Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
File: FRRT9ILNp468mWJdgLD_w2YPlfI.mft (raw, json)
Hash identifier: MKYCeOg2IWH369maBT1w4imjXNsik8cmbuLs1TV8F3A=
Subject key identifier: A2:22:73:01:53:4C:51:EB:DF:8B:DB:97:95:80:0F:58:51:BE:C4:8A
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial: 0194BD8573254F240F58625E6D47F5B2E2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
Manifest number: 143A
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: 1-lv-eyLkZwpQLTuJorHeKbcVMK8.roa (hash: tvNysXrHBHPZC5fymq/kQjA0jN47rS/9OLBH7USYU6E=)
2: FRRT9ILNp468mWJdgLD_w2YPlfI.crl (hash: F5euu0nB2mwofoHKPqQmSKbp19jXRyclzc+1i01uiFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:73:25:4f:24:0f:58:62:5e:6d:47:f5:b2:e2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=a2227301534c51ebdf8bdb9795800f5851bec48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:63:82:6c:c4:1f:3f:c1:b9:9d:1a:87:94:
9b:6c:a5:75:f4:3d:62:98:4f:2b:45:59:12:79:0f:
6b:76:46:d0:6b:f4:dc:b5:30:d7:55:cc:ef:d8:89:
2d:c5:58:d6:02:bb:6a:65:94:a7:91:8c:9c:53:f0:
43:94:ef:eb:ff:6d:7c:eb:86:d1:09:9d:b2:34:24:
24:05:c9:76:da:fd:43:07:dc:a1:60:f7:7d:82:b3:
f4:53:b2:4d:6d:ac:2e:37:6f:ef:c5:30:e8:1f:2e:
43:54:61:56:a2:de:f6:67:46:eb:71:c0:3a:b5:65:
b3:2f:a4:f3:2a:4e:38:7e:47:7c:4a:0e:a7:c8:ce:
7e:53:80:f0:c8:12:5f:b6:02:65:11:16:f6:e8:c2:
96:d3:7d:0a:b6:40:ff:18:b3:0e:74:17:dd:9a:52:
58:7e:59:ae:57:fe:18:ab:5b:70:a5:77:f4:7d:26:
af:59:18:f3:f0:32:7e:96:b5:80:7c:0b:09:45:ef:
c4:5e:6f:d1:0d:50:09:c2:e6:50:3c:a0:9c:49:3d:
9a:8a:65:bf:a1:66:a1:61:38:ed:35:37:31:e4:fd:
30:69:fc:e4:fe:c0:e8:c1:a6:d7:ed:eb:58:ea:53:
48:51:5b:e8:9a:9e:a5:e8:24:17:d2:d1:5e:bc:86:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:22:73:01:53:4C:51:EB:DF:8B:DB:97:95:80:0F:58:51:BE:C4:8A
X509v3 Authority Key Identifier:
keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:72:9c:d0:21:1c:9c:d0:32:06:75:7e:99:c8:29:da:ad:6d:
3f:33:62:33:30:11:a9:81:52:51:5c:75:d9:9a:16:5c:53:45:
34:19:f4:2e:05:6f:0b:e8:c2:0a:bd:18:3c:57:ea:39:c8:36:
21:a2:34:f1:6a:d5:18:1d:83:ff:33:6b:a6:93:a3:12:8f:8d:
74:8c:3b:62:b7:f1:c4:c9:21:c0:6f:14:cf:b0:2b:47:ef:be:
a6:de:c6:6f:6f:55:a9:a1:57:99:30:a9:2b:a1:49:00:5d:d2:
1e:4d:99:6c:58:4b:92:eb:87:bd:6b:fd:fd:6a:b4:4d:57:a8:
e2:23:96:71:31:20:4c:8a:e9:d5:27:0a:63:45:61:cb:f2:ff:
c4:bd:d7:77:12:6d:78:6e:2d:d3:c7:50:96:d3:54:44:66:a8:
00:05:aa:6c:96:d4:d5:97:01:36:b3:f2:28:48:5c:92:3f:80:
2d:98:7e:98:40:dd:5f:ba:45:63:19:13:47:fb:0f:04:ca:04:
d2:9a:54:59:9d:a5:35:a4:6b:ef:35:39:a2:7f:de:93:6f:11:
64:3e:d8:64:6e:84:20:53:dc:bc:71:45:4d:45:06:42:fb:8c:
df:c6:84:0f:b3:4b:f2:55:7e:ba:72:e8:1f:4c:7b:e4:97:b1:
2a:c8:04:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:48 2025 by rpki-client