Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier: GT6AJERZXTOjVBYDQK1f5l1AH1QgR6XRtPJcvk+X8h4=
Subject key identifier: 74:93:77:92:5F:35:60:7C:EC:0A:7D:58:AC:24:59:3E:78:41:49:3A
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial: 0194BD4E496128E2C6430990C1017F7493ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: 6GDeDOWFL+yb4qcmjMtn5q24ozXaD3GjAFWXqm3uv9Q=)
2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:49:61:28:e2:c6:43:09:90:c1:01:7f:74:93:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=749377925f35607cec0a7d58ac24593e7841493a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:d4:c1:ef:a8:f2:bd:0f:2a:bd:80:e7:09:
1e:f9:43:c6:28:80:f5:5b:cc:59:9e:4e:f2:86:e4:
89:c0:63:81:c8:a6:be:a5:9d:57:8e:20:09:bf:46:
73:ab:2f:b1:78:4f:03:85:7a:bc:15:22:4c:08:88:
1a:ed:f9:64:6f:f9:b2:64:34:c9:fa:d5:49:ce:c8:
47:cc:07:fa:11:a3:52:71:70:d9:d8:c2:c9:32:e0:
17:73:c6:9c:d7:c5:33:47:3d:07:bc:c0:2c:01:ec:
b7:4c:66:81:6a:f2:c4:f4:94:ee:57:db:33:64:22:
27:01:c7:a4:16:51:72:ce:44:be:d1:11:fa:f3:c3:
1b:26:63:5c:04:d0:de:73:fb:e5:ed:cf:ef:f7:f7:
00:90:ae:17:42:ee:a2:0d:1d:f0:d8:05:53:15:50:
fd:be:63:45:0a:52:ca:c3:2f:9f:ad:bb:1a:a9:b9:
33:89:93:1a:82:a4:53:5a:3a:e9:c7:01:c7:33:1c:
c4:76:8e:50:36:a4:8f:fd:0d:87:a2:3f:36:f4:f5:
63:fa:0a:f2:b7:47:a6:d0:1b:97:26:18:f8:a8:35:
04:38:18:99:88:08:26:97:07:d7:4d:9c:f9:30:c3:
42:19:ce:cb:49:71:50:22:da:51:58:b1:31:2f:b7:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:93:77:92:5F:35:60:7C:EC:0A:7D:58:AC:24:59:3E:78:41:49:3A
X509v3 Authority Key Identifier:
keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:89:1f:cf:09:a0:f7:63:49:af:f2:e9:d4:0c:0f:e1:38:fb:
0a:ff:27:5a:72:e6:07:9b:69:23:af:5f:c0:6a:ef:80:99:77:
39:b0:36:31:dc:a6:6c:03:82:61:ef:72:6c:fe:0f:68:52:44:
5e:46:1a:2d:ee:4d:e6:0f:df:cf:5c:8b:46:69:06:92:5c:5c:
94:ac:7d:45:f1:4e:51:fb:09:5f:6d:82:8c:28:1b:bc:cd:6f:
ef:dd:a2:61:19:5c:36:d8:6c:c8:47:e0:c8:be:f4:6b:9b:cf:
30:34:bc:53:e2:b3:d9:25:79:b8:2b:02:76:ac:6e:42:f4:d4:
92:7e:03:61:7f:7e:e1:ca:f5:cb:9a:c9:cf:1e:df:da:db:0c:
96:31:00:f7:e2:3f:35:64:b6:5a:6a:00:73:c6:45:ec:b3:9b:
04:79:c4:94:9f:95:93:15:6d:a0:b9:88:ea:9d:02:df:bb:dd:
01:8e:84:9d:d6:78:78:c4:ae:9b:07:31:a5:1d:9c:d7:4f:a3:
d8:27:73:5f:66:5a:d8:7f:41:02:4b:23:c7:87:5d:bc:48:2f:
7c:c8:b8:da:db:aa:9f:f9:eb:0b:9b:af:11:83:8e:18:0a:97:
b5:01:8b:07:f9:13:28:d6:dc:2e:06:62:c5:a7:f1:3e:65:5f:
12:ec:93:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:42 2025 by rpki-client