Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File: FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier: YXq6c5VjBsgFhf/+d97pFO599gLPCa1JK9+sYFrX6G8=
Subject key identifier: 88:60:0A:5B:A1:94:01:E3:93:58:EF:5B:97:99:9C:20:BD:12:96:19
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 0194BD859AA291D31062F6A4D91228188EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number: 1007
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: 5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa (hash: ZPbDvWHExMztNeKcllyDlDkCaDogTJsh9sQhQBtO6xU=)
2: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: uu7mSG0c3lMbWGOdTlgF80o5qAZmGthYmRjO5+iWp0A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9a:a2:91:d3:10:62:f6:a4:d9:12:28:18:8e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=88600a5ba19401e39358ef5b97999c20bd129619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:25:81:26:68:eb:89:60:26:d1:a5:e4:b2:
13:da:b9:97:bc:76:4a:f3:67:80:b1:e2:d8:2f:00:
1a:95:a6:77:34:3b:d8:5a:e2:d3:62:16:74:3f:fb:
0b:13:78:b2:37:bb:9b:0e:40:3d:e1:7f:9a:c0:8b:
79:64:2f:5c:30:15:28:73:90:b8:70:52:88:dc:18:
0d:f1:b5:77:c6:b0:c3:da:e7:73:ec:29:4c:64:0e:
de:d8:cc:ed:bb:65:9c:be:65:74:f0:ce:ed:00:9e:
d5:d6:ef:db:9a:c9:68:f8:1b:65:9d:3c:6a:ad:30:
6f:68:8a:ab:7e:9c:6e:df:f5:d8:6b:3e:bc:66:c2:
79:59:f0:2c:3c:8e:b0:18:f9:28:11:74:ee:dd:3c:
4a:a0:b0:fc:c9:a5:99:20:52:2a:c5:2c:55:f1:87:
ae:6e:e0:41:d8:0a:0f:c4:d6:36:f0:32:c6:e8:93:
b9:74:0a:78:cb:9c:79:33:1e:58:8f:fd:31:ae:29:
55:b6:e9:db:38:62:c5:b3:1c:87:66:d9:5c:5e:4e:
06:c7:ec:fb:63:15:31:cb:b0:b9:f1:a5:3e:7d:18:
3e:48:b6:fb:f4:b2:b8:90:e5:4a:e3:a6:91:3f:97:
88:06:61:59:26:65:7d:66:f1:6a:93:47:2d:58:2d:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:60:0A:5B:A1:94:01:E3:93:58:EF:5B:97:99:9C:20:BD:12:96:19
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:22:61:56:d2:74:36:1c:16:99:2c:9d:8c:27:8c:2c:75:99:
24:2c:2e:28:06:2d:c9:e5:f0:30:d4:a4:f1:f4:b2:f0:d3:0b:
40:54:4f:2d:a7:8d:61:20:39:15:24:6f:2b:3a:75:a7:8a:51:
3d:a1:49:68:83:fd:4e:fe:5b:67:0b:05:19:ca:26:03:b3:6e:
0d:b3:a7:9a:5c:7a:c2:00:1b:df:c0:c3:99:ad:ab:9c:ea:48:
dd:d1:05:9e:ee:12:4c:40:b7:15:01:85:be:d1:9e:8b:fd:f7:
07:b5:d2:09:87:8a:13:4b:91:7c:ae:d1:50:7d:85:40:56:65:
15:47:28:76:24:9f:57:41:58:a8:16:75:e1:75:53:e9:49:64:
05:94:2d:24:c9:5c:10:fc:10:0f:01:b3:89:2b:d0:f4:ed:6e:
6e:e2:ad:2c:75:ba:5b:1d:f5:52:f8:72:6b:21:f5:76:5f:b7:
4d:c5:74:68:25:b1:73:2a:11:80:d8:ec:11:13:51:58:32:14:
af:d1:5d:31:92:90:0e:77:4d:45:5f:c1:6c:51:98:c1:f5:14:
13:6d:f8:8a:23:ca:b0:46:e1:7b:10:bc:ec:c0:7b:1e:07:e2:
3b:54:37:73:14:2a:34:d9:39:48:d1:36:2f:e9:09:e5:f6:25:
2b:55:5d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:03 2025 by rpki-client