Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: eEsHXUMndUH3G2QZ5EKfJtetrK0pMp7Q+fLwvd/rWT8=
Subject key identifier: FE:5E:D0:CA:CA:CC:A7:0F:C3:88:87:93:C4:61:C2:C3:4D:5A:9E:D5
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 0194BD4E508E66150F064429D342552158C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 13C0
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: uVNf0VVRWHz+qfavIt29UAajZLi+lcR6x89+KQyUVWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:50:8e:66:15:0f:06:44:29:d3:42:55:21:58:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=fe5ed0cacacca70fc3888793c461c2c34d5a9ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:48:7d:61:c2:96:32:1a:15:9c:71:8f:2f:
80:7d:a7:59:8a:57:09:4b:ac:88:f7:04:ff:c8:99:
66:71:99:e2:f9:c6:20:dd:87:61:da:27:28:83:17:
9c:57:f6:7d:05:eb:fe:18:d5:27:82:ce:04:bc:e7:
1f:ee:3f:0f:47:b2:f3:99:1e:f2:34:39:9e:4a:4b:
c9:8d:d4:cd:37:71:e9:76:3e:c7:ce:fd:5c:c7:f9:
10:39:a0:2f:db:d9:31:03:50:10:b2:2e:97:2b:d8:
cc:c5:0f:a0:6d:97:44:c7:61:8f:cd:e1:58:69:ce:
77:9a:48:4d:7b:cc:12:37:03:ba:47:eb:8f:cf:e7:
0a:3a:c8:97:2d:7a:60:f8:95:15:40:ee:ce:8c:6b:
1c:a6:9c:b5:5d:69:6e:b6:7c:a6:01:4e:db:b6:15:
ae:c8:1a:ac:74:6f:c9:fc:b2:2f:89:cb:fb:f7:90:
95:f9:02:61:03:49:14:0a:b3:d3:60:8e:8e:3b:d1:
2c:b0:1f:4f:86:92:15:07:78:c1:e6:2b:71:79:58:
a4:5f:66:79:70:c4:db:58:20:1d:49:55:9d:ec:e1:
a5:63:32:80:f6:f4:c7:1d:8d:ba:91:d0:a1:6d:f9:
ef:62:af:b6:e0:cf:39:ff:c6:73:20:d3:ca:eb:37:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5E:D0:CA:CA:CC:A7:0F:C3:88:87:93:C4:61:C2:C3:4D:5A:9E:D5
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e5:d7:fc:78:72:d0:79:c6:2b:f0:37:d3:65:eb:8a:18:26:
8c:6a:1b:f5:b6:cf:4d:4f:85:73:20:4d:d6:05:26:40:86:4b:
1a:6c:50:05:71:76:f3:6f:6d:17:cc:fe:12:b9:e7:68:45:3f:
c8:7e:6c:75:c7:3d:c8:49:2e:e3:98:cf:7d:4c:4e:46:aa:17:
12:04:cf:b5:25:12:35:bb:fd:7b:77:db:c3:6e:0c:7f:55:86:
08:ff:a0:15:07:24:60:cc:ae:38:17:c3:97:a2:af:fd:57:59:
25:43:83:34:8a:3c:2e:1d:21:cf:b6:8c:ac:be:3d:39:3f:80:
ba:37:80:4c:c2:3f:38:54:a8:9a:11:5f:9c:6d:64:9e:57:68:
10:43:b6:45:9d:66:d8:5f:ee:09:a2:12:84:0b:34:c2:0e:d0:
41:31:51:30:39:9c:a7:4b:fe:0c:1e:4a:b1:c6:89:cc:d6:34:
9a:11:31:e6:a0:7f:84:76:ef:4e:6a:c9:0e:fb:15:7a:9d:5b:
a2:6f:b2:11:d8:8a:5e:b9:29:cf:42:53:b7:37:af:5a:bf:e6:
44:53:40:b0:7d:3e:fb:9c:c4:85:3e:6b:c3:56:93:54:c2:fc:
69:d2:98:51:b5:54:9d:f7:36:56:c0:f7:37:e1:4d:1a:ba:cc:
50:b7:7d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:26 2025 by rpki-client