Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/fKOKX2RlNf4AX30T3koqUPTm5II.mft
File: fKOKX2RlNf4AX30T3koqUPTm5II.mft (raw, json)
Hash identifier: J7jiD18rirRTRXSir1ymntAzxW1sCOL65yLkX5CBeHQ=
Subject key identifier: 30:EF:BB:13:51:E3:EE:47:9F:E7:3E:76:6E:06:46:21:51:64:A6:7F
Authority key identifier: 7C:A3:8A:5F:64:65:35:FE:00:5F:7D:13:DE:4A:2A:50:F4:E6:E4:82
Certificate issuer: /CN=7ca38a5f646535fe005f7d13de4a2a50f4e6e482
Certificate serial: 018DAA107C644DDAB487AE6D5EB8AAA85BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKOKX2RlNf4AX30T3koqUPTm5II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/fKOKX2RlNf4AX30T3koqUPTm5II.mft
Manifest number: 1081
Signing time: Thu 15 Feb 2024 00:00:23 +0000
Manifest this update: Thu 15 Feb 2024 00:00:23 +0000
Manifest next update: Fri 16 Feb 2024 00:00:23 +0000
Files and hashes: 1: DfxRMTZeU_vcIlKHRbQeq0534dU.roa (hash: VK8lY8GyecRktPxTHoPlzgDFUpbnJBByPMQzZ3FihZg=)
2: fKOKX2RlNf4AX30T3koqUPTm5II.crl (hash: 2DDHyN+ejEUTys1ckdSP5KsyLakCNmk3iuN7or5k4sY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:aa:10:7c:64:4d:da:b4:87:ae:6d:5e:b8:aa:a8:5b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca38a5f646535fe005f7d13de4a2a50f4e6e482
Validity
Not Before: Feb 15 00:00:23 2024 GMT
Not After : Feb 16 00:00:23 2024 GMT
Subject: CN=30efbb1351e3ee479fe73e766e0646215164a67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:a8:aa:1a:29:d9:ba:51:c9:2e:7b:31:ed:
0d:5f:3f:20:24:ee:61:f9:75:8d:43:e9:0d:63:2e:
34:72:04:63:c5:6c:1e:c1:c4:80:b4:e7:3b:c3:81:
e5:05:4b:1b:20:77:64:36:b5:b7:47:1b:e7:55:7f:
7f:6a:02:11:0e:cd:2f:6f:0f:ae:44:3a:72:de:ed:
ca:7f:d4:70:25:4f:af:ed:a4:25:96:3c:df:7a:e2:
34:6f:90:ec:9e:ca:e5:64:ee:20:e9:37:ed:07:48:
82:cb:b9:76:02:68:72:d8:e7:97:73:d9:23:b1:7e:
83:78:82:a0:55:cd:73:4e:95:de:21:b1:2f:69:b6:
07:54:34:eb:c0:47:ba:4c:3e:73:24:17:61:ae:0e:
71:54:37:c7:98:5e:90:93:15:93:57:93:f6:6e:45:
4c:e1:ea:46:9e:bb:73:ee:36:95:6d:7b:dd:c3:42:
18:95:a5:88:e5:7d:de:fa:0f:b9:54:f0:80:c3:6d:
29:5e:03:61:88:8d:ce:65:3f:53:07:77:19:49:d5:
e9:e9:71:f5:58:ce:9a:c1:2f:74:80:97:8e:e0:c3:
f0:b1:c8:69:9d:f9:b5:58:d4:96:f3:85:9b:8c:9c:
02:ae:cb:40:a9:92:fe:a7:1a:dd:17:45:97:a5:72:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EF:BB:13:51:E3:EE:47:9F:E7:3E:76:6E:06:46:21:51:64:A6:7F
X509v3 Authority Key Identifier:
keyid:7C:A3:8A:5F:64:65:35:FE:00:5F:7D:13:DE:4A:2A:50:F4:E6:E4:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKOKX2RlNf4AX30T3koqUPTm5II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/fKOKX2RlNf4AX30T3koqUPTm5II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/fKOKX2RlNf4AX30T3koqUPTm5II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:61:25:3c:84:b3:fa:67:f0:f3:9d:41:9c:2e:1b:cc:d3:92:
db:e9:67:22:3b:f8:2e:db:36:d2:2c:a9:e0:10:a3:25:ef:85:
fc:6b:f6:14:71:f1:e7:67:d3:83:9c:4d:c6:97:52:3b:05:c6:
a6:6b:34:95:cb:a7:13:bb:39:e8:28:88:80:3c:4d:1e:ff:ae:
cc:0d:bd:a4:0d:ee:09:87:33:f8:83:64:e5:91:ce:43:ab:42:
6d:24:da:e1:c5:3f:bf:0a:19:29:94:6a:db:2d:a9:00:33:12:
91:d7:df:9c:5d:d1:65:f0:33:b4:39:90:0f:d4:01:ee:77:f4:
61:19:5e:f4:28:1a:e9:e6:f4:94:2a:21:16:6c:80:6d:80:87:
ec:22:19:06:ca:ad:ac:00:c6:8d:14:3b:30:70:de:c7:49:97:
ad:04:ce:da:ec:e1:12:db:d5:53:1d:a0:84:47:d9:53:fc:a2:
86:77:82:31:d4:cc:16:e7:01:f7:8d:95:82:ac:8c:c2:71:48:
60:3c:a4:04:ac:97:89:a0:12:d5:9e:90:a2:d8:2a:f1:7d:48:
3a:af:e2:25:3f:cf:0a:21:1d:55:b0:48:07:2e:03:2d:cb:b5:
36:c4:73:13:7b:71:66:95:c0:83:33:d2:d6:67:d7:34:d2:c5:
c2:fd:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:52 2025 by rpki-client