Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
File: fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json)
Hash identifier: pPHIKBjauP6KhFE3CV3zOUNx0o+c+F4FHo4kj3IkLlU=
Subject key identifier: D0:CD:C7:0E:53:57:71:DD:E7:A8:02:AE:6D:E4:9C:3D:BE:6B:2D:FD
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial: 0194BCA9C99B806218D85CB28B1E5BC9CCB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
Manifest number: 1200
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: 0tq5kgZAzDMqnviitVn_OQYTHsM.roa (hash: gEsfs30k2T4OAeytJOfxkkrnBmtQHoikoZxrs0lJ3gs=)
2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: 8F5zcSV+JkspYYpT2BiBojSV1j3Bl29igUrRC0eHphE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c9:9b:80:62:18:d8:5c:b2:8b:1e:5b:c9:cc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=d0cdc70e535771dde7a802ae6de49c3dbe6b2dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:5a:c3:d4:a8:5f:f7:db:d5:f1:eb:3c:f8:
7a:7d:91:a0:55:10:14:cd:7a:e1:b2:30:15:9f:a5:
9e:4f:62:e5:05:05:7a:aa:75:6f:f3:56:88:57:81:
10:6b:dd:3c:28:06:6c:e5:a2:c5:6f:31:c9:c6:1c:
36:5c:80:a5:58:26:96:43:27:a5:24:3d:9d:c8:cd:
de:7e:f3:b8:b2:fc:0d:36:6c:5c:ac:e2:19:a3:3e:
cd:d4:8f:57:38:1d:4d:a5:e4:e5:45:ff:1a:0b:d9:
d9:92:fd:6a:6e:62:34:aa:ef:c2:f1:4c:1e:e2:6f:
a2:6e:b0:a9:f4:a2:60:b6:1f:70:ef:6a:4d:ca:07:
b9:bc:c9:dc:e8:5b:36:0e:aa:7a:a2:f4:6d:e2:d8:
09:43:68:b4:53:4f:4f:0f:30:a8:60:35:5b:e0:09:
35:2f:54:c1:55:da:a7:a9:a9:37:0c:08:3b:33:78:
7e:ee:68:d8:7c:86:ad:5b:46:d8:9b:56:ea:25:fd:
03:fd:d8:76:ae:82:d3:c4:cb:79:05:0a:60:de:a0:
ab:48:e7:42:4a:17:5b:5d:53:57:fd:f7:48:49:70:
c1:b6:4b:9b:21:21:bb:d2:18:55:2a:d5:80:d8:a9:
d8:d8:86:95:45:ec:e6:19:1c:f9:3b:da:ac:6b:11:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CD:C7:0E:53:57:71:DD:E7:A8:02:AE:6D:E4:9C:3D:BE:6B:2D:FD
X509v3 Authority Key Identifier:
keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ca:22:c9:b8:23:9f:e1:a7:e4:ba:b7:3a:f7:21:e8:9f:5c:
9c:2a:ac:aa:82:93:78:a4:aa:1d:bc:42:27:1f:e3:7a:b1:b2:
ce:5b:0b:4e:e4:57:2b:5a:1c:d6:99:b6:bc:7b:7b:e4:86:1a:
7d:e5:df:bc:19:cd:b3:b0:e1:af:e8:10:9a:5b:96:dd:53:39:
bb:61:a4:6c:36:ef:67:ab:89:3c:05:81:ce:43:33:58:c1:75:
f7:d7:27:77:32:b9:64:89:20:ca:85:b6:a1:d5:79:2a:22:f2:
8f:dd:32:d3:ea:0e:47:92:cc:e2:11:18:de:c7:2b:84:4c:f7:
33:ae:2b:ba:36:ee:50:83:41:73:de:a2:b4:fe:bb:c4:02:8a:
d4:68:af:82:2e:34:02:a6:e7:64:11:95:7a:b0:77:69:cb:b4:
31:9e:30:95:86:e5:a3:67:c1:55:a6:9c:a0:22:fc:7f:55:c9:
c6:65:6a:19:23:18:84:74:bf:5d:60:06:37:8d:10:ec:94:99:
9b:be:f8:33:a5:58:4c:8e:80:7a:56:cf:e2:5a:13:09:9d:43:
a4:9b:29:65:0e:4c:43:c2:35:85:58:60:4a:ae:43:3e:f9:56:
95:00:30:39:20:a2:e4:f8:ea:66:4e:4f:9c:05:31:ff:a8:24:
2d:f4:17:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:28 2025 by rpki-client