Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/fBePTksOLCDmqIgCDI5tApopNJY.mft
File: fBePTksOLCDmqIgCDI5tApopNJY.mft (raw, json)
Hash identifier: eOI/BPK66HSJs9yweAx3jwhA8ymckxBtJAq7rPcj6/8=
Subject key identifier: 5B:E2:42:46:CA:04:75:1B:16:36:13:8B:46:AB:F3:6B:34:57:B4:3F
Authority key identifier: 7C:17:8F:4E:4B:0E:2C:20:E6:A8:88:02:0C:8E:6D:02:9A:29:34:96
Certificate issuer: /CN=7c178f4e4b0e2c20e6a888020c8e6d029a293496
Certificate serial: 01909A5F9E7F5495DF6916F8F278F8B7AA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBePTksOLCDmqIgCDI5tApopNJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/fBePTksOLCDmqIgCDI5tApopNJY.mft
Manifest number: 10FA
Signing time: Wed 10 Jul 2024 02:01:16 +0000
Manifest this update: Wed 10 Jul 2024 02:01:16 +0000
Manifest next update: Thu 11 Jul 2024 02:01:16 +0000
Files and hashes: 1: b40urTfVsJryFJOrMggXV73yp9A.roa (hash: IX6IO9qYSeHZc2bJ4b2uojgMBmwDK+xARRYu0xLKY8E=)
2: fBePTksOLCDmqIgCDI5tApopNJY.crl (hash: 3YLVAX7T+wpab5zM8ruYJyXEzXyHJ86TkzwzmYBQBxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9a:5f:9e:7f:54:95:df:69:16:f8:f2:78:f8:b7:aa:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c178f4e4b0e2c20e6a888020c8e6d029a293496
Validity
Not Before: Jul 10 02:01:16 2024 GMT
Not After : Jul 11 02:01:16 2024 GMT
Subject: CN=5be24246ca04751b1636138b46abf36b3457b43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4b:51:f3:68:02:af:86:a9:56:22:91:47:de:
6f:0f:1e:61:01:a1:e8:ea:28:aa:d2:4a:6f:c0:02:
8d:37:6b:13:fb:a9:91:bf:31:47:27:81:7f:23:c6:
9c:1f:0b:f2:1c:22:c5:80:1e:be:eb:8a:19:5f:52:
0b:0a:68:d6:84:7e:80:a1:48:4f:bd:2a:1e:0d:8e:
5a:d7:d2:ce:6a:f7:28:18:ff:22:d4:9f:53:cc:ab:
eb:96:9e:8b:ab:55:6d:ea:cc:b5:02:6f:50:70:00:
0a:58:39:4e:94:cc:86:23:87:6e:5f:8f:28:e1:bc:
0b:9b:43:91:cf:1c:ad:fa:10:a5:43:b5:aa:72:a4:
e6:e4:70:2f:be:98:da:e5:7d:42:ba:25:fb:34:b1:
a7:5b:bc:4f:44:70:a9:ec:02:45:61:09:21:34:f7:
3b:b3:41:dc:35:2d:46:ee:60:f2:a9:bb:b8:65:0e:
e9:73:8e:f6:64:cb:28:a4:8d:e7:30:1a:74:c7:ea:
0b:e2:df:b8:ca:8e:56:9c:02:2f:bb:84:a9:3e:f6:
94:7a:2c:f5:78:df:34:b4:65:28:3a:2f:75:41:46:
df:5a:f1:80:78:6b:e1:ed:33:f7:45:ae:0f:ba:0a:
ee:12:2a:49:13:87:b8:de:04:a3:4a:cd:ef:7d:7d:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E2:42:46:CA:04:75:1B:16:36:13:8B:46:AB:F3:6B:34:57:B4:3F
X509v3 Authority Key Identifier:
keyid:7C:17:8F:4E:4B:0E:2C:20:E6:A8:88:02:0C:8E:6D:02:9A:29:34:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBePTksOLCDmqIgCDI5tApopNJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/fBePTksOLCDmqIgCDI5tApopNJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9365e0-aec8-4384-9bd7-6c232ae7b5bd/1/fBePTksOLCDmqIgCDI5tApopNJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8b:39:73:e2:cf:d2:06:08:79:40:dd:24:ff:67:db:90:b0:
e4:44:e9:81:1d:86:c5:9d:0a:73:b1:f1:2d:34:6d:b8:1a:f0:
bc:45:73:e9:d0:a7:23:38:fc:c1:39:61:74:52:7d:10:9b:ca:
27:89:ee:6b:a9:fc:89:7a:9f:95:dc:47:f0:56:24:f3:88:e8:
b2:b5:43:38:0d:f0:0d:f2:9d:8c:fa:0b:1d:3d:3e:35:ba:b5:
3a:6e:77:37:e6:8c:70:d7:bb:23:c3:3f:bc:bb:1d:b9:d6:23:
14:b1:1c:8d:5d:40:9b:a0:e4:cd:d6:88:93:ee:91:5b:7d:1b:
69:8e:1d:dd:8c:9d:87:41:ac:5e:9f:82:1f:55:cb:fe:92:17:
48:d2:ee:18:b3:d2:dc:83:26:b9:78:2b:87:2d:f5:b9:bf:c2:
73:5d:77:48:67:21:bd:19:75:ba:32:9b:b9:27:d1:be:e2:28:
a6:ee:53:d7:38:56:69:44:ce:43:41:82:cc:ca:af:38:32:15:
81:b2:c3:24:15:8d:02:54:51:45:d1:d6:db:73:5e:4c:af:98:
b5:b6:5b:84:8f:7a:08:8d:a7:a1:7d:8e:e9:a1:71:54:69:05:
be:ce:9b:ff:53:2f:50:27:5c:ed:44:49:74:67:e9:60:6c:c8:
19:40:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:55 2025 by rpki-client