Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File: FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier: KZ/i6AKY/O3clqBAeuFFDlujvtp982ZIDhz94iY+eks=
Subject key identifier: 08:5D:04:F6:8B:93:1F:1B:03:9C:06:C9:C9:69:26:00:C6:FB:C8:7C
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial: 0194BC3BFECAEF6C3DE82CB98CEDC9BCC3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number: 0DA8
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: um6w0n4+o4KubPKhHZtl/VtkIHCrn5bRtdTBoRTdM7I=)
2: sdQpr9vBWbo2oFyAIJwywqV94V0.roa (hash: q2Hm5+yXKjxuN/cBMa4LO9usoHIS/gexRqRStEbsYf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fe:ca:ef:6c:3d:e8:2c:b9:8c:ed:c9:bc:c3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=085d04f68b931f1b039c06c9c9692600c6fbc87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:a4:77:f5:cf:df:48:1b:87:50:c5:29:cb:
4d:de:70:60:89:46:c8:39:50:7d:e5:ab:06:2f:92:
5a:bc:c4:29:29:5f:67:b5:5d:83:e0:eb:8e:c0:d6:
54:db:a9:73:5e:2d:ea:8c:db:97:d5:14:7f:b0:51:
19:01:11:04:b4:96:ef:6d:ab:aa:d6:96:36:2b:1b:
bb:0e:7f:32:51:3a:21:0a:ae:84:2a:78:3e:34:7d:
04:75:79:13:5e:3d:4b:aa:5f:11:81:8b:b6:94:cf:
04:eb:43:1e:26:15:2f:3d:f7:26:db:ff:6a:d4:54:
8e:c0:40:8f:3e:c6:bd:af:d2:6c:80:11:8c:34:00:
ee:b8:e3:6c:64:4b:a3:f5:45:5f:70:22:41:50:b5:
d1:10:99:f9:31:4b:0d:75:d5:3d:09:5d:22:a7:d4:
d5:07:38:75:f3:54:1e:96:fa:5d:84:82:c4:e8:e5:
5f:94:fa:e3:c6:46:49:64:48:26:24:c3:76:ef:de:
f1:68:03:b0:ef:f3:d1:37:fa:e7:b1:cd:5e:25:04:
cc:0b:27:67:05:f1:82:d5:12:2e:64:2c:70:16:f0:
3e:2f:04:8e:15:80:15:9a:38:2a:df:24:99:09:24:
ac:3e:3c:54:37:be:e7:07:86:5a:95:f8:31:e8:74:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5D:04:F6:8B:93:1F:1B:03:9C:06:C9:C9:69:26:00:C6:FB:C8:7C
X509v3 Authority Key Identifier:
keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:38:ac:3d:7c:70:0d:46:e7:4b:60:00:cb:9d:e9:ad:7f:72:
c1:04:dc:3f:7c:9f:6a:d3:b4:07:a3:ea:d7:ad:a7:e1:39:a8:
f0:ce:e4:93:bf:e8:98:89:2d:39:43:5a:bf:a2:c3:a5:1e:31:
65:12:b8:d8:24:09:e1:41:6e:e0:bf:62:d3:2b:44:12:73:49:
cc:09:3e:65:02:2e:38:6a:e7:0a:b4:c0:e1:69:59:84:ca:59:
64:8b:dc:e4:2e:c5:77:bb:75:f6:74:38:0d:4a:4b:3a:6b:6c:
85:69:1b:de:e4:bc:8a:f2:94:0b:55:9a:6c:fa:0f:b3:94:e6:
70:ff:85:c9:3c:37:e6:50:2e:0a:f0:6a:7d:d2:7d:b5:69:5d:
15:21:b9:56:0e:76:79:26:9e:21:af:e8:28:9c:6d:d8:1a:64:
06:0d:d4:8b:5f:68:8a:fc:95:61:4a:55:ac:70:3c:8b:f0:71:
02:10:57:56:71:db:9f:d4:ae:c5:35:40:be:29:8b:8d:e5:95:
e4:a7:56:5d:6c:25:69:0a:f3:85:25:56:b4:fe:0b:ad:b7:47:
18:3f:df:ba:1f:12:f4:55:44:5a:d4:aa:e6:70:73:e0:c3:a7:
82:dd:3b:16:4a:fa:d0:de:96:85:6e:44:bf:af:de:77:0e:2f:
7e:9c:77:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:14 2025 by rpki-client