Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
File: FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft (raw, json)
Hash identifier: 85rdcRZ3Z34yaUnyrl8IBbrF5cqWa514txhomuDzQJ4=
Subject key identifier: 53:E6:1E:8A:20:A9:F4:84:7A:91:6C:82:D8:DA:43:08:B7:6A:D6:0B
Authority key identifier: 14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
Certificate issuer: /CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Certificate serial: 0194BBCE5234C3536BB12ACBDD2CA8C5A3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
Manifest number: 08CC
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl (hash: rXf+WTmCiesWsS2UyVzzAat2ssCapohgBv9PR1Q7dSI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:52:34:c3:53:6b:b1:2a:cb:dd:2c:a8:c5:a3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c2eab6a2960506046a1da4312773d98e97cd5a
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=53e61e8a20a9f4847a916c82d8da4308b76ad60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d7:ee:c5:f8:b9:34:3a:60:66:a8:b3:72:8d:
a9:0f:6b:c1:c1:a0:8f:98:1a:25:b1:6d:3a:c4:f1:
f8:44:97:0f:ec:bc:ef:af:bf:5d:ad:c8:d9:99:fd:
94:1d:43:ad:d6:e1:24:36:7f:fc:80:df:9d:9e:8a:
32:7e:c5:c0:95:19:e0:7e:a2:64:91:36:ec:73:01:
a9:bd:d7:c0:d6:5b:1c:fe:78:ab:ee:ec:ff:a7:fe:
db:47:17:6c:f0:46:2b:dd:db:84:c2:11:36:0e:62:
f9:65:17:51:48:60:53:10:29:4b:7c:b5:a4:c2:d4:
f5:a0:7a:78:11:43:0f:3f:e4:60:92:0a:9c:80:65:
af:4c:4f:41:37:58:bf:6a:9f:4f:34:e4:50:c4:3d:
14:15:28:1e:b3:d0:a6:5e:02:e3:d8:ef:c4:05:e1:
5d:0c:0d:7b:13:51:59:41:6c:92:3c:5f:4a:bb:ac:
a8:ee:30:53:20:eb:3c:47:15:e3:f5:2c:1a:81:2c:
18:3a:d7:9d:7b:74:78:ba:a3:13:ad:79:50:80:45:
f8:e1:44:7e:1b:aa:a7:95:87:68:d8:ac:5a:33:0b:
f5:df:5a:63:a8:ed:a9:29:58:0e:21:1f:d4:56:ed:
e8:2d:31:8b:47:aa:b9:fe:50:9d:71:b9:53:a7:34:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:1E:8A:20:A9:F4:84:7A:91:6C:82:D8:DA:43:08:B7:6A:D6:0B
X509v3 Authority Key Identifier:
keyid:14:C2:EA:B6:A2:96:05:06:04:6A:1D:A4:31:27:73:D9:8E:97:CD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMLqtqKWBQYEah2kMSdz2Y6XzVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/4b4d7a-ce48-47a4-a3c4-611e57da95c0/1/FMLqtqKWBQYEah2kMSdz2Y6XzVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dd:85:b9:96:be:da:e5:57:ba:70:78:7e:71:6f:ac:60:cd:
86:1a:47:05:35:66:a4:35:00:13:ce:84:a1:b8:72:f3:6e:1f:
9d:7c:cf:de:1a:99:18:e0:67:ee:2c:c0:00:33:4c:e1:06:4d:
5a:72:28:3b:81:30:c7:80:f0:20:d3:04:96:1f:59:96:b8:9b:
39:7b:28:4e:2b:0d:b9:43:bf:c3:96:01:ed:50:e6:41:d3:af:
97:6e:f6:ab:1d:b1:84:fd:f1:6f:34:5a:3d:c3:81:09:1e:c3:
d6:dd:78:a4:88:dd:aa:98:a8:7f:78:31:14:37:8d:35:22:4e:
cb:63:08:9c:0c:1b:76:24:24:9f:1e:7e:3a:02:2e:20:38:0a:
b5:46:e3:4d:6e:86:32:fc:71:45:cd:01:a2:1b:fd:91:6f:1d:
e9:0f:ec:29:a4:79:72:4c:27:f7:df:69:3e:75:62:4f:77:a7:
ba:2d:1d:fb:27:b8:ce:01:93:a5:ea:be:50:9c:71:fc:cc:c5:
b4:b0:fc:20:e2:dc:f9:56:ce:6a:41:d7:8c:23:7e:ad:ed:08:
ec:27:ed:84:2d:aa:37:40:7f:62:c3:ea:81:f7:2d:cc:c5:f8:
c7:87:78:62:55:cf:51:fd:1b:c4:66:67:28:0c:32:92:fe:45:
1c:4b:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:00 2025 by rpki-client