Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File: FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier: XDTFH1u2DkZBRrTRSEEfijzWKvpNFQ4YNn7dDKbZTxI=
Subject key identifier: 0B:F1:8B:CA:0C:9B:C7:6B:EA:84:1C:81:EE:FE:61:EB:B1:A4:0C:BD
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer: /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial: 0194BC051D40BCBE6DC365BF0CE112CA13F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number: 02F9
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: 5ncImmU1c4UWVUleG+f9tPf600X8BdyRHWijCF12mbM=)
2: o8S7tkvunun9ckbw4BTp3xF4qOg.roa (hash: m5zy4GD9yIfkM+gnTmUFCt3YRr3WAaO9EejYBf8+Bnk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1d:40:bc:be:6d:c3:65:bf:0c:e1:12:ca:13:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=0bf18bca0c9bc76bea841c81eefe61ebb1a40cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:57:70:a9:1b:e6:69:dc:85:3d:aa:f2:7b:
6e:ba:3d:da:62:7c:ba:ea:8b:38:87:f8:04:15:c3:
17:7b:0a:71:1c:06:95:f6:28:92:0d:50:a9:a5:6b:
0f:8c:39:00:87:17:e1:33:8d:90:23:b3:6a:8f:93:
1b:ba:45:ca:5e:c3:e6:da:96:44:85:27:f3:38:0e:
ca:03:8f:c1:f5:af:89:3d:98:b4:b1:c8:11:fb:07:
13:4d:15:19:9b:1a:09:4a:36:cf:0c:15:3d:0a:72:
2d:58:c4:6d:02:0f:a9:6a:1e:a9:31:71:7c:8b:b7:
5e:32:47:77:23:f9:e4:f6:6c:ba:89:bf:b0:f2:c2:
d6:ea:6d:37:20:1a:25:8b:47:c7:95:84:be:a2:e3:
da:02:14:ad:c8:b9:da:d4:2a:65:77:cc:a6:8a:65:
e2:1a:ef:53:cd:22:4c:4c:7a:4a:bf:c1:7e:d3:b0:
89:58:ac:b9:77:9f:d3:5f:b4:f5:c0:cf:a4:22:1a:
d1:00:af:d1:bf:a4:1c:ac:01:d1:d1:60:07:ce:26:
d2:a0:7e:5c:50:4c:f6:cf:df:eb:6b:18:26:b6:51:
d7:e9:93:c0:e4:63:9b:05:77:06:5a:13:56:45:9b:
93:9e:53:89:07:5b:0e:d1:3f:f9:46:ef:dd:7a:ce:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F1:8B:CA:0C:9B:C7:6B:EA:84:1C:81:EE:FE:61:EB:B1:A4:0C:BD
X509v3 Authority Key Identifier:
keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ec:64:69:76:e1:f6:03:1e:f6:4e:58:23:17:19:14:d0:ce:
dc:9a:7d:c3:7a:4f:36:47:77:ff:4e:7e:ce:76:e3:07:38:8d:
0c:5c:b0:c6:df:64:40:5f:cf:27:2a:db:45:f6:c4:1e:47:6e:
93:92:6b:4f:3b:9a:cc:6b:31:98:8a:4c:24:dd:8e:d7:e2:87:
ec:d3:07:a9:5a:e6:0d:3e:12:d3:00:90:b0:a6:55:3c:dc:b5:
d8:37:9a:5c:20:a4:d6:9d:c5:0a:f4:e5:37:ee:47:28:1b:16:
ca:b0:0a:79:1c:57:69:b6:69:b9:00:57:a2:a1:90:d9:0f:ed:
b0:d9:d0:ab:b1:9f:d6:bf:49:82:aa:65:f3:ed:f8:40:b5:38:
c3:11:08:00:90:30:c8:ab:f9:e5:55:3a:cf:90:f0:3d:9c:50:
cc:69:45:9c:28:d7:87:5c:e6:09:74:65:c1:2d:78:e0:19:cb:
bb:3b:a0:f8:cf:a1:ce:58:0a:06:79:cc:1d:ae:f1:3b:a6:41:
fa:5a:d4:76:5a:64:44:16:82:c2:55:43:9b:e7:dc:ea:4b:bd:
d3:29:30:c6:b1:ca:71:d0:ff:8e:0a:dc:f9:aa:d8:2e:2d:3d:
7c:4f:a8:7b:66:c1:eb:19:a4:a9:7c:a8:7f:06:fa:fa:95:64:
9b:f9:63:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:21 2025 by rpki-client