Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json)
Hash identifier: DHqdDkpYpZ9gsgkNMz+Wrrn1tnctazjAELUPVMG10vA=
Subject key identifier: E3:90:47:29:33:21:31:6F:20:00:77:8A:8F:6E:4F:44:7D:E2:6E:C9
Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Certificate serial: 0194BC3C5A6DB0C75313D85155D9CA6130AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
Manifest number: 0F30
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: gKlh/nSwf9T2TZe0QNl1zz818Kpc9XoTqMNAHYtzBIU=)
2: HD1uPet-iIu7hW_120IFu9su76s.roa (hash: vFNL8ghAlqPTrA8jGEs+I7hRSyNODsDNbh5CwQDUvI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5a:6d:b0:c7:53:13:d8:51:55:d9:ca:61:30:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=e39047293321316f2000778a8f6e4f447de26ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:df:29:5c:5c:57:bc:30:8b:b0:53:52:87:
89:9e:2c:51:fd:15:08:64:45:d1:5e:a0:6d:48:e9:
31:36:a8:90:74:53:5a:d4:ea:93:b8:e9:c3:39:54:
99:9f:37:34:26:a8:5e:17:98:18:14:f6:33:48:4e:
3c:43:5c:fd:e4:e3:db:f6:60:25:1f:2c:a9:c8:7d:
64:45:0b:bc:dd:8e:e4:05:0b:97:15:85:81:5e:b5:
64:33:81:c2:59:28:a6:90:42:1b:0c:59:2f:24:e8:
eb:8b:aa:f5:4c:c9:f1:d3:26:8b:f2:cc:7f:86:3f:
f3:da:48:65:43:5b:25:eb:fd:50:8f:d8:c7:22:3e:
12:21:36:47:ad:b7:ad:9d:d3:6e:42:0f:9a:a1:b2:
9d:d9:fd:03:5b:af:ef:52:fe:5c:08:30:89:b3:e6:
3c:59:51:cd:3e:2c:4c:54:f9:4b:d4:1a:a2:ac:ff:
f7:6a:a1:69:f6:ea:f0:b2:35:82:7b:db:d6:65:28:
9f:77:ed:4f:57:47:8b:3a:02:1a:52:20:91:03:42:
13:bb:a8:ff:ff:4f:b0:47:b4:61:a7:db:04:66:22:
69:74:a2:28:63:a7:20:32:be:87:e4:3e:21:89:45:
cc:4c:03:32:96:86:5a:0a:50:e5:54:de:1b:25:52:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:90:47:29:33:21:31:6F:20:00:77:8A:8F:6E:4F:44:7D:E2:6E:C9
X509v3 Authority Key Identifier:
keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:29:3c:19:f5:99:55:be:a7:99:4f:6c:ce:ab:e7:d4:85:f3:
cc:27:59:0b:60:f3:c5:2e:88:b7:7d:1c:98:9c:3d:ef:4f:5b:
a1:04:8f:c7:5b:e4:5b:29:5b:52:77:23:19:e6:13:16:16:b4:
50:3b:45:a3:1a:1d:c7:62:cd:21:8e:8e:b3:93:37:56:c0:8c:
d5:19:b4:9e:4f:47:ee:34:de:14:ba:f2:ab:f5:e3:d9:c3:5b:
56:1e:fc:57:14:ed:be:72:d8:31:51:6c:a5:dc:eb:9e:3b:c4:
cb:05:a4:0a:e3:f4:e9:02:56:26:37:b3:72:49:33:4c:a8:c9:
0c:14:b0:1b:a3:28:dc:79:3e:d6:34:22:82:92:63:07:5a:49:
2f:5c:c0:1a:c2:fa:e9:bf:9b:61:6b:f5:49:93:f0:c3:50:f0:
23:f0:35:83:28:dd:1b:4e:90:4c:c8:b0:ca:4b:d2:4d:ce:60:
9c:9b:09:22:7b:55:be:a9:23:c2:4f:7b:73:6e:44:cb:0f:7f:
e1:37:70:d8:3a:9b:ec:b0:9e:30:69:0e:ca:73:f0:b9:9e:0d:
0f:75:ea:8c:3a:f3:43:4c:69:94:87:7f:2d:05:d3:74:cc:9b:
77:09:8e:b7:a4:0c:ef:42:51:2f:70:fe:7b:cf:d3:c9:80:2e:
bd:65:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:34 2025 by rpki-client