Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
File: FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json)
Hash identifier: BG0WgCKdVTdt9lLDZaVN1qbViM4x6pwZDQvFhiH21VU=
Subject key identifier: 08:2E:B0:65:80:D7:D4:93:8D:06:BC:33:29:40:EF:BF:9D:32:CC:2E
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 0194BCA9E2F0849AF50B83C49CBD25E1FDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
Manifest number: 0FA3
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: 4XZIJonSst08+j97MfPWxNF8tTz7s9hktF3lbY6PHVk=)
2: H9dXCbHCAXGOrGOV28k8umzrLKQ.roa (hash: sDapbNuHEvC3TdmduqXaXIUkjYECPGi1w550P+lUprw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e2:f0:84:9a:f5:0b:83:c4:9c:bd:25:e1:fd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=082eb06580d7d4938d06bc332940efbf9d32cc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:1d:14:89:5c:a2:28:8b:e9:37:9e:93:28:
7a:41:a8:87:bb:9b:e1:8f:8f:ff:2f:33:d8:a7:f8:
b6:de:6f:23:91:3c:34:41:a5:70:7e:82:40:9d:4a:
12:83:ca:24:90:b5:28:e6:ea:72:5a:f4:89:ed:f6:
ce:30:75:a8:aa:b3:66:59:60:5a:7a:bd:ea:f9:8f:
11:32:cb:e3:35:66:4a:2e:15:c4:80:85:02:8f:d5:
20:f2:8d:e6:fd:40:aa:72:00:26:11:89:29:6e:8e:
9f:74:9c:65:b9:9c:38:e3:a1:f6:cf:5e:33:9a:b6:
74:fe:88:1c:f6:6e:55:81:3f:17:29:ea:0c:ff:9d:
6e:b2:22:4e:bf:73:56:20:22:3a:c5:9c:32:cd:d1:
a8:9b:77:7b:26:9c:d1:64:98:b4:86:bf:a6:fa:c0:
1b:11:57:2a:02:00:3c:d5:c3:cc:47:12:05:43:83:
6e:f1:a9:79:3f:13:94:6a:e1:38:e2:9b:81:01:d3:
e5:e2:12:c2:62:a0:0e:b9:46:fa:dd:9e:c4:dc:3b:
81:89:d4:38:f0:ec:d3:a9:45:f8:93:82:d0:9a:fc:
1c:93:b2:6b:77:22:a8:91:f0:bc:c5:52:3a:1f:66:
2b:70:7a:25:9d:1a:85:d4:67:9c:e2:52:1a:0c:76:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2E:B0:65:80:D7:D4:93:8D:06:BC:33:29:40:EF:BF:9D:32:CC:2E
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:51:25:01:2b:29:7c:ef:f3:6a:1e:73:17:07:4d:5a:13:61:
23:fb:ae:8b:d9:48:34:56:29:9d:a2:ec:67:d2:79:cf:d3:d2:
97:2a:89:2a:08:14:4d:4d:87:db:64:fa:5a:ee:ed:2b:5a:b1:
9f:1a:24:81:65:6f:0a:9c:ef:c2:be:c9:3a:3e:e8:7d:5e:96:
3e:25:8a:5f:bf:20:c4:0d:cb:b3:06:ee:b6:56:e1:43:6c:08:
8a:8e:7b:5a:41:ab:25:c3:79:cc:d9:bc:b5:60:f3:0a:10:8c:
a4:24:b3:29:7c:d3:6a:5d:21:f8:32:9c:d1:72:7c:a9:b0:3e:
67:7f:6d:09:4b:53:21:10:c2:40:a1:a9:ac:4a:9a:e8:b2:c2:
9e:44:e9:f1:12:42:7a:40:0e:be:b4:76:ff:68:6e:db:af:a3:
e6:9f:de:04:dd:5d:7b:7b:19:05:a9:cc:9d:96:e8:7f:80:14:
9a:66:e5:24:0b:f8:9e:ef:c3:63:4d:ff:8d:ba:3c:82:39:4f:
a9:57:de:46:b8:5c:9d:a6:a0:2f:68:e3:c6:56:ea:d6:98:d3:
5b:7c:1c:f0:ca:52:f5:e9:f9:41:5f:7d:d8:bc:b0:83:8f:04:
a1:da:fc:1f:ce:8d:94:be:e9:41:de:a7:3e:f2:b1:03:95:1d:
6f:25:1e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:53 2025 by rpki-client