Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
File: FgVYAbd153QwYyFFX9Rj-9knPEw.mft (raw, json)
Hash identifier: LCM8cv3vOsgauxr1U14buIBhXVuu2XiJqAsosveZcAc=
Subject key identifier: BD:1A:4E:05:56:97:1A:AD:09:83:27:7A:31:48:0E:55:47:32:07:96
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0194BC731F71C0E3036879760402584E6B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
Manifest number: 018C
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: FgVYAbd153QwYyFFX9Rj-9knPEw.crl (hash: Cb7IN+2nxZmBiFiG4MKCEMKoLzape5oUVFN+ctvZPF8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1f:71:c0:e3:03:68:79:76:04:02:58:4e:6b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=bd1a4e0556971aad0983277a31480e5547320796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:d6:4b:c9:28:91:65:88:c7:86:f3:ea:ee:
11:fc:0c:7b:ed:ae:77:95:35:6c:7a:63:ec:76:8d:
aa:dc:37:ca:e2:61:3a:cd:62:ad:99:7e:2d:b5:bc:
29:1e:46:cf:95:e9:23:5e:ff:63:41:62:d1:b3:96:
6d:da:18:ef:c6:ae:38:a8:b3:76:ed:e0:9c:99:ab:
17:db:fe:57:de:79:12:09:76:a3:a7:fe:cf:90:c6:
20:1e:c9:c2:1a:a1:2a:16:b4:d1:53:1e:8a:cd:bd:
13:83:83:e2:e6:61:4f:fb:91:80:23:e2:48:8c:35:
bf:f5:66:6a:65:05:0f:4a:c5:ad:d6:48:91:c5:94:
d7:69:80:25:f6:5c:4f:31:7b:7f:dd:ce:db:e7:4b:
59:4a:11:19:a3:e6:06:6d:e4:83:4d:62:ea:ed:5d:
58:91:81:90:d2:c4:14:90:c5:ba:38:d9:7a:d2:1e:
fe:66:20:2b:f4:9b:d1:f4:95:ae:0e:b1:06:75:69:
a1:80:77:ec:7e:ae:72:24:33:09:83:0f:fd:7a:2a:
74:6c:fb:f5:88:36:1d:4f:f9:0b:e2:e5:25:68:ea:
52:df:02:a3:9c:52:92:2e:b2:37:d7:e1:de:77:f5:
32:fa:8c:d5:f9:d6:ba:17:11:00:d6:bb:92:4c:1b:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1A:4E:05:56:97:1A:AD:09:83:27:7A:31:48:0E:55:47:32:07:96
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:17:3d:78:f4:04:cb:66:95:92:30:aa:fb:ee:b3:c3:cf:c1:
a9:5a:41:6c:61:e9:1e:1a:f7:6f:67:f6:18:ca:c7:e3:4d:02:
b9:42:e6:3d:b6:59:00:98:b8:16:72:de:71:bf:a9:ba:c1:80:
f7:10:9c:b8:2d:e9:89:fd:12:a9:44:8d:7f:ad:a6:76:bf:0b:
8a:54:e3:6f:e5:dd:de:03:4a:bc:44:a9:ad:d1:0e:f1:e2:34:
af:95:de:96:db:d2:9f:60:4b:81:05:ad:77:d8:2f:f1:fc:c7:
97:36:63:63:d4:af:22:1f:cb:de:b6:ab:e9:d1:fd:5d:f9:7c:
b1:84:be:cf:8d:8f:c6:df:98:ab:ab:03:c6:82:25:a0:5d:9e:
a8:78:77:3a:78:3d:c6:f0:b7:64:db:7a:4b:a3:09:93:ee:40:
d4:5f:c7:fb:00:df:64:a9:30:b0:90:d0:cf:20:f2:70:f9:b6:
ab:9b:47:d6:33:62:8c:a6:0b:58:19:01:17:84:a2:a4:2d:fb:
85:58:81:c8:7d:a4:a0:6f:9c:97:1b:fc:0b:00:52:88:3c:d7:
c1:41:a4:a1:39:4c:18:01:16:63:39:00:29:92:c1:96:23:f1:
cf:cb:a3:f8:6e:17:80:17:d6:b2:44:d2:ae:e8:69:57:b8:6a:
ce:cf:b1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:14 2025 by rpki-client