Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
File: FMFDiPKGLX4nqH_m9gHjTzRXI04.mft (raw, json)
Hash identifier: Snaoy/yohZ+X+iDhX5P1rZYh4LdsELqVwC9ISWqKZiQ=
Subject key identifier: CE:F4:FA:9F:3F:63:DA:43:05:2A:41:D8:3B:83:AE:7A:B7:54:8A:77
Authority key identifier: 14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
Certificate issuer: /CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Certificate serial: 0194BC3C8E44DF714B53D383E1469260F489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
Manifest number: 08A3
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: FMFDiPKGLX4nqH_m9gHjTzRXI04.crl (hash: nP4zzULFwmVPLrE4KN2gp3KZ6y+k2J9XfZ1Xm9Rp9N4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8e:44:df:71:4b:53:d3:83:e1:46:92:60:f4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=cef4fa9f3f63da43052a41d83b83ae7ab7548a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:54:78:11:88:2d:48:21:86:20:68:15:fa:
5d:80:81:09:d0:87:00:71:b2:c6:c4:92:be:af:d8:
75:0e:a7:bb:73:e7:85:a5:15:bf:bd:32:44:cf:df:
b3:f0:aa:85:9f:2d:c7:63:c9:0e:0d:ba:6b:f8:d0:
b6:7e:6c:a3:5a:bc:4d:8a:29:c4:ed:5d:49:13:7e:
d8:55:12:d6:e4:96:44:65:77:77:cf:68:cc:c7:2e:
44:4f:a5:8f:50:52:f7:20:ba:3f:52:64:17:a8:f2:
ac:46:21:8e:13:18:19:e5:01:90:d7:a3:6c:5e:36:
57:e8:6b:e2:53:0f:f2:f7:6c:83:28:09:4e:3c:33:
4f:ec:0b:11:cf:7d:03:be:d4:cf:9c:0c:61:f5:95:
c4:62:1e:4c:7e:e2:2e:9c:c7:cb:a8:a1:39:ee:71:
45:5c:dd:39:51:a4:52:d9:18:87:8b:d4:d2:4e:e6:
cb:66:58:97:16:19:ba:55:f5:3c:07:2f:1d:85:03:
0e:f4:f9:90:65:6f:a0:28:77:3e:95:98:e9:f8:cb:
03:9a:c9:a4:fb:07:36:46:40:88:75:cb:3d:e8:c0:
71:2e:51:14:8c:05:c2:db:fb:21:7a:86:fd:0b:e9:
c7:fe:26:3f:f1:d1:41:b5:d1:b2:19:21:e4:d4:e9:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F4:FA:9F:3F:63:DA:43:05:2A:41:D8:3B:83:AE:7A:B7:54:8A:77
X509v3 Authority Key Identifier:
keyid:14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:97:15:7a:cb:9b:05:48:45:e4:ae:4f:ee:33:23:d6:50:b7:
64:a2:e5:a4:28:c9:94:eb:07:12:a4:cd:b9:d2:8d:fa:92:5a:
f1:10:df:c1:a7:3a:33:e7:ed:4d:bf:1e:e6:24:f6:3b:ef:c3:
dc:bf:27:c7:64:dc:e6:2f:2e:a9:22:dc:ff:70:36:61:86:23:
56:ca:67:6a:99:c3:fe:75:c0:48:a3:b3:50:f6:01:d5:89:e0:
21:39:36:89:73:ca:f0:d9:a2:fd:ba:5c:b2:48:c8:76:a5:07:
a5:f6:7d:8b:31:e6:a9:61:0a:c7:04:71:6a:75:50:4b:bb:50:
96:fb:fa:ab:52:0b:5c:b4:53:f7:ce:e2:60:33:09:27:19:64:
8d:3d:fa:a9:f2:51:e2:9c:0b:fd:f6:6b:4e:b7:f7:d8:e5:1e:
19:d1:50:84:a8:f8:b6:cf:3a:ce:e9:4f:65:3a:3e:10:2e:69:
57:f5:cc:f0:bd:fa:42:9b:ee:18:0d:bf:88:dc:36:d0:d4:6c:
f9:58:83:01:10:2c:30:b6:7d:a9:1d:f6:5b:e0:af:22:56:c7:
e7:aa:99:fe:5d:ad:c2:39:a2:b3:4e:f4:5d:07:a3:05:95:4b:
ec:c5:09:7f:d2:7e:8a:9e:ab:74:05:26:78:67:6c:5a:b3:ec:
fb:04:30:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:20 2025 by rpki-client