Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
File: FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft (raw, json)
Hash identifier: Br2WeomD7Lf/Wihz714LwSV7S4N2DTMNZdda0fCeG2A=
Subject key identifier: 47:E2:6D:16:03:78:46:A5:E0:5E:CA:37:05:BA:5D:52:B5:80:F4:17
Authority key identifier: 14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1
Certificate issuer: /CN=14a9d3c7406e276005488871d5218c05a07166d1
Certificate serial: 0194BBCE6DFC18440D17E245EB37E96D6ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
Manifest number: 09DB
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl (hash: MPjSiAHf8rlVG7E6UgufNkIcnEdzqZNl9hHyq8rBulk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6d:fc:18:44:0d:17:e2:45:eb:37:e9:6d:6a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a9d3c7406e276005488871d5218c05a07166d1
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=47e26d16037846a5e05eca3705ba5d52b580f417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:3a:4c:10:b2:6a:cb:40:79:e6:55:0f:56:
87:d8:d0:7d:6d:e6:d2:d0:28:d7:e5:71:80:d5:0a:
5b:d5:08:dc:0f:e7:bc:d4:0d:26:83:66:d6:95:42:
ce:44:2c:fa:66:77:b9:e4:aa:e8:e0:99:52:dd:e9:
2e:69:f4:f6:97:9f:40:95:2d:82:3b:cf:11:00:50:
90:ec:ce:22:17:c0:16:2e:38:7b:e7:1d:69:ec:80:
8b:ca:4b:4e:de:ba:c7:33:69:8a:26:cd:db:cb:43:
ac:b0:0e:71:df:14:6c:8e:6f:94:ef:42:86:bb:6a:
d8:5b:30:e0:91:ea:9c:b8:6c:ab:35:19:3c:77:a2:
0a:a7:74:dc:75:75:a4:d2:e5:1a:dc:15:87:e1:ac:
93:dc:62:35:59:29:6c:db:95:32:c3:f5:2e:5d:05:
42:f6:17:56:0e:41:96:78:c5:24:0a:52:9b:a2:e8:
04:99:0f:c6:0f:7e:48:e0:56:e7:25:72:e0:f6:01:
26:78:e1:3e:fa:3b:e9:58:10:66:2d:f5:59:38:31:
e3:b2:9c:ef:c5:8b:55:5f:4a:f6:13:4f:a3:c5:43:
1e:59:01:56:84:4f:22:3f:d8:c0:52:52:37:52:20:
31:02:b4:8b:6c:ac:26:bd:35:5f:55:3b:b6:82:10:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E2:6D:16:03:78:46:A5:E0:5E:CA:37:05:BA:5D:52:B5:80:F4:17
X509v3 Authority Key Identifier:
keyid:14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ad:e3:52:c2:6a:e1:09:b3:8a:28:6f:da:a7:25:a3:6f:b7:
3f:e3:b8:a9:12:e0:b1:54:b4:a6:eb:7e:f6:fd:72:ec:c8:e6:
c3:8a:09:78:e6:81:50:8f:e6:98:64:cc:84:f5:8a:50:5e:21:
e3:ef:a2:f5:95:34:67:b6:c7:36:db:21:b8:94:2e:ff:86:0a:
3c:9b:55:8c:87:01:ac:d4:bc:bc:0f:ea:93:88:08:2e:02:27:
a3:1b:53:04:83:97:eb:fb:e7:81:89:20:46:c9:bf:85:21:6b:
4d:46:43:36:a9:d4:13:13:04:50:1e:f4:ad:1d:b0:a3:c8:97:
0c:df:bb:47:bf:ca:cd:42:42:48:1b:41:a9:8f:55:bb:3d:d4:
c3:40:eb:65:ca:d5:87:4d:c5:6d:d9:e0:ea:e8:4d:ca:ac:dd:
82:71:5f:1a:0d:09:9b:da:25:99:cb:4f:ef:71:97:b6:4d:18:
d1:45:4f:01:02:ea:45:73:4d:7e:02:ab:59:e8:4e:e2:11:91:
04:e4:b3:f1:23:52:e3:ad:bc:e7:56:14:81:a5:50:f1:d1:f6:
cf:ba:2c:68:88:69:26:bd:39:6a:32:09:8a:c9:4e:2f:3d:f1:
31:44:38:20:1b:f6:42:62:1e:52:2c:26:a0:9f:4a:56:22:c4:
d4:5a:c1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:10 2025 by rpki-client