Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier: bCgkhUCzdlH/0bn7at1bcW3for2Cd5kRDW+cCD2bZ44=
Subject key identifier: F0:0F:90:AF:CB:F8:B5:D7:D8:84:A2:13:8F:4F:D0:15:F6:58:33:6A
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 0194BCAA2D87271E7CE7694C7168E0836C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number: 0D40
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: ECVhbk7HslDK7Yab6tRyfcUTM-w.roa (hash: Zu9vU6DdogZHy9494u0UUYh7x1SUMPG2Ju9mrOac5EY=)
2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: LU3HwZAx3mNeO6chfqWAbdxAqdraG1DTo9yrw4TRNNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2d:87:27:1e:7c:e7:69:4c:71:68:e0:83:6c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=f00f90afcbf8b5d7d884a2138f4fd015f658336a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:cb:11:49:df:ea:e7:79:2b:6a:55:13:52:
01:2a:0f:15:20:35:61:5b:da:eb:80:4d:1a:b0:8f:
53:80:22:ce:16:ef:f2:93:f5:d8:16:7a:45:2d:49:
54:16:81:ca:02:d8:28:6f:7e:d8:39:d6:47:7a:10:
b5:da:dd:8e:73:8e:c7:1b:96:51:b6:6c:2b:8b:04:
3f:d8:9d:38:8a:d1:a6:0f:38:b4:f9:cc:d8:d0:a4:
72:43:23:4e:5d:26:31:08:e5:82:b2:83:b4:bf:7c:
cf:cd:d9:08:5d:b2:a1:9e:3d:49:ae:bc:f7:b3:b2:
e0:2b:65:e1:70:9f:1d:82:0a:db:4f:b2:86:6e:a2:
c1:9c:d7:58:86:c0:0d:a6:39:e0:44:c8:d9:0a:b7:
95:b3:d1:b1:d5:dd:0e:5c:96:b3:88:2a:93:d9:f0:
d5:91:82:1d:10:3a:7e:30:e9:21:d3:c0:9e:39:cc:
6b:78:3b:17:d6:bc:01:e5:db:bc:d4:c8:5d:f6:22:
02:dd:06:a5:c6:c3:44:09:46:c3:b4:3d:d1:ee:1f:
a2:d7:00:be:b2:f7:ac:a8:e1:6e:7c:25:e7:27:42:
b6:57:21:67:35:a5:5a:b1:80:27:bb:78:43:c0:9a:
48:3f:d4:6e:33:c9:a6:4f:5d:e9:be:4c:b9:93:c5:
f0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0F:90:AF:CB:F8:B5:D7:D8:84:A2:13:8F:4F:D0:15:F6:58:33:6A
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:39:9c:14:22:25:d1:8b:35:3f:8d:16:07:da:9a:31:7d:eb:
e5:cd:08:db:98:4c:ad:4c:a9:e6:be:63:a5:d7:b0:14:ac:b2:
4d:78:18:33:ff:be:1a:4b:9c:c0:07:1b:49:da:a2:3c:36:42:
e6:1f:67:6b:51:e6:b8:7f:6d:ed:df:11:69:5d:4f:10:31:3c:
da:7f:47:e9:69:f5:88:17:23:20:d8:41:6c:32:00:40:7f:d1:
4e:2b:62:c1:e8:5f:99:fd:2e:e0:2b:27:98:49:f8:04:12:d5:
18:9b:30:91:a7:ae:a0:80:5d:7a:29:ad:b1:02:86:32:f6:f8:
8b:d9:e3:5a:f9:bd:20:3c:3d:31:db:a1:d1:9a:1b:dd:74:81:
f4:82:9e:80:d4:b4:a4:98:e1:95:cc:22:30:c2:a1:5e:cc:93:
74:43:f2:af:bf:45:de:bd:dd:51:d9:ff:26:22:3b:22:e7:27:
1c:58:5b:86:bc:0f:d9:53:40:96:7e:e2:e4:a1:dd:3c:66:35:
43:09:a7:72:19:37:bb:e0:e9:1b:91:68:31:e1:93:27:5d:bb:
1b:0a:2f:12:93:b2:33:f5:14:65:0a:72:0e:a8:da:0c:d3:0f:
5a:e8:3b:37:0f:63:22:a6:0e:29:fa:c3:88:db:cd:4f:31:8f:
24:bf:72:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:10 2025 by rpki-client