Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: 8Dyj6K0HW8dtOme6e5UVUGf7e/W71glosbF9kuE1T1M=
Subject key identifier: 40:09:9B:08:49:7B:B6:6C:60:DA:23:12:CA:2F:FC:2C:6C:B1:D1:90
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 0194BD4E37C8C44B4D77B1AEBA1228DEDE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0A31
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: bD2m90btrm9tRX37BIgtLE21CTlvuEWWuZ2b79TFlRk=)
2: XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa (hash: LgD69e+nouQ5z7eZNAgfyUxJCnIL4Pp/DimPZswYsNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:37:c8:c4:4b:4d:77:b1:ae:ba:12:28:de:de:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=40099b08497bb66c60da2312ca2ffc2c6cb1d190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:bf:6c:a8:5c:b1:69:9f:ae:bf:a3:aa:67:
46:78:3e:af:7e:19:58:95:16:c9:8c:df:db:9c:9d:
82:2b:54:35:86:8f:83:27:d8:5d:c1:c6:d8:6f:9f:
c9:00:3f:c6:18:22:cf:62:7c:35:e7:bc:39:06:7d:
d7:4f:0b:3b:04:ca:e5:8c:09:c1:cf:6b:1a:2e:04:
da:83:06:ef:32:e1:2b:46:2e:f6:d0:b9:e5:b8:d9:
29:34:ba:d1:ef:33:3f:ef:12:c8:da:56:9c:e4:27:
20:5c:f7:ae:14:62:a2:34:c2:a6:01:fa:70:7e:96:
dd:b9:b8:ee:63:bc:e9:b6:fe:f2:ba:cf:75:83:18:
17:3a:2a:92:fa:36:62:6c:19:3b:9d:ef:af:28:64:
45:17:8b:5d:13:e9:81:3d:81:66:df:6b:02:de:54:
9f:d8:b0:ad:c1:c2:39:fc:e6:74:d3:7e:bc:52:8e:
11:71:c0:09:7c:bb:98:78:10:45:0c:c2:29:c6:b3:
b9:97:0b:fb:34:73:33:23:fb:a7:84:e9:e9:42:8b:
e2:75:58:e2:99:6b:0e:c0:b7:c5:f6:84:c0:f7:17:
1b:27:09:a6:61:36:29:d4:c4:84:07:54:98:fe:86:
14:4e:e5:b6:22:45:ef:c6:50:7b:de:72:a9:54:02:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:09:9B:08:49:7B:B6:6C:60:DA:23:12:CA:2F:FC:2C:6C:B1:D1:90
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ba:53:82:6c:ed:26:69:84:16:b9:f7:61:96:a6:2b:a3:9d:
b5:09:77:bd:eb:d9:88:4e:29:7c:e0:36:58:ff:62:5d:bb:f2:
7b:04:31:22:0c:b0:32:9d:8d:46:58:01:48:37:00:01:ed:2f:
8a:a0:cf:ab:00:56:9c:bc:00:1d:47:1f:a1:9e:d7:e7:7d:72:
81:53:54:2b:d2:da:8f:4c:72:6d:fd:f6:8f:15:af:61:dd:c3:
a6:2b:69:34:34:6d:6d:d3:8d:0f:f5:70:f5:6e:44:c6:11:ed:
17:78:9d:3c:74:85:e6:ab:bf:46:6d:12:00:29:d4:97:72:23:
4c:f0:61:22:e0:cb:d9:99:41:ed:74:28:e4:8c:ec:27:7d:b0:
f1:6e:10:63:64:5f:ba:02:94:e5:e0:92:67:5c:b8:17:b7:b0:
17:fa:f0:96:e0:86:31:f5:5b:4c:46:f2:76:fa:8d:29:12:3f:
41:83:c3:a2:bd:07:02:36:6a:35:23:21:66:78:07:65:6d:52:
7b:7f:8c:5b:96:20:69:ff:48:14:63:1c:41:b5:69:0f:f0:84:
e3:cb:21:6a:37:82:fd:19:6a:ca:7d:f0:ea:6c:d3:98:f6:49:
cb:f6:22:50:fa:13:db:65:24:60:ad:e0:3c:ab:0e:f4:de:56:
d4:66:24:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:09 2025 by rpki-client