Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: zhsoccPJlxSR23qpZLtWxKnG0n5vw0tqBQzP1MPieDE=
Subject key identifier: 6E:35:E1:9C:50:51:8A:F1:CA:79:C7:32:8F:20:39:1B:9D:DA:40:EE
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 0194BD4E5AC54732A535AEE57FD44979CCBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 054A
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: NAJ6FO3DrQR3ERPMCysmmOX2N22enqtGudQg/PYAYhA=)
2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5a:c5:47:32:a5:35:ae:e5:7f:d4:49:79:cc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=6e35e19c50518af1ca79c7328f20391b9dda40ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d8:0d:38:57:d1:91:d6:0d:ac:2a:12:e8:c7:
45:48:9d:f7:21:04:4e:7f:56:29:30:55:1b:b2:11:
0b:30:66:81:ed:18:46:d1:58:55:36:ab:bc:88:e4:
60:87:c3:02:6c:11:08:13:1e:72:5a:01:20:1d:20:
ae:57:32:42:eb:9b:52:5f:aa:10:6b:be:42:27:22:
81:28:c5:44:00:b3:e2:b4:23:05:fc:d7:d7:0f:8f:
c9:65:08:90:ba:32:a2:96:c9:3c:5d:c4:43:44:66:
79:c9:7b:6e:55:93:0e:35:7d:e7:b9:83:85:e6:41:
39:94:bf:43:65:79:bd:a0:41:4a:3d:c5:05:a2:99:
72:04:53:5d:b2:77:b7:97:f6:f1:b2:7d:36:e2:b0:
3a:83:13:f0:7b:d8:2b:f3:da:e6:e3:02:bf:d3:5f:
b4:2e:0f:49:b0:34:e3:34:64:85:94:11:40:ea:18:
9b:13:51:e0:39:7b:b7:ac:24:67:c6:e9:a6:45:54:
03:14:37:26:9b:d1:6a:e6:ea:5f:23:33:ba:c4:8f:
9d:05:61:02:63:5b:24:94:2b:18:c7:4b:d4:6e:6e:
ef:e5:ac:d9:0d:fe:c9:65:40:40:90:a4:8e:72:6a:
49:04:49:c4:51:62:1b:4f:25:8c:0e:0f:b6:8a:da:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:35:E1:9C:50:51:8A:F1:CA:79:C7:32:8F:20:39:1B:9D:DA:40:EE
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:52:f6:17:8d:cd:dc:c3:71:6a:29:fd:c9:0e:1d:16:05:95:
67:9e:41:06:db:79:80:24:8b:7d:17:f6:22:f5:cb:2d:41:62:
ed:63:b6:2d:e8:71:3d:df:a7:28:1e:f1:27:42:59:a5:aa:a4:
a6:00:ec:4c:49:38:74:fa:ca:53:5f:76:20:50:aa:df:9b:04:
d6:8f:23:dd:08:87:c1:c5:53:a7:99:a0:09:73:26:86:72:1e:
a7:3b:56:43:8f:b3:ec:90:a8:40:3e:9e:e3:b6:0b:8b:c5:8f:
9f:8a:ad:5b:f2:8a:77:25:9a:cd:8c:a2:46:ba:50:80:5e:14:
44:0d:e3:71:a4:41:c3:2e:ec:a0:b7:27:92:5b:87:b8:0f:1d:
3f:2e:3e:0b:e9:86:6f:fa:22:81:81:75:6c:4e:28:d5:95:e8:
42:d2:10:00:ff:b7:0e:e8:69:81:c5:70:32:83:77:c6:fa:e5:
83:32:70:13:4b:d0:23:9b:68:71:30:74:d9:09:4c:e3:31:6e:
9d:dc:bc:63:06:1e:4c:4d:1a:4c:03:60:a3:ce:8e:e1:1d:70:
e1:46:b8:8a:97:cc:f6:d7:57:c4:65:fe:5d:c3:ac:66:c3:82:
ca:a0:dc:e1:16:e1:6c:b3:bb:96:c0:e7:0a:2d:93:aa:33:eb:
a5:f6:1f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:24 2025 by rpki-client