Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File: FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier: pPYYNfa4KzxZGTjpK0EiwE0k1rdHQsL/iZ7DB8AkFYg=
Subject key identifier: A8:C0:E9:CE:3E:9F:EB:D7:C8:D5:BD:89:FA:FB:E4:98:91:03:F8:51
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer: /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial: 0194BBCEAAA52CE34FAD68EC72A168BE96C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number: 060A
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: KFcdMa8yPiT00EJM7vFu+I7+6/lfMxOXURGvHO7mi5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:aa:a5:2c:e3:4f:ad:68:ec:72:a1:68:be:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=a8c0e9ce3e9febd7c8d5bd89fafbe4989103f851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:37:98:bf:f1:c0:50:4f:d7:1f:fa:43:17:
fe:21:43:2b:24:65:b4:37:53:1b:6c:fd:b8:be:f4:
f2:a1:65:87:3a:95:ac:01:6e:c7:d0:21:e6:8a:1e:
01:d8:31:3c:dd:be:5c:0d:af:2c:73:fe:73:21:78:
2a:97:66:5d:02:eb:ef:e4:ce:18:49:55:9b:a2:61:
28:e4:ee:48:9e:4a:8e:57:f3:c6:6d:ee:cc:3e:35:
d0:ce:00:6a:b1:5b:ca:6c:69:82:cd:ab:b3:c6:eb:
19:75:b4:08:4b:92:00:76:76:7b:ec:05:9c:fc:75:
01:be:51:dd:b5:03:c0:9a:33:a6:f4:e1:1d:d9:17:
ee:a5:eb:c8:f8:5c:08:c2:b0:ec:05:56:7e:a7:8f:
f3:97:33:b1:93:e2:7a:13:c5:6a:f1:9d:4d:7c:3e:
a8:2c:d5:d6:38:60:37:96:9c:b5:16:fc:1c:6f:ae:
da:65:f4:e7:f4:cb:82:ba:af:fd:77:32:36:bb:07:
59:8d:fe:30:e4:de:b8:1c:5c:54:99:1d:01:df:e2:
14:7e:f0:0c:02:2e:27:3e:c8:8e:5d:0c:6e:ff:87:
cb:b9:a2:8b:ce:64:0d:42:8c:8f:9c:be:16:d3:23:
b5:3c:31:dd:2f:33:44:62:ff:52:e0:e5:83:5d:4a:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C0:E9:CE:3E:9F:EB:D7:C8:D5:BD:89:FA:FB:E4:98:91:03:F8:51
X509v3 Authority Key Identifier:
keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d2:dd:06:72:bf:4f:d7:df:46:37:70:6a:d8:44:2b:96:ce:
3d:a2:3a:82:ac:8c:05:dd:fd:32:50:7b:09:50:0f:4c:96:c5:
24:df:e4:da:9a:b0:1e:d6:52:9f:4c:35:9b:40:36:aa:96:32:
5b:f6:61:e6:dd:f1:a7:3a:67:71:44:45:b8:c3:ca:76:8a:5a:
a3:2d:0b:5b:8a:f2:f6:eb:88:2f:e8:bc:92:10:b2:30:63:e0:
ab:a3:8e:8f:a8:74:f0:12:6a:6a:f0:49:3e:a1:62:7e:9c:69:
59:ab:b5:67:ba:cb:bb:a6:d9:22:7f:5e:33:2d:80:4f:7a:b2:
9f:af:69:61:0a:fa:db:19:68:34:b4:52:f2:cf:71:b5:84:55:
42:68:4f:04:75:24:65:79:cb:8f:bc:4d:2d:7c:30:b4:db:43:
80:08:b5:10:2c:24:cb:b0:3e:c0:b9:fa:ed:2e:77:40:10:5d:
8b:42:de:36:e5:15:76:e6:0f:ea:45:af:2d:3d:1b:e6:a7:1c:
9e:1f:94:d4:81:30:ab:8d:7a:7f:b5:ee:b5:3c:2d:7a:cf:cf:
00:48:a6:ac:78:50:b5:6e:03:0c:94:68:44:67:3c:f8:ef:de:
4a:d1:76:70:78:6c:3b:8b:dc:89:6b:eb:fd:58:5c:78:31:83:
39:e0:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:52 2025 by rpki-client