Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: 19zdyL148DboM2KqwFdIA7tG5zaWbTylLFNzDhay92U=
Subject key identifier: A7:AB:6C:37:B9:03:AF:18:9B:0B:3F:2B:64:7D:62:86:BC:A6:AD:4A
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 0194BC3C1429B0222FC3ED96BFACA0801246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 0603
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: 8BO+7a2rq+4yKvHmaFvG43scD4VZ/f9mtCdAorgTCPo=)
2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:14:29:b0:22:2f:c3:ed:96:bf:ac:a0:80:12:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=a7ab6c37b903af189b0b3f2b647d6286bca6ad4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:49:f0:07:d2:d3:59:26:4e:96:2a:dc:00:
0a:3b:cf:e3:0a:48:8e:38:02:de:1b:1f:c7:97:c2:
c4:aa:fe:b4:8e:c4:ed:c5:a7:78:17:65:33:d0:4f:
f2:8a:22:bf:80:2c:c3:76:21:ae:85:e2:bd:ec:eb:
79:ef:5e:b7:2f:16:2b:ff:5d:60:2c:55:c1:28:7a:
12:68:e0:2b:bb:cd:37:b2:e4:45:42:7e:79:67:ea:
b1:43:ee:26:64:a0:2f:30:62:77:84:a0:1c:dc:01:
ac:33:43:7c:1d:4d:b8:19:49:1c:8d:49:29:f3:03:
ad:e3:2a:0c:10:48:d2:0b:e6:9b:6c:01:46:8e:cd:
41:4e:0c:09:07:9f:89:84:1b:bb:b9:69:8f:21:10:
50:2f:b7:92:3f:36:92:4e:51:52:4c:a1:5f:3e:19:
7f:dc:6c:48:68:69:a0:40:d1:74:92:db:41:36:05:
96:35:24:96:35:8e:ef:51:be:46:d3:8d:1d:08:c0:
7a:ac:77:fd:30:1a:39:14:56:6b:ea:d9:48:64:93:
87:d3:b7:67:6b:5f:66:3a:d9:6b:20:1f:e1:b4:9b:
74:32:99:5c:40:e9:3c:e7:8f:58:4d:a1:5c:5a:95:
49:48:c7:cf:56:f9:ab:09:cf:9a:a7:7c:70:cc:5d:
7a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AB:6C:37:B9:03:AF:18:9B:0B:3F:2B:64:7D:62:86:BC:A6:AD:4A
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6b:91:77:17:30:52:44:d1:f0:93:9c:84:31:9d:15:76:72:
d2:4b:28:aa:e6:3b:67:b4:c8:c3:6b:a9:ae:b6:df:c4:db:46:
82:0c:80:a8:c6:34:e2:49:39:a0:46:68:d2:9f:a0:9b:90:69:
db:69:fd:be:0b:b6:84:df:13:78:d5:5e:b7:e2:c3:40:28:ee:
ed:01:9e:89:67:2a:1a:3d:38:dc:1c:fd:76:10:80:b0:4b:f3:
31:8d:11:92:33:10:2b:ce:9f:1f:c7:2e:5e:f3:1e:d4:9e:47:
07:08:bb:53:76:1c:ce:bd:ce:19:a5:99:cd:db:1f:41:f9:10:
09:b7:69:d2:66:5f:fe:d7:ca:bc:41:5d:bf:3b:23:e0:37:45:
93:b6:76:e9:c9:08:cd:b6:64:a9:9e:12:09:50:ad:d9:0a:46:
93:2b:31:13:a4:fa:12:73:99:52:ff:74:b6:55:f6:ff:97:50:
9c:d5:d3:21:d7:b8:52:7f:b2:3e:4e:38:1e:4d:61:ea:16:15:
fb:ef:ba:7d:db:3f:51:ca:86:c1:fd:69:bd:b2:69:29:7a:19:
7c:74:9c:3f:16:c8:20:b7:28:ba:ed:2c:41:d8:b9:9f:03:53:
9a:e5:94:7a:96:57:28:f8:77:9b:da:31:f1:5b:f3:1a:b7:23:
91:14:e4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:19 2025 by rpki-client