Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
File: FYlivF2icS8gj8ixXr3CRq9Mvs8.mft (raw, json)
Hash identifier: vD8HrihReq98V/03IIp5aatszjHESFBoydQqw4Oa2Js=
Subject key identifier: 46:1E:90:A6:AB:54:55:6F:F6:0C:99:D9:84:B2:C9:FE:05:3A:8E:55
Authority key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
Certificate issuer: /CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Certificate serial: 0194BCA9AE05A174A715B1ACDAC911165314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 7yUkmk2a1THyX00hTlndTIVmtLc.roa (hash: aTNg1uSoSZtKZaAe8w+QZyL4kY8mBpAFfSDQeH8QdZ0=)
2: FYlivF2icS8gj8ixXr3CRq9Mvs8.crl (hash: 4oYHHeiIFY/ONw9Wn/8+YGfy2ZFF16HO51wNOdtS8iU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ae:05:a1:74:a7:15:b1:ac:da:c9:11:16:53:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=461e90a6ab54556ff60c99d984b2c9fe053a8e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:58:12:dd:88:b4:b8:ba:2f:0b:d2:25:f9:
4f:49:53:a1:2f:ac:8d:fc:7c:24:b1:b3:d0:86:9b:
89:1f:8b:ff:6e:92:b9:f6:5d:79:c0:3b:69:54:c4:
13:23:95:ce:18:cb:59:cf:20:fe:81:00:37:c4:23:
a8:be:f8:e3:cf:ac:2b:3d:dd:43:5d:68:8f:fb:0e:
ff:39:ad:8c:7b:95:0a:87:69:6e:fe:60:f6:63:39:
01:88:47:64:da:8e:f1:52:f9:25:16:8e:ee:91:f0:
70:94:20:ea:e0:b7:e4:e7:76:c2:49:13:ca:ba:83:
fc:24:7e:82:00:4e:ec:8c:fe:ca:89:61:bc:e0:bb:
56:7c:70:c3:eb:70:63:9f:7a:f1:a9:9b:26:ad:0b:
ff:42:a9:a7:2d:16:30:1b:66:ab:89:48:96:69:d6:
28:fd:86:ea:22:53:6f:e6:0c:24:c0:9b:84:6c:b0:
6e:c8:29:ee:e2:ed:e3:4b:1e:22:4e:2d:2a:0d:c2:
a4:1f:cb:ac:42:14:59:c8:48:34:20:94:bd:da:c2:
0e:3b:91:49:95:26:c4:64:ff:ed:c5:17:b1:e4:ba:
bf:2e:70:4b:e0:bc:d7:5c:65:91:1e:17:16:2a:89:
44:8b:10:2d:85:5e:c1:56:0a:da:8f:96:d5:43:65:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1E:90:A6:AB:54:55:6F:F6:0C:99:D9:84:B2:C9:FE:05:3A:8E:55
X509v3 Authority Key Identifier:
keyid:15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ab:66:e4:0d:9a:42:45:f1:bf:4c:b6:94:05:37:cb:2d:bd:
63:f0:b0:f9:e8:4e:68:16:4a:08:7c:53:bd:6d:69:10:e8:8b:
7c:95:f5:90:23:2f:69:8c:86:71:d7:e2:15:16:49:c7:9f:ee:
e4:71:e1:7a:01:2d:f5:d9:12:0f:25:b1:35:de:86:07:99:aa:
ef:a1:e2:fb:b2:12:5d:21:ef:d4:34:fa:76:99:9b:b1:ee:4b:
13:9b:09:2d:52:a7:93:b8:ae:d3:e6:1b:e2:a3:69:29:7b:4c:
48:ee:ec:8e:fd:4b:c5:09:c4:a0:e2:7a:f7:f0:54:02:15:ae:
a4:f2:63:b3:89:ad:c5:88:45:68:97:e0:12:8e:72:91:7b:22:
48:f5:40:1a:da:27:97:da:e7:d2:4f:cf:ff:35:37:77:26:80:
7c:e2:c3:98:f6:50:a8:04:8d:10:74:2a:7f:1a:b7:73:62:b1:
87:a8:01:a5:51:aa:c8:d1:7d:61:ae:74:24:e0:32:0b:0f:bd:
76:e8:a2:d2:70:b4:a9:bf:28:5b:13:d5:82:b7:40:f4:15:a1:
b2:7d:49:7f:9f:45:11:2b:2f:cb:cb:4d:dc:7e:d0:12:1f:27:
5e:38:ba:13:d8:51:d4:0c:ca:e5:02:07:6b:1c:5f:ff:a9:13:
7b:d8:4a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:36 2025 by rpki-client