Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
File: En6fnV_UXaAQaVzEISr35nt7NI8.mft (raw, json)
Hash identifier: S4w6tELvV90N5/JaIjqgwV4l8CgaTZKGQLW0Sd6TFpE=
Subject key identifier: F8:C4:03:ED:F5:B2:B4:5B:AC:CF:F9:F3:80:21:CE:41:D8:DE:01:B6
Authority key identifier: 12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
Certificate issuer: /CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Certificate serial: 0194BD4E3D2564198DCD869B4863128B87CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
Manifest number: 0FAB
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: 7chXrCB-kcx4BDbNvUre62zCVs0.roa (hash: kM2S2XstoTcg0W9WF7loN86FbRs2E6G/NWJAtjB1G7s=)
2: En6fnV_UXaAQaVzEISr35nt7NI8.crl (hash: A8Q+UxXBJm+0uC/7Jrx4h8e+7yED97XeEhrNo+JjKKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3d:25:64:19:8d:cd:86:9b:48:63:12:8b:87:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127e9f9d5fd45da010695cc4212af7e67b7b348f
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=f8c403edf5b2b45baccff9f38021ce41d8de01b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:98:96:b2:df:0f:81:73:bd:65:25:c3:19:
b4:7b:0d:ad:20:af:01:a4:38:bb:bc:77:86:23:8d:
ab:00:d6:2e:72:a4:11:09:33:18:a9:21:a0:30:5e:
7c:05:d4:76:67:9f:7e:dc:32:33:96:08:6a:f9:22:
e7:85:95:3b:fc:ec:63:af:53:eb:28:9d:a3:ed:d3:
71:15:f4:22:e9:3c:91:cb:52:fe:48:10:20:8c:ca:
98:ae:8d:d4:67:e6:91:d2:2e:e3:96:9a:2b:92:fa:
0e:c9:5b:b0:c4:9d:b9:af:ee:38:4d:b5:14:54:9b:
27:72:6e:06:5d:ad:92:fb:aa:32:ee:23:5b:fe:6d:
81:fd:05:a1:04:e1:40:a0:6c:3f:82:fc:4c:bb:fb:
3f:69:99:13:e9:d8:44:d8:80:9e:d8:91:ec:3a:bb:
89:b1:a6:4d:f4:18:05:36:c2:99:25:99:d3:33:28:
dd:ec:b5:0a:de:f7:a2:48:84:a9:93:cb:55:67:ef:
cb:b7:18:e4:57:39:eb:49:e9:e8:66:61:83:59:3c:
28:82:8d:c9:da:bc:41:95:dd:9a:eb:f2:02:75:7c:
bb:7f:3a:89:91:8e:ad:8c:eb:3d:ea:fa:66:3e:21:
c4:e5:c3:e3:a8:ee:a6:fd:35:bf:0a:6a:f7:e8:96:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C4:03:ED:F5:B2:B4:5B:AC:CF:F9:F3:80:21:CE:41:D8:DE:01:B6
X509v3 Authority Key Identifier:
keyid:12:7E:9F:9D:5F:D4:5D:A0:10:69:5C:C4:21:2A:F7:E6:7B:7B:34:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/En6fnV_UXaAQaVzEISr35nt7NI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/24d1eb-2ce1-4e6f-83c2-15a9f21caa85/1/En6fnV_UXaAQaVzEISr35nt7NI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b0:7d:02:7d:21:89:61:61:d8:a5:3e:24:6a:2a:e7:47:23:
80:0a:99:51:ee:2c:40:86:55:2e:51:1a:05:e1:9b:63:93:ca:
83:6f:14:ec:dd:f1:28:34:22:37:45:40:7b:18:e7:9a:33:1b:
bb:73:65:6a:20:21:0b:41:08:da:79:95:a3:72:8c:97:e2:67:
54:af:10:bd:df:3c:22:11:27:66:57:60:4c:47:5f:26:ed:a0:
7b:21:56:bf:9d:d6:ec:7f:ff:35:a0:5e:26:aa:67:6a:a7:25:
5c:e2:75:e1:9f:da:40:db:6e:bb:ac:3f:28:11:91:5d:a2:20:
c6:d8:82:25:27:f1:5e:95:26:41:5d:12:ff:5e:4a:57:4b:b2:
a0:6e:b9:77:1f:f8:5a:d0:88:22:f2:99:35:d3:28:ac:86:dd:
1d:d9:88:c3:8e:f5:ac:8e:23:ec:9f:5d:5b:9f:00:f6:c8:25:
2a:c4:52:45:92:f3:21:96:4f:3f:b8:e6:96:54:9d:89:de:0f:
53:a1:64:a7:8d:ef:c0:ba:7f:74:8d:9c:fe:b9:d7:59:40:ff:
b9:64:5b:32:57:e3:a6:6e:bd:00:f5:50:95:5f:e0:16:de:03:
85:df:00:0d:f8:50:74:5f:f0:24:d6:22:c1:23:7f:b9:a4:1c:
bd:94:db:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:52 2025 by rpki-client