Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
File: FPwSEe469lf8lPkvoDCd5sbJQG4.mft (raw, json)
Hash identifier: oit04M3Mxft5V57CW1vUwrN3rmiyvLWPbH378EuCdJg=
Subject key identifier: 82:1C:A9:2D:A2:99:4A:89:D9:88:9F:17:8E:66:D8:8A:01:35:69:FA
Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
Certificate issuer: /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Certificate serial: 0194BBCE5EA1A58899A11F816844C56A603F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
Manifest number: 0ADF
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: FPwSEe469lf8lPkvoDCd5sbJQG4.crl (hash: nEroMf1CkoD3j6LSKFQP3U8gk3gO51bJ1TjavUQkryI=)
2: aJypmqoFfKbNLA7QelNPg-kxzbw.roa (hash: AlnIanfnH1GwrGuXXqK+U4eJyego+t2Sw5napesUvxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5e:a1:a5:88:99:a1:1f:81:68:44:c5:6a:60:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=821ca92da2994a89d9889f178e66d88a013569fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:dc:2b:d9:73:7e:84:85:25:f5:db:1d:12:
a6:d8:90:c8:c1:5a:71:02:bd:82:95:c9:c6:1e:56:
52:50:16:3f:82:f5:a3:22:e2:43:4d:66:48:05:52:
1c:81:cf:e6:ae:db:0e:61:f9:8b:ea:f3:72:74:93:
a3:21:a8:ea:9c:af:ca:72:44:42:e2:aa:7c:ff:8c:
37:45:48:f6:2e:c9:8f:a5:20:38:fe:3f:b8:61:f7:
8f:d3:ee:e6:0c:13:be:d0:e8:c2:34:47:bd:f6:ce:
97:c7:58:ff:68:be:90:86:34:a4:62:70:30:be:d6:
27:71:1c:32:3a:f2:0a:19:c2:7f:92:d3:89:3c:a5:
c5:2b:33:b3:f5:be:5f:d7:c0:42:3e:15:5d:21:96:
f9:0e:f0:3d:79:12:a5:2b:40:b1:f7:f5:63:da:07:
fd:e5:4f:8c:f5:65:16:6c:80:ca:eb:41:cb:74:8d:
ad:0c:9c:e1:c9:ef:32:63:fd:76:fb:80:44:2d:c9:
a4:e1:db:99:0f:ba:80:33:d0:a3:81:0a:d5:e4:f1:
8e:1e:50:6f:d0:76:4b:26:0a:0f:de:07:9a:a7:3b:
cd:87:7c:67:9b:83:a5:44:10:4d:d3:b7:ba:50:64:
09:6a:4d:87:3b:4c:14:e1:06:93:f9:48:6d:6c:e2:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1C:A9:2D:A2:99:4A:89:D9:88:9F:17:8E:66:D8:8A:01:35:69:FA
X509v3 Authority Key Identifier:
keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e4:fe:75:fb:e9:b3:7a:0b:d5:03:30:87:84:59:af:30:03:
49:49:13:68:ba:8a:29:a0:34:e4:ca:31:e0:4e:0d:64:37:29:
66:bb:f6:19:42:bd:c5:d5:d2:d3:96:4d:dc:4c:7b:58:28:af:
8e:58:a0:a9:9a:57:12:39:07:1e:12:d3:77:7f:cc:4b:fb:81:
ad:55:72:5d:33:05:4a:2b:a9:94:7c:a8:41:52:b5:70:ba:4d:
2c:20:a2:ab:90:47:94:5e:47:86:c1:04:e0:07:14:87:4d:9f:
9a:32:77:e2:b8:42:4e:aa:dd:36:8c:d3:43:78:96:56:6a:e1:
bb:e6:9d:5b:02:16:48:e4:15:03:7f:3d:e9:9c:8e:29:84:c2:
59:4f:4b:16:75:c0:7c:97:38:40:2b:ac:8d:e8:dc:0c:f9:8c:
ac:34:98:3e:66:22:f7:e2:1b:dd:dc:59:94:94:e7:13:cd:43:
c4:f6:46:fc:e6:ec:9a:c7:6f:b7:57:99:72:bb:ba:14:47:1e:
5f:5d:9b:4f:e9:55:a7:5f:70:f8:d7:eb:26:7b:a1:bd:51:64:
93:b5:f0:88:5f:bc:d1:39:f6:89:a9:09:fe:3b:b6:73:14:a2:
02:c7:0d:ff:43:fb:5c:ad:c2:68:ce:4c:10:30:49:f1:1d:37:
1c:e6:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:53 2025 by rpki-client