Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
File: FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft (raw, json)
Hash identifier: KMCOjPp9vgQohIPS5JDqX3wQgeZB2mx5tzc8YvykSTo=
Subject key identifier: 64:BB:4B:08:41:9F:B0:F2:5B:9A:D8:12:FD:D2:E1:3D:6F:BF:33:19
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Certificate issuer: /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial: 0194BD17CAFE0260B0F43EE9216502774E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl (hash: /IMZK1xu3fc8YRfIICGYWNiBjfZPHeGNyML/SgR+qxY=)
2: VUbDzg-9AyYevbePTrpEdiRqwN4.roa (hash: t4/eKGmP5PXlxUDXBzE6y3aXXoUIuyqOs01O0kBzip8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ca:fe:02:60:b0:f4:3e:e9:21:65:02:77:4e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=64bb4b08419fb0f25b9ad812fdd2e13d6fbf3319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:7f:2b:15:b2:1b:7b:ab:99:73:79:f6:ad:
5b:c7:cd:fd:b4:a8:5a:98:2e:a1:94:7b:50:35:9c:
03:2f:a3:a9:aa:12:29:64:2c:e2:5e:fe:a8:f1:ea:
53:1f:de:9c:fb:2e:cd:47:91:3a:9e:5b:11:74:ba:
8c:34:fe:09:0a:1c:4e:aa:8c:59:c3:47:e8:7a:b4:
be:84:58:ce:6f:13:7c:ef:b2:2f:a8:46:ec:0a:93:
c9:b7:a2:4b:0c:11:ce:49:4b:f4:08:5f:aa:30:3c:
23:98:0e:2c:7e:8d:3d:75:a3:13:07:bb:e8:52:6e:
a7:33:45:07:27:24:70:93:9f:66:bb:89:d5:96:15:
39:2f:92:63:a7:9e:d0:e3:db:3c:0f:ef:59:b5:51:
2a:f9:36:11:a7:d6:ef:a8:b8:7e:c4:36:54:b3:e4:
80:1f:53:97:e1:a1:65:fb:55:13:60:93:c4:69:9b:
9a:de:ad:bf:d0:a7:dc:08:c7:ae:ba:dd:d9:c7:32:
82:88:f8:7f:be:1a:51:0f:6a:ee:a9:56:1b:61:97:
67:de:dc:9a:e4:df:22:13:16:36:5d:72:cc:c4:2d:
de:5c:97:01:95:f7:a3:8e:cb:17:b5:04:54:78:1b:
32:a8:15:4b:00:dc:6f:0a:3c:06:ac:af:7c:70:52:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BB:4B:08:41:9F:B0:F2:5B:9A:D8:12:FD:D2:E1:3D:6F:BF:33:19
X509v3 Authority Key Identifier:
keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1a:73:1a:4a:ce:54:37:b7:28:e8:65:1a:cf:b0:da:7b:07:
5d:37:79:fa:b0:18:b9:74:ab:8b:d0:69:cf:f8:ad:ea:25:9e:
91:9a:da:c5:0b:62:b3:e5:ad:e4:6f:1b:54:ff:c0:c0:67:74:
9d:98:d8:1a:fc:7d:2e:73:ac:3b:e2:1d:5d:1e:b4:f6:13:44:
72:cf:cf:a2:ff:0c:f1:33:8c:8f:af:b8:81:f4:b3:6c:b9:e6:
e7:41:c8:55:33:52:77:00:2c:a4:0d:39:f0:62:98:b4:7d:4e:
fb:f6:d8:01:1e:38:33:01:18:1e:f1:15:d8:a5:e6:68:71:09:
cf:fb:48:0f:43:ff:b7:0d:b1:4f:a5:3e:3a:0b:65:59:f5:e6:
f3:c3:88:52:1c:0f:c7:19:2b:99:16:f4:79:03:c9:5e:64:b5:
b8:24:a2:d7:ed:dd:61:ed:78:7c:e6:c1:e5:af:68:f9:a8:e4:
57:72:cc:17:02:fd:64:9a:bb:32:91:f9:6d:c8:93:fe:93:8e:
22:fd:73:e0:38:94:0c:85:f6:6f:ce:a2:7a:2f:d2:7a:28:9b:
16:70:8f:ab:49:72:68:12:05:0a:78:78:27:33:99:86:21:b5:
8f:f2:7d:19:09:4f:53:fa:df:7c:a7:52:fe:aa:71:c9:48:be:
e3:18:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:51 2025 by rpki-client