Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
File: FKawhisrMDswLDwjSaWsjQ-QawY.mft (raw, json)
Hash identifier: YFQVg9wzOXBwIzG2dPH9FGLLqgpU1Th1hZDFpbZWeEg=
Subject key identifier: EF:D8:BE:FD:E1:83:E9:DB:88:D8:CE:21:8D:CA:B6:EC:FF:5D:87:ED
Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Certificate serial: 0194BD17A1ED349D082A1EF914EF85E22EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: 7nWZ-fXLkbaN6kk-WpeVPSb_Shk.roa (hash: +Nsf5cvVzwGmy0NBURwNVgZwqRNM1or+ZItAdRGNc3s=)
2: FKawhisrMDswLDwjSaWsjQ-QawY.crl (hash: l0sE0/Bf6gVHPdy+KzDEk+m1eZn7964Pz3RpSEM1igY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a1:ed:34:9d:08:2a:1e:f9:14:ef:85:e2:2e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=efd8befde183e9db88d8ce218dcab6ecff5d87ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:bc:07:c4:a7:09:c5:e1:d5:f3:f6:d9:fe:
8f:b5:5b:54:e7:8d:fa:19:b9:4a:7d:44:93:c4:4e:
0c:12:8a:65:ce:56:e6:e9:ba:96:33:1b:57:5c:33:
22:9b:6c:59:7e:13:ef:6f:12:45:32:99:8c:17:f3:
23:e8:d2:6c:af:48:36:64:b1:59:d9:74:5e:87:7d:
5d:10:db:d2:56:96:89:b6:c5:0c:bd:8f:71:89:9e:
79:61:c6:7f:c5:ab:7a:ae:ae:60:c3:6d:2b:b4:e1:
5d:04:fb:db:89:22:26:e8:5d:76:c7:56:9a:3d:90:
d4:b0:81:e4:01:80:c5:ff:37:42:4e:24:13:20:16:
ac:15:c5:ec:50:d3:58:99:25:07:a0:9d:14:d5:02:
9b:a9:48:4a:b8:ce:22:1e:21:89:c5:de:f8:1e:15:
84:5c:37:18:be:f4:53:cb:2a:45:32:85:53:8f:e5:
58:2a:de:b8:65:1e:34:e7:56:49:d6:ed:0b:08:6a:
64:68:1d:bc:77:1f:41:14:3e:25:77:c9:00:39:69:
c6:1f:f8:ed:d5:85:b9:fa:40:5e:66:7f:2c:58:d2:
2d:0f:8d:3e:0c:0f:39:e5:22:69:c8:f6:3d:68:00:
a5:3d:c5:b3:84:0d:f0:ae:96:28:ae:17:23:cf:1b:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D8:BE:FD:E1:83:E9:DB:88:D8:CE:21:8D:CA:B6:EC:FF:5D:87:ED
X509v3 Authority Key Identifier:
keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e0:85:a5:31:5b:4a:d8:83:75:80:9d:ab:6f:d7:7f:cb:55:
7f:25:4b:4a:55:f7:ef:52:18:bd:30:ce:79:18:bd:d3:3e:14:
39:b3:dc:68:80:87:36:82:06:cf:83:f0:38:e5:0d:b9:15:f5:
79:d7:3f:2c:73:0d:46:67:c3:58:1b:d0:41:2f:37:49:9b:e8:
11:6b:25:ae:ad:0b:17:9b:c9:83:b5:51:77:f5:cb:1a:f3:33:
91:7d:ae:79:1a:10:ee:16:22:ba:b1:06:b5:8b:81:68:34:4a:
62:5a:97:43:29:26:bf:40:4b:7c:27:74:c7:47:02:a0:26:9f:
8c:4c:5d:c7:96:80:07:77:95:d6:01:7e:f3:12:25:7e:60:5f:
f0:f0:53:75:61:e0:d4:53:71:4d:3d:16:25:98:c3:47:22:4e:
04:4b:dd:9d:5f:3d:de:c0:a4:7d:f6:d5:b1:e5:28:9a:b4:9a:
6e:1c:33:29:74:ee:51:1c:8d:66:4c:bd:af:f5:53:65:05:b7:
73:33:ee:89:1c:37:bc:f2:6c:92:7b:47:32:ef:ec:c4:39:6c:
e2:29:5d:21:1e:48:44:4a:04:e9:6a:3f:51:4b:ca:c8:09:c3:
da:34:73:e1:fa:ce:48:ae:59:2a:21:07:df:95:9f:c7:b7:95:
3e:a0:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:08 2025 by rpki-client