Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
File: FPsZA22DNH9Rl66gLaSmlbkYlYw.mft (raw, json)
Hash identifier: mJAyuz6optasW0ZJQva3A26x1NfoYBQKGhD8RQjenWc=
Subject key identifier: 57:7B:2F:10:B7:35:CB:0D:F9:B7:F9:01:95:EC:EA:D7:93:FA:24:8C
Authority key identifier: 14:FB:19:03:6D:83:34:7F:51:97:AE:A0:2D:A4:A6:95:B9:18:95:8C
Certificate issuer: /CN=14fb19036d83347f5197aea02da4a695b918958c
Certificate serial: 0194BC3C384421A7990C7BB89C5D9F1EC4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
Manifest number: 02FE
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: FPsZA22DNH9Rl66gLaSmlbkYlYw.crl (hash: xlc8P8yt/hCV9pGKUiV0RO23AVOEusRKHz7oxgZ1rOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:38:44:21:a7:99:0c:7b:b8:9c:5d:9f:1e:c4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb19036d83347f5197aea02da4a695b918958c
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=577b2f10b735cb0df9b7f90195ecead793fa248c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:af:51:f0:42:88:a8:7e:eb:7c:72:53:99:
d9:3d:eb:ed:1c:9e:5e:e2:95:ca:ca:79:fe:b0:6a:
3d:b0:03:86:10:7c:9e:ef:98:d8:19:d2:9f:c8:8c:
61:0a:ba:4a:d9:31:9e:b0:36:4f:d4:08:4d:e2:d2:
d0:60:36:ce:e6:b6:04:75:13:04:94:80:62:e0:32:
5f:25:c9:a5:3b:0b:78:ad:c6:77:b0:0f:a7:ba:d9:
7d:22:60:9c:c5:a9:8b:3b:0f:8f:30:62:fb:4e:9d:
c4:2f:d3:9f:11:b6:ed:a7:73:09:84:05:7e:93:d7:
2e:1d:6d:19:53:cf:ce:4f:8d:55:78:48:3f:0a:4b:
13:8e:d6:a0:1c:9f:04:b4:db:03:41:71:86:4f:75:
d9:53:ce:d1:c8:9f:90:7f:29:1c:8b:9c:53:f4:c8:
49:b1:d9:51:bd:e2:b0:d5:e2:d2:ff:84:66:3f:33:
95:76:30:b3:c2:15:c1:29:bf:1d:49:ae:39:f3:ef:
d0:3b:38:98:f1:79:fa:32:7b:36:8f:52:62:72:59:
5a:bf:18:1b:d5:3f:81:df:6c:5b:b7:a1:f5:30:8c:
64:88:bc:75:fd:67:07:c5:8a:95:88:fa:71:ed:eb:
3c:e0:84:67:8a:99:88:28:b4:d2:f8:5e:74:86:e2:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7B:2F:10:B7:35:CB:0D:F9:B7:F9:01:95:EC:EA:D7:93:FA:24:8C
X509v3 Authority Key Identifier:
keyid:14:FB:19:03:6D:83:34:7F:51:97:AE:A0:2D:A4:A6:95:B9:18:95:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:21:d6:f6:4a:16:50:b8:6a:99:d9:ae:95:96:30:68:45:65:
f0:c6:1b:72:74:01:42:3a:fa:ff:2c:e9:27:1f:b3:02:59:f7:
0e:71:fc:8a:66:f7:db:52:d4:a7:fa:f9:4d:a1:ad:7f:c4:40:
87:2e:83:c3:f2:fb:1a:15:75:f4:24:f9:78:12:8a:44:7b:e9:
bf:e9:d0:aa:13:6d:be:38:65:44:e4:fd:23:82:21:25:6d:14:
73:d5:28:57:d8:46:8a:b2:af:ba:52:4d:31:a1:f6:b5:b4:53:
63:94:5d:06:2a:4f:7d:ac:fb:80:87:bf:32:38:bd:52:55:e9:
50:da:4d:48:86:58:f5:21:a1:b5:db:3e:aa:ad:8f:ab:a4:82:
fd:00:54:e4:0a:9c:d8:37:e6:4d:bc:7c:fa:06:00:d1:74:fe:
2f:7a:b2:42:0d:45:6b:2d:82:09:f9:42:c7:b0:7c:f6:f8:1c:
04:8e:25:e0:70:be:e1:9d:0b:37:83:36:6c:6c:05:ce:4d:4d:
36:2c:1f:ff:ea:30:b0:20:db:cf:42:ac:62:98:55:66:e6:5f:
70:f2:5c:40:c7:60:66:e5:b7:70:81:03:70:7b:dd:64:41:f7:
7f:7e:b3:5f:7e:d1:60:07:43:15:7c:71:21:8e:c1:66:46:a3:
ba:4e:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:17 2025 by rpki-client