Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File: Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier: Og+0qUX857KvXGuHEtYcPxs2VB+6wFkUr9M4vmlcEO4=
Subject key identifier: 28:7E:90:86:B6:37:5B:4C:6D:80:A9:0B:BF:B5:82:26:62:9C:85:E9
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer: /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial: 0194BD857C0D8ED93F9C1815A73FB9A52923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number: 025D
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: inSQHzMR7hblPCb9yCGx0vf8xMgAkj5JD+xuWW+TOKA=)
2: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (hash: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7c:0d:8e:d9:3f:9c:18:15:a7:3f:b9:a5:29:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=287e9086b6375b4c6d80a90bbfb58226629c85e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:1f:ef:55:72:f0:66:25:23:50:9b:34:92:
ba:b7:ff:1a:d9:a7:ba:01:5c:f2:9c:a3:5e:bb:81:
d1:22:9c:60:a7:17:ed:ef:2a:67:8a:df:44:93:0c:
5f:d7:d3:5b:cd:5d:7b:d5:c8:8e:73:c1:ec:dd:73:
19:e3:aa:ba:c0:c9:26:80:94:1b:e5:5e:a6:56:8d:
3f:7b:89:85:52:fe:51:56:58:1c:9a:44:a9:75:33:
64:c7:5a:89:b6:b9:a6:4a:16:5d:4e:14:f3:be:a6:
84:8c:26:e8:38:c5:ff:b4:a3:3b:e7:ae:44:0a:67:
dd:24:5e:36:93:5b:18:b2:7e:28:ce:00:e0:9e:6d:
9c:25:75:5c:02:54:43:e6:f9:45:c7:5e:3a:4c:9a:
a2:5e:40:36:e9:de:12:68:a6:5b:89:60:fd:b7:be:
0f:94:82:0d:fa:29:f7:b7:a0:ea:13:6c:41:5f:8a:
09:bc:7b:66:dc:bf:bc:c0:1d:66:70:79:61:03:0e:
37:85:9f:30:84:8a:4b:44:10:59:3f:2a:b8:9c:18:
8c:d1:b4:62:06:ee:f3:e3:cb:dc:f8:86:f7:38:9e:
c7:33:cc:f3:77:96:13:2f:33:d1:00:3a:5a:bb:5d:
a9:ea:31:75:ac:48:ca:85:14:63:23:9d:79:a4:6c:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7E:90:86:B6:37:5B:4C:6D:80:A9:0B:BF:B5:82:26:62:9C:85:E9
X509v3 Authority Key Identifier:
keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4a:84:e6:43:dc:e2:af:16:81:b7:6b:27:d7:c5:6f:22:0f:
07:b9:7f:9d:b6:0b:3e:57:25:70:7f:ff:97:e9:eb:a0:5f:ec:
60:15:47:31:31:4d:31:c1:35:bf:d1:02:d9:09:c4:3f:ca:66:
f0:f8:be:9a:03:88:c5:bc:52:81:73:84:50:6c:88:50:56:97:
9b:ac:0c:b6:11:46:99:cf:48:60:7a:67:a5:39:f6:5e:2f:d5:
e1:9d:a5:9b:ff:b5:67:a9:c7:bd:f7:14:63:3d:bc:ca:8d:79:
75:79:ae:b8:50:f9:fe:41:b0:25:a1:2c:12:8b:0b:fe:f6:fd:
b2:4c:02:ac:32:75:90:17:68:23:6b:ac:f6:c8:8b:1c:15:d5:
19:1a:c2:86:39:73:af:40:69:bc:d5:d6:6e:10:dd:c7:f5:04:
d1:63:04:63:8d:4a:8a:1d:e8:16:bd:00:92:31:7b:96:11:3c:
c1:ef:60:7b:46:83:b1:4c:30:fe:f1:c9:5d:31:51:cf:34:cf:
08:f4:a7:fc:19:86:d1:97:fc:63:51:e7:bf:6a:06:f9:56:73:
f9:71:50:3c:b4:eb:e7:b4:d5:b2:1e:1d:b5:c9:87:8a:1d:3f:
9d:4f:07:be:58:31:8d:e7:b4:2a:5c:4e:dd:92:66:5d:81:2d:
c4:da:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:37 2025 by rpki-client