Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File: FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier: DYEvbc4eLlbqex6sEw72bNIsrHNRMVIdJ8TAP+fPX9U=
Subject key identifier: C8:60:55:D2:02:9C:E8:88:EC:4C:1A:15:03:21:F2:03:EF:0A:74:94
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer: /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial: 0194BC05209F169F43A2F63BC1C9160AAC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: WUqkV2l1ZHeokjnvg1W3I30T8vWeANKTz785UWlWkt0=)
2: UFCOfzoSOjyZ43QIGuny5oDZfK8.roa (hash: q4TVq3IFyn3CwYbhYyk9oa5DP8x2oUqJMMv2fmv9Q8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:20:9f:16:9f:43:a2:f6:3b:c1:c9:16:0a:ac:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=c86055d2029ce888ec4c1a150321f203ef0a7494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:99:9e:7c:ba:73:6e:45:c1:21:fc:e8:a2:
68:ea:0d:6f:2e:9f:a9:21:c6:fb:a9:52:e9:f6:35:
6e:1c:9e:34:c8:20:c1:ae:89:32:ae:e1:9f:1b:25:
6c:67:38:53:2a:50:3f:98:7e:59:89:5e:cf:21:4d:
15:ea:b0:7f:c1:c7:37:ec:6f:cc:f1:d1:8b:3a:26:
55:42:9f:02:7a:10:7a:11:1a:af:16:ea:70:16:64:
4f:6d:59:ae:9c:58:19:a5:cb:53:c9:49:c2:03:84:
bb:2a:f7:24:ff:b3:0e:0a:e5:8b:7b:b1:43:73:d5:
32:57:9b:6b:11:eb:f1:70:76:65:88:2e:3c:f8:4c:
94:2b:9e:e1:a1:44:29:fc:f4:3c:4a:1c:8b:7e:d4:
3a:c2:4e:0a:f1:4f:17:04:db:3c:db:94:b5:fc:9b:
84:90:28:83:04:2d:a2:e8:cf:ac:4e:4b:a1:03:fb:
e1:d7:9b:0a:c4:80:5c:0b:23:18:46:a8:63:e3:e1:
7c:84:e5:de:44:49:28:cb:94:b4:39:ef:b1:2a:70:
7f:3f:b1:ec:ad:a2:66:10:f3:60:2c:9a:bb:00:24:
6a:db:c4:8d:33:f1:7f:13:0a:19:f2:b8:89:c2:e3:
74:98:10:2c:86:23:77:0f:8f:33:d0:fc:06:0c:60:
33:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:60:55:D2:02:9C:E8:88:EC:4C:1A:15:03:21:F2:03:EF:0A:74:94
X509v3 Authority Key Identifier:
keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:80:b9:af:ab:13:e4:fa:b1:13:ea:e0:25:ec:ce:e4:e2:64:
98:48:57:b5:cb:59:3f:9c:4b:f3:d7:55:3e:ab:cc:87:ec:d6:
c2:4d:1a:a6:c4:2c:15:0c:3e:8c:57:00:9b:cd:b6:3c:e7:f9:
06:b6:49:23:49:66:e4:5b:9b:88:28:ce:38:de:3a:27:6b:b5:
93:07:38:f4:e0:78:84:37:ae:45:6f:f5:37:9e:89:b5:94:25:
58:aa:1e:87:cd:bc:7a:d3:f1:a1:2c:2b:8f:37:e5:32:31:84:
26:ff:2e:79:3c:76:07:6c:6f:a0:7f:83:f1:1a:8c:10:1a:9f:
56:5a:d3:15:6b:13:e7:05:a8:c3:e6:0f:75:30:26:66:58:c7:
9a:3d:bc:7a:8b:4a:90:12:41:19:b0:23:e6:d0:06:65:39:10:
a7:7f:72:b1:2b:ec:ab:ac:e1:a4:3f:b1:4f:4f:2c:d5:7d:e5:
ef:41:13:06:45:f8:f8:07:f2:e6:14:7e:e6:8e:db:4a:8d:5d:
8b:13:ca:3d:8b:84:b0:d4:02:4e:7f:22:a3:f0:44:04:55:f0:
7c:c4:f9:83:7f:84:11:3b:c0:01:2f:22:d5:e4:11:b3:e1:f2:
f7:7c:5c:78:c1:c0:96:dc:97:9c:8b:15:c6:7f:6c:ae:71:3c:
1c:23:ff:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:42 2025 by rpki-client