Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File: _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier: X8aFyegtgS4z5S39oYdBgE/LgfQmWtUP0wrpKrdupQ0=
Subject key identifier: 71:7B:A4:21:25:D7:E1:51:10:27:71:BB:0E:EB:25:E6:B1:2F:33:CC
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial: 0194BCE0E9B69E901F893A8C9084CBD14C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: 6rfSl-YG8Bpw7iFs3OGfejPmBow.roa (hash: xWZc5l9yPZ6h0RVi3qTPSak9kbYfcpqaIIv+IYE4hs0=)
2: RjzornIpBpWAVg31mbW6GCIn3FE.roa (hash: 1SRf58fZ7vrCHWvD/MO3Mvx+IEH2+W2jesliOPCnBDw=)
3: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: nKTloXgNclN6PSa8qbAIf7qXMlq0lYT5E2kj3KjIJhA=)
4: qodg_DBnwKRycROmAU-iKcJ4abc.roa (hash: srDO/uSK7u2lQgddrt4UOUxImFrZqcKNDp2zNmpUe54=)
5: s7awYrhPujEu-ZRGweV7KC1XVMo.roa (hash: qDjaklj7okGt/N67lpsepn6cM5rI/Einb7VtSwhb734=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e9:b6:9e:90:1f:89:3a:8c:90:84:cb:d1:4c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=717ba42125d7e151102771bb0eeb25e6b12f33cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:28:c3:8e:4f:68:fb:94:dc:81:ab:1a:23:
2b:b1:9d:11:0c:04:3a:e8:99:df:a4:03:53:6a:38:
30:45:38:4f:45:fd:7c:3e:22:d5:81:97:48:49:4f:
45:f2:2a:48:ad:3f:60:9d:20:2f:ef:bf:d3:50:23:
ac:6b:f1:4b:c0:91:0c:21:96:4c:07:f2:d5:07:db:
91:2c:c0:b0:6d:08:2a:92:7d:c6:06:05:bb:54:da:
43:c3:25:e0:a6:51:bb:91:f8:f5:d9:53:b0:28:ba:
a1:41:39:42:4c:c8:41:70:2d:d8:4a:57:79:98:61:
a5:0d:15:0d:17:d9:63:98:13:9d:2e:0c:34:3c:0b:
a4:cc:08:88:6a:67:96:70:66:4f:46:4c:6c:bb:0a:
2f:f0:fb:b1:ad:2f:72:14:a8:9b:34:80:de:48:d8:
fa:d2:f2:e7:51:5e:18:43:b2:33:c0:82:90:a2:27:
48:48:cc:01:16:0c:08:0f:11:43:13:c6:80:fc:a9:
09:c1:8f:c5:82:59:82:2e:1e:3c:eb:29:d6:a1:9f:
67:88:8d:4b:e3:7b:ec:e4:23:d1:9f:46:55:28:25:
50:6e:40:6f:5e:1e:9e:52:2b:84:6e:a5:ba:04:6a:
7e:07:9e:b9:84:4f:aa:d1:e5:dd:7b:59:c9:c5:bd:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7B:A4:21:25:D7:E1:51:10:27:71:BB:0E:EB:25:E6:B1:2F:33:CC
X509v3 Authority Key Identifier:
keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:af:3a:1e:78:66:93:84:56:1a:d2:14:0e:68:09:75:34:f9:
4b:fb:da:06:eb:a0:af:06:b7:a0:2e:30:af:c2:66:6d:5c:d6:
c3:c2:83:5c:ff:28:04:db:7d:22:fa:90:1e:cf:cc:0e:75:57:
a8:01:24:ac:8c:3e:04:16:0b:24:35:44:19:ea:16:fd:0e:a9:
4a:4b:58:a2:8e:41:a4:89:c5:e0:ba:a8:f6:3a:d9:20:5b:ce:
ef:5f:12:ae:6a:67:09:8b:96:1b:6b:fc:5f:2b:e9:97:4b:52:
34:f1:61:89:0c:e4:16:2f:70:97:2d:40:5e:d5:d5:c4:57:7d:
d5:fd:c8:9a:a4:36:94:1d:bb:4d:e8:b4:0b:8e:48:79:de:5c:
12:f7:42:d2:d6:8d:c6:35:74:f5:11:c6:f9:d5:ac:44:57:7c:
82:16:52:84:0c:1d:e9:5b:42:a0:d5:68:e1:a5:02:55:3c:66:
34:de:f5:e7:db:bf:dc:08:6e:e7:40:26:89:12:e7:a3:4b:87:
28:c9:d0:db:b5:00:cf:da:24:7e:e2:77:f7:bc:e3:e7:d6:be:
35:5b:b4:81:30:e1:08:d6:e6:f3:46:93:56:91:3b:37:b0:0e:
d8:8b:d1:d8:f3:47:21:40:71:61:6d:fa:00:1e:24:fa:79:a5:
0f:ee:fd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:46 2025 by rpki-client