Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: e3xRdS2XERvNBvtNDIyJcQkEgls9OteSClvP0/icE9I=
Subject key identifier: 47:CD:F5:F3:F4:3F:D3:A9:51:B4:6D:20:BA:FC:1F:3A:1C:B8:F8:A1
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 0194BD4E7D0F835A2C68AF98520562972963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 06B9
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: ek7vlkoRMibHUONcPZWSdJlBtw75f846b/5JyhE/y1E=)
2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7d:0f:83:5a:2c:68:af:98:52:05:62:97:29:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=47cdf5f3f43fd3a951b46d20bafc1f3a1cb8f8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:f3:11:8d:9f:7c:27:bb:f0:57:f8:24:b3:
a4:75:e0:55:51:eb:a2:ae:40:4c:6f:a3:6d:69:3c:
b6:e2:9c:4d:5a:dc:8d:6b:8a:4e:00:51:47:3c:37:
db:61:32:4d:ac:7d:ef:34:5a:86:df:4e:2a:91:31:
95:fc:1b:22:b1:a9:2a:a5:8d:26:44:fe:63:fe:63:
4e:1a:1c:f8:c3:7f:aa:93:cd:f3:04:2b:65:67:f3:
aa:2d:c0:fa:3d:f1:2a:b8:3a:cd:32:71:2f:14:b5:
cf:46:f9:ac:4f:8d:aa:66:33:8b:2a:be:c1:8b:87:
a0:7f:e3:a7:c9:84:44:57:3f:10:f1:39:54:9c:a5:
9c:2a:57:93:3e:85:f3:77:d3:e4:b1:2f:e6:63:1f:
b0:93:fc:ba:ce:29:e4:6a:01:ca:1a:11:05:c3:0b:
78:12:c4:3f:09:a7:fb:f6:f9:10:8e:94:d0:ae:40:
f4:0b:8f:0d:a7:08:f9:5d:53:86:a3:f0:01:bb:a5:
8d:72:b7:4c:56:62:8f:bd:e3:a6:90:4b:ad:c9:99:
fc:75:a2:82:2d:e7:35:3f:d2:14:1a:82:85:40:b7:
81:3d:04:4a:7a:98:8d:fe:9e:ac:d2:4b:0f:d0:75:
7e:5d:3a:8f:77:76:f1:25:9c:f7:2c:ff:82:d2:27:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CD:F5:F3:F4:3F:D3:A9:51:B4:6D:20:BA:FC:1F:3A:1C:B8:F8:A1
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ea:5b:a5:55:ee:52:29:5e:16:02:f8:f9:32:f6:34:59:f9:
a8:27:8c:43:33:29:29:52:5f:f0:33:0b:2f:02:a4:f8:36:c1:
ee:d5:62:c6:70:46:2d:f8:6c:ac:5f:6f:c5:5b:dc:fa:6d:22:
dc:ce:99:4f:3d:85:01:14:e4:26:a9:52:83:ad:0c:bd:43:92:
3e:71:f7:cd:71:22:05:e5:02:6a:46:46:15:c5:2a:ca:1a:d5:
e9:0f:da:96:c2:07:5f:5a:ba:9a:71:2e:e5:6f:22:94:39:b6:
a1:56:c3:78:97:a3:ed:49:cf:ab:77:58:85:cb:39:20:de:2f:
9b:62:73:e1:ff:c6:79:75:19:94:f7:52:f3:bc:28:55:44:c6:
cb:89:be:7e:71:4d:0e:28:6e:41:93:f2:ba:ce:dd:93:31:3e:
4d:70:d0:13:03:a3:4c:94:69:20:ad:d3:fb:e4:b9:28:f4:34:
e2:23:69:ba:ea:42:be:13:56:34:65:0b:9d:37:34:2f:1e:11:
ca:d9:f8:09:df:b2:fc:ae:cc:c9:28:68:5b:58:71:84:af:cc:
c1:cc:21:92:c1:d8:e3:87:fb:22:fb:0f:1a:22:48:73:10:bd:
d1:24:b3:00:08:29:c4:21:f5:77:1e:f0:f6:95:c8:f1:55:ed:
a4:a9:f1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:08 2025 by rpki-client