Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: EbmaeOXhquXJ0ypD4VTa948OpKSDad/HfX/tfi7gVTI=
Subject key identifier: A0:A3:C3:68:3E:AF:A9:CA:EA:1D:42:7E:81:44:C1:A8:D3:9F:E4:D6
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 0194BCE08069CC910FB50E6D8DA3894639ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: xQEyf7ntpXNZiaabhTwFqo7NRM6r4hR83wZ9baPXi8w=)
2: hfVNxhpqjhtY0Y5pPH1kyqqYbyE.roa (hash: aFX0mNsdzdwNbH9dkbmbgQ2YlhtWRYm/NSgRF7fVXw4=)
3: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (hash: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:80:69:cc:91:0f:b5:0e:6d:8d:a3:89:46:39:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=a0a3c3683eafa9caea1d427e8144c1a8d39fe4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4a:06:de:f6:3c:fe:9e:22:49:10:02:d1:8d:
b2:04:2a:23:b4:39:13:20:86:30:45:97:25:01:25:
ae:37:e7:45:a3:76:44:1b:fc:60:e1:bf:79:2a:f7:
76:68:94:97:fc:5a:6e:69:3a:0e:ed:04:b9:1c:2c:
6f:ae:65:77:1d:74:50:05:17:b0:0c:9c:20:a0:7d:
d9:4b:8e:19:da:af:b4:1f:ac:c4:69:57:00:cb:4d:
03:c2:81:34:04:f9:42:4b:88:e8:0d:b0:e6:c7:60:
23:95:2e:44:32:c9:ef:d3:21:6b:2c:13:0e:a4:1e:
05:b0:c1:22:39:fb:f0:08:bb:d7:9a:ce:7a:9a:f3:
56:c4:28:b1:e6:65:5f:f0:0d:ec:a7:68:e9:e1:6c:
e7:d1:3b:28:0e:aa:63:5b:1f:a4:58:50:d8:09:69:
03:fb:fc:41:47:04:51:20:3c:c2:35:d2:8d:13:ba:
e6:03:f9:c7:e6:43:de:1c:33:78:31:f2:a5:1f:f0:
1d:af:b6:ab:8f:f2:9a:1d:f3:c2:38:cd:b8:3d:54:
66:84:c4:38:56:8d:3c:09:f9:35:f8:ba:a7:d8:a6:
be:7b:bb:6f:1e:c2:78:ba:39:e4:b9:6d:35:48:02:
ca:a6:d2:a1:cd:95:88:06:63:66:b7:c9:bb:b1:4d:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A3:C3:68:3E:AF:A9:CA:EA:1D:42:7E:81:44:C1:A8:D3:9F:E4:D6
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2c:c4:83:75:98:2c:fc:32:ec:16:2c:c9:45:85:26:76:91:
da:cc:9b:75:aa:36:91:0b:17:07:90:e0:2d:fa:0d:1b:4e:79:
71:48:45:24:13:79:14:49:51:a2:1b:c8:eb:2c:64:fa:ca:e4:
87:d8:81:f9:e0:8c:97:59:33:c3:f0:69:56:4a:53:88:c7:d9:
fa:d0:03:58:c9:39:29:e6:1c:6d:53:f1:d7:d6:13:8e:9c:d2:
72:f2:f1:0b:90:e3:7e:fc:a1:5a:ca:f5:a0:b9:8b:2e:59:ca:
6f:a0:4b:14:2c:b7:ea:cb:12:5a:ac:aa:be:ae:e5:ec:b6:a8:
75:c3:63:ea:c8:f1:09:ec:90:d1:04:8f:7a:7f:b9:69:8e:df:
37:ef:74:07:1e:15:62:cf:d1:a9:09:da:ac:a9:45:91:4a:1f:
c0:d9:29:c0:10:64:a2:21:81:d3:c5:ff:9a:27:ef:62:3c:d5:
c5:5f:c8:2a:b3:ad:de:b7:aa:f3:2c:f9:9f:7e:01:20:52:84:
47:77:c2:d3:b6:a2:9c:da:47:e7:64:1a:d1:40:59:a8:27:35:
3b:24:d1:cf:24:be:24:7d:18:cf:d2:f8:2a:27:06:39:bf:e1:
6f:09:ff:20:48:c1:90:29:65:33:4d:33:f2:9b:5e:44:09:be:
f9:02:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:00:43 2025 by rpki-client