Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: rOW6Xwh+yZXtoTZ+4oeYKQXuQNLPr0MpPRW+ubDw+QQ=
Subject key identifier: 0C:57:CB:DF:C5:88:54:E9:5C:64:4F:E3:91:21:DB:77:C3:4B:A1:29
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 0194BC732C30A98F2220D879C5E10C530DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: fnSkGK9JRMsZcWkeSpABZRhRAy4ARY9tlx4GYJi13H8=)
2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:2c:30:a9:8f:22:20:d8:79:c5:e1:0c:53:0d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=0c57cbdfc58854e95c644fe39121db77c34ba129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:e7:1e:bf:23:18:6b:ee:5c:80:7d:36:1b:
e8:7b:c2:46:43:17:13:65:35:ae:00:ce:30:18:12:
43:41:47:6e:f2:47:9f:a4:48:4a:61:56:b8:05:26:
e1:96:bc:98:88:51:eb:a9:91:a3:8e:3c:ec:9b:98:
a3:e8:ac:d7:52:46:25:29:68:05:d3:a9:09:ae:8e:
8f:02:10:8e:5d:f3:8b:58:3c:dc:4a:ba:3c:a8:ae:
8a:ad:ce:24:03:dc:89:03:43:23:55:4c:5d:0f:37:
66:c4:df:32:3f:ce:2c:40:b9:e9:07:93:ef:96:ed:
64:79:c8:ef:53:5e:95:1d:3e:56:83:00:9a:26:27:
87:ca:f5:ea:d7:25:72:a2:02:13:23:8f:75:71:a7:
0c:65:c1:86:24:e6:22:86:cf:e4:15:8e:fb:86:5e:
03:64:c2:23:09:1c:c9:5c:d3:60:bc:b0:26:22:98:
60:b5:bf:26:8f:eb:11:60:43:37:a1:24:0f:30:dd:
d3:4e:ce:44:ee:fa:40:39:6c:9d:37:51:ea:42:6f:
e6:57:d7:7e:ab:84:33:1d:7a:31:89:9c:fe:39:de:
a7:1f:0d:f4:22:d4:c6:d9:82:c2:0d:84:2a:69:5e:
1e:97:bb:34:ba:aa:bf:a9:4c:f1:11:1b:d6:a7:f6:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:57:CB:DF:C5:88:54:E9:5C:64:4F:E3:91:21:DB:77:C3:4B:A1:29
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:00:dd:b4:a4:a4:90:71:39:45:b1:5a:9b:aa:a5:ad:f3:dc:
d1:ce:db:90:81:4c:ef:9f:2d:9a:74:04:fe:19:8a:96:a3:35:
e7:a1:75:4a:14:ef:4a:5c:ca:6e:68:31:7e:73:b3:0a:74:be:
bb:f6:99:75:29:55:b5:cb:ad:2c:d9:a7:59:bb:ad:63:55:43:
f2:53:74:7e:86:15:75:1d:4d:af:6f:bb:59:43:54:26:1c:a4:
bd:20:25:25:95:28:51:c7:9f:37:e1:49:cd:62:37:ab:5a:7f:
5b:20:3d:15:e9:9f:b3:b5:5e:39:30:b0:6b:cf:b0:a8:e8:fc:
d7:3b:fb:19:17:46:60:18:99:b2:fb:5e:03:56:30:5f:0b:00:
64:3e:21:15:9f:6a:15:d5:1d:23:1a:6e:45:f7:c7:30:4c:b9:
40:b5:80:d2:f1:5f:be:3a:64:34:e1:4b:cb:a7:05:6f:7c:aa:
36:7e:f1:ac:b3:80:3f:fd:ac:f3:f6:be:ac:e5:ce:5e:b3:91:
a9:e5:78:fd:46:3b:f2:75:e4:61:92:dd:f7:d9:72:57:d7:03:
5d:b9:f2:d6:41:1f:3b:7c:e0:fc:08:f2:e3:e4:eb:94:be:6d:
4e:64:de:f2:ed:18:37:ce:45:07:61:c4:d8:6b:db:b5:05:b4:
2b:f9:91:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:20:52 2025 by rpki-client