Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier: oHQleUfzMQ9ht3bnNu7vOoboeSjzlAgXZ44grjlewD4=
Subject key identifier: 1F:DF:31:1F:D0:7B:11:55:FD:96:6F:14:4B:99:90:CA:ED:E7:98:E0
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 0194BC730347A2773943595417D4FAC8FAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number: 113E
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: pPolYAAE2/dQ0IoiOsILCQSGTt+xGTOh8YhV+8HtXdU=)
2: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (hash: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:03:47:a2:77:39:43:59:54:17:d4:fa:c8:fa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=1fdf311fd07b1155fd966f144b9990caede798e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:ae:ef:3c:b1:9f:49:98:0d:45:ef:75:6e:
5d:be:fe:53:da:20:cf:d9:c9:b2:24:38:bb:10:59:
13:d3:fd:91:95:86:fd:e4:36:98:37:eb:22:1e:81:
56:d5:d3:87:1b:82:0d:45:57:ba:17:8f:e9:a7:3a:
95:bb:80:9d:30:b3:d1:dd:54:b8:22:28:94:ac:c8:
a6:42:5d:4b:8b:94:de:1f:f1:45:9c:58:13:ea:f2:
d5:00:2e:cc:89:3c:07:4a:fe:15:12:ee:8a:4b:5d:
e6:cc:e0:4c:45:dd:f6:43:81:a1:3e:bc:6a:4f:b6:
0c:ae:53:ee:e0:2e:11:82:24:59:88:4b:5f:8a:72:
73:05:3b:6d:4e:d1:8b:70:25:fa:e1:4a:7e:45:53:
ee:9d:d9:30:4b:1d:f8:15:56:ff:80:1f:e9:ae:16:
cd:f0:e7:ce:49:a2:97:e6:6e:9e:5b:8b:06:c7:0e:
26:7f:6a:cd:ba:8c:23:bb:78:7b:78:31:9f:dc:8e:
fd:88:aa:3f:15:18:77:ec:7d:90:08:24:35:62:d1:
46:53:9e:e8:fe:5f:8b:f0:a2:03:76:3a:86:56:87:
da:0a:39:0b:68:88:e9:ae:a4:96:d6:f4:df:59:7e:
b1:53:cf:fd:25:a9:18:52:e9:95:ea:02:2b:de:83:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DF:31:1F:D0:7B:11:55:FD:96:6F:14:4B:99:90:CA:ED:E7:98:E0
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a5:db:c2:98:95:a8:8a:d1:e8:e1:d4:05:7e:d1:94:01:06:
0c:dd:64:0f:96:4d:f0:44:e3:d5:14:d8:ce:2a:63:e9:3c:31:
f3:14:0e:41:b8:ae:5a:0c:a5:cd:01:21:e8:3d:45:51:be:54:
01:09:35:f7:3e:05:b2:eb:3d:71:12:3b:b0:18:71:40:fc:73:
2d:af:f9:a9:d3:d3:32:2a:5b:87:c4:21:17:7e:81:14:d5:4c:
0b:52:49:9d:06:ee:8f:93:72:bc:4f:d9:7a:8d:c4:07:f6:80:
bc:56:c8:81:09:79:8f:8b:e1:06:ec:49:f2:59:da:54:e0:57:
3c:56:de:57:ed:c7:d7:f1:57:2d:05:37:08:7d:3c:86:fb:21:
67:05:47:38:1e:31:d7:83:c0:c0:c2:d4:59:de:0d:a2:c2:80:
fe:0b:7c:f2:98:ec:d0:22:d9:fa:88:03:86:db:e3:2f:5f:52:
55:de:93:eb:24:b9:9d:b3:b1:d3:11:e2:39:49:00:18:db:cb:
12:12:ea:37:58:41:89:c6:65:c6:5a:9d:2d:0b:7b:a0:ee:c8:
3a:47:32:f3:12:4d:0e:14:17:25:86:14:61:6e:b9:a2:77:64:
30:92:12:57:4b:fa:f4:d1:0f:45:86:e8:83:f1:da:eb:4b:be:
61:c5:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:29 2025 by rpki-client