:ad:c8:c9:23:e1:24:9c:77:1e:bc:b0:
ef:b8:5d:ed:93:ef:7f:0c:cd:b2:49:cd:6b:67:43:
c4:17:a8:b2:ef:69:4d:cb:6e:91:a4:71:93:a2:47:
0a:ae:74:4f:15:0d:6d:a5:f6:43:df:73:0d:8a:53:
29:20:28:de:c8:4c:6f:8f:f9:0e:a9:6b:81:84:29:
f7:05:3e:fe:e4:f7:20:73:15:c4:e9:88:2b:82:9b:
ea:2a:c8:bb:15:f2:28:77:af:98:06:47:8c:1e:06:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:30:54:D4:50:5D:88:E0:F9:D3:D9:86:33:DA:60:2B:85:53:7B:9C
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:80:58:53:f4:e7:cd:87:75:e8:37:18:d1:c5:98:ff:93:48:
43:79:b3:55:12:8b:ef:e8:1a:2e:73:17:81:00:af:4a:5d:7b:
ad:d4:65:0a:db:e7:54:fb:92:57:94:eb:18:60:06:9d:31:28:
35:0d:fe:d3:74:cb:9f:d3:f9:84:18:68:da:59:5b:f3:98:2b:
21:ce:f1:ec:7a:09:a9:75:20:43:05:9f:82:13:64:0f:e8:73:
c6:47:32:09:50:a4:5d:0a:f8:e2:ce:5b:f1:88:a6:be:9d:5a:
cc:3b:ed:0d:f8:b2:6e:ed:72:17:c6:96:94:29:00:28:07:7d:
0e:ee:75:d4:79:0e:fb:17:0f:5a:fa:07:15:f7:cb:b7:fa:92:
13:0a:0c:ff:6b:08:cd:b5:26:ea:4d:da:9a:36:0e:30:b9:0e:
88:52:a9:38:c2:37:85:de:40:d4:84:14:dd:85:ef:8c:51:82:
f2:27:b2:a9:45:59:dd:18:67:cf:73:21:d8:09:6a:96:81:b7:
4a:6b:38:4d:f4:86:2b:b6:fb:eb:e1:3a:f2:64:5a:9a:5b:b5:
fb:9e:8a:82:a6:82:1f:a8:1a:5d:c5:13:9b:5e:c3:62:45:c0:
72:3c:71:01:a3:8f:90:f8:3d:6f:f8:65:43:c3:d3:67:b1:fd:
7f:48:d7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:13 2025 by rpki-client