Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: /a/WiSBIHWAdWxNSVmBij7zS1uShI6DqfZ566tbarZY=
Subject key identifier: 12:FF:10:2E:BD:C2:C0:33:19:80:44:FF:BE:AD:76:A2:12:0C:B6:5B
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 0194BBCE48499189ED83F88C5035DB21D9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: Q2msmwyEn870I5QJMDG2e+9zeAzhDzxgjVmrMRX/DeE=)
2: O5ilAJzp4Fiady6OzW8y6F-h2tk.roa (hash: 5NXhQBooraxn6sup0YPIQ8njZP6A7m2bDKaKDs+Nqts=)
3: UCdqxPzxhD6DcRM-eP19XUBCeDg.roa (hash: +MkUD2KfwkVZKPE2Uj5E5ZJgULx673CHDKC9hTQh5dw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:48:49:91:89:ed:83:f8:8c:50:35:db:21:d9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=12ff102ebdc2c033198044ffbead76a2120cb65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:c9:ba:50:9f:4f:ce:88:84:19:56:2e:c9:
d2:d4:ed:b4:43:92:12:73:31:96:84:9c:cc:46:05:
4c:05:9b:f6:d4:25:6a:9a:07:cf:0d:07:64:95:dd:
08:5b:4c:67:4c:8c:84:32:c4:01:07:cf:ce:ba:90:
2f:50:3a:7a:1c:ec:8d:6e:8d:94:30:38:d3:c5:19:
03:98:07:ce:33:3e:fe:38:63:04:1a:63:e3:cd:73:
93:78:98:6f:38:74:09:91:66:62:eb:0f:92:f5:ea:
c1:ee:f5:12:37:12:83:5f:2a:1b:e4:cb:ea:bb:4a:
58:27:17:c5:98:9a:ee:a4:07:8b:4d:1e:d3:40:6f:
64:e7:9d:81:b7:59:85:1f:b5:3d:5d:21:1a:99:1a:
1e:6f:38:75:2a:4f:67:71:51:26:2d:c2:5a:5f:86:
df:c4:f7:fc:e0:de:81:2e:d7:15:34:c7:aa:58:5d:
c4:2e:3f:f5:6e:f1:a1:e2:85:2d:41:f6:9d:1f:b1:
ac:8b:74:12:db:4c:ea:dc:2b:e6:4e:9b:4f:fa:0f:
ca:00:ff:2f:cf:cd:c1:4d:58:92:c9:97:61:a7:dc:
90:4c:8d:df:2e:3e:4e:34:bb:7b:9f:26:f2:50:38:
a7:7e:a9:f9:5d:26:db:ab:45:2d:d9:0c:8f:b1:4b:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FF:10:2E:BD:C2:C0:33:19:80:44:FF:BE:AD:76:A2:12:0C:B6:5B
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:70:3f:b5:1d:f1:8e:49:f8:d9:8d:bc:33:34:fb:06:bc:70:
db:5f:69:51:21:43:74:f8:51:bb:89:25:10:d5:d3:12:0a:3a:
3c:80:3f:3a:6e:4d:48:66:52:1d:62:eb:93:11:da:68:22:f2:
31:0f:b6:27:43:c0:31:68:4a:f5:8e:26:3c:13:81:8c:d9:97:
b2:7d:83:5d:24:5d:c7:80:82:1c:72:05:3e:c0:e9:81:61:a6:
8c:a0:38:71:c3:62:16:ff:9c:f3:91:db:94:d5:ae:1e:70:56:
bd:0c:21:59:2f:1a:dd:c2:30:22:5c:52:cf:34:a9:22:e2:d4:
3f:41:14:53:2d:74:fe:79:ab:d8:bf:b2:cf:b8:76:b7:c9:12:
4d:da:d3:69:fa:bf:ec:84:30:21:b4:3f:39:8d:1e:85:6f:9d:
40:58:44:e0:72:60:78:80:21:2f:f8:5c:41:08:59:35:e3:6f:
c9:2c:84:ed:64:df:52:63:c0:8f:a5:1f:b3:20:14:b5:c8:e6:
20:9e:b6:5e:62:bd:02:58:f9:8f:ea:76:df:4e:2d:4f:74:f8:
cf:a2:d0:7b:1c:e4:ef:9a:e9:7a:fd:27:a6:e1:b0:5d:10:33:
0f:70:78:65:f2:c7:2d:b8:3f:4e:5e:86:08:44:09:ef:97:b0:
32:b1:e6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:31 2025 by rpki-client