Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File: FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier: houTYO6+ybE9WX/KB0f02E95dDv8fEH04RaYmrP6UqM=
Subject key identifier: 19:3B:74:3B:D1:3C:CC:81:E2:6B:0F:EC:AC:BC:49:F5:3C:30:31:6B
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer: /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial: 0194BCE093068C8062C41834F5E089CC6FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number: 0C9E
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: pi+Qdg00bDROotXH4svOwyb/vo2e46iOvG3XqsaQHRU=)
2: f0fm_m6mqyncGFPg2zPkibsoBcI.roa (hash: R5AqcJr/crlHYVpexq/9b2IVn+Dod1jCAKFqkiICDJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:93:06:8c:80:62:c4:18:34:f5:e0:89:cc:6f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=193b743bd13ccc81e26b0fecacbc49f53c30316b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:20:9a:71:01:5e:d3:60:02:ea:03:fb:27:
f9:eb:b1:06:72:d1:21:58:a7:43:74:07:ad:ad:da:
32:5e:4b:da:eb:3a:2e:e0:d9:8d:be:c9:ce:08:e3:
44:a5:4e:d5:70:0e:e1:68:26:4a:90:cd:20:de:b2:
9b:a5:75:52:a5:c7:05:dc:ff:a5:be:2b:4c:73:cd:
9e:02:e4:54:d5:e3:96:5a:66:c5:e6:28:9d:3a:bb:
13:53:75:7d:07:51:6d:f8:f0:8e:c6:cd:11:b3:6d:
1a:78:6f:60:7e:7f:04:cb:36:3d:0f:2b:f0:df:36:
4c:a4:a1:cb:7e:79:16:21:e4:fc:9a:03:ac:97:4f:
07:05:b2:06:18:ba:22:65:ce:62:37:98:45:33:9b:
e6:02:73:64:86:8a:56:90:67:b0:e3:e6:30:35:5f:
99:44:8b:85:89:34:fc:29:67:dd:1a:da:0c:35:f0:
5f:8a:65:4b:aa:60:12:54:ec:1c:32:d7:65:32:2a:
67:a2:5f:08:ae:e3:a2:a1:e0:9a:60:26:57:4a:7b:
90:25:95:1b:89:35:f3:8a:55:88:e2:d9:52:0b:fe:
66:e4:df:b6:93:fb:c0:13:f0:1c:6e:06:08:dd:f0:
a0:22:4a:9a:9f:8b:bf:ee:74:eb:9f:13:56:37:a3:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3B:74:3B:D1:3C:CC:81:E2:6B:0F:EC:AC:BC:49:F5:3C:30:31:6B
X509v3 Authority Key Identifier:
keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5b:28:ec:dd:02:3b:7d:b5:b6:b6:0e:65:c0:21:54:68:74:
c3:f4:f9:c3:82:7a:5a:8c:44:63:a6:9f:bd:a6:31:a8:ab:58:
d6:84:76:62:7b:1e:2e:6f:9c:92:fc:35:b1:a4:5a:20:1c:67:
4b:13:e3:c9:44:0c:56:a1:07:1e:69:df:a9:87:05:5e:3d:ae:
08:c2:af:ac:d9:ee:8a:10:49:3d:ef:b0:3d:a8:ef:a0:25:24:
b3:1a:3d:b0:96:5d:3e:25:0b:70:6f:b2:3c:f1:31:0c:dd:03:
2f:c1:7c:22:65:97:0a:05:e4:d0:78:d5:d6:86:bf:51:bf:13:
e5:37:ec:a3:a9:2c:85:26:c3:5f:d5:f5:3e:2f:ea:6f:27:25:
61:c5:1d:c7:0f:5a:0a:86:35:92:49:0d:fa:63:68:5c:b3:9d:
13:de:b9:4f:5f:09:54:3e:0b:58:35:5d:6a:5d:f1:bf:5f:58:
56:2a:48:7f:11:09:fe:9f:81:9a:7c:c4:f5:60:33:51:09:e3:
52:0f:15:e7:9d:c4:c1:e8:61:e1:df:24:41:c1:21:c4:49:67:
93:ac:5f:fc:f4:49:e6:6a:c0:b0:bf:9b:a3:0e:e8:21:70:16:
dd:f3:fb:e2:d3:dc:8d:2f:7d:6a:90:f8:da:63:0d:f8:fa:1f:
e0:de:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:58 2025 by rpki-client