Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.mft
File: FKYzWehOAMD54qID6tJ4GibZBOY.mft (raw, json)
Hash identifier: yhyTUyUnjhx06GYABLs5avMTxomqFukd/tCE/SrKD4o=
Subject key identifier: 8E:D5:D1:73:5D:81:71:41:FA:BB:9D:84:43:55:70:DF:82:45:92:CC
Authority key identifier: 14:A6:33:59:E8:4E:00:C0:F9:E2:A2:03:EA:D2:78:1A:26:D9:04:E6
Certificate issuer: /CN=14a63359e84e00c0f9e2a203ead2781a26d904e6
Certificate serial: 0194BCA9BC2E7D06FC0D4A06FC6B0DF836D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKYzWehOAMD54qID6tJ4GibZBOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.mft
Manifest number: 07E8
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: FKYzWehOAMD54qID6tJ4GibZBOY.crl (hash: qPAzaF23bn6SgrE5BLd2pJXRYfRxH/Ti6Hb7UtGyGSA=)
2: _6aoVlBUwlPIw613OqnPUhF6Stw.roa (hash: cWQaozMHwttAsgSmgf91geachnA2gCeK71KFOrFjrOI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bc:2e:7d:06:fc:0d:4a:06:fc:6b:0d:f8:36:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a63359e84e00c0f9e2a203ead2781a26d904e6
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=8ed5d1735d817141fabb9d84435570df824592cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:fe:d2:3a:73:35:17:f0:22:3a:1f:c7:d9:
ed:dd:30:70:e7:b6:46:a4:6c:ee:2e:7b:89:7c:e0:
07:6a:24:41:3d:7e:c6:65:93:e7:a4:c7:32:b7:a7:
2f:9c:28:c7:df:da:78:76:f0:be:1b:12:12:dc:57:
7b:3c:ee:9d:d3:b7:87:6b:06:c0:82:6a:55:a6:1b:
54:82:14:39:6d:78:ac:19:ef:d2:9f:75:ea:81:12:
bb:63:ea:c8:fd:e2:75:8c:07:13:f4:53:48:02:97:
32:c7:91:56:fa:6f:95:93:b7:b4:12:1a:35:3d:b8:
15:b3:6e:db:66:07:fc:93:de:ef:1d:fa:e5:ca:c0:
6d:20:32:12:51:c3:8d:c8:35:34:8d:1a:55:ff:4d:
90:cb:a8:83:50:46:7f:17:9c:82:c5:b1:92:21:82:
5c:8b:b0:a7:21:2b:00:d6:99:ec:27:e4:50:8a:f4:
32:18:26:0d:ec:e9:8c:8d:49:4c:d4:ee:45:2f:9a:
02:24:78:a1:b5:51:f3:40:0b:b0:50:14:15:54:ae:
d7:3a:8e:64:b7:2a:d7:49:30:01:ed:e3:0c:a3:e2:
ce:d5:57:ed:ab:75:5a:15:a2:2b:9a:4f:fa:7a:81:
b3:9e:bb:f7:ea:e1:da:b7:56:61:83:08:62:5f:8b:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D5:D1:73:5D:81:71:41:FA:BB:9D:84:43:55:70:DF:82:45:92:CC
X509v3 Authority Key Identifier:
keyid:14:A6:33:59:E8:4E:00:C0:F9:E2:A2:03:EA:D2:78:1A:26:D9:04:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKYzWehOAMD54qID6tJ4GibZBOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b9:5a:4d:2c:f1:93:bb:3b:67:10:a1:d9:d9:84:7a:9c:a1:
c7:ac:ed:aa:2f:a5:c5:e5:76:41:55:26:7b:59:94:f2:aa:8e:
19:be:32:c1:27:0e:e5:cd:ff:8c:05:38:90:2b:87:84:75:51:
cc:7a:f5:7a:b0:84:3a:cb:34:60:28:49:37:5f:a0:39:28:05:
6b:f1:bb:33:a0:03:d8:2f:98:33:30:ea:cf:96:e2:2c:43:b5:
98:45:d7:da:16:b4:2b:fa:ef:3e:8b:ed:55:d2:a4:3b:5d:41:
8a:a4:6b:94:f5:ae:a5:6d:e2:4b:11:23:fc:ae:a9:66:70:78:
b0:5f:c4:b3:e7:bc:6c:90:84:05:39:69:88:d1:0a:cc:a2:ae:
b0:5c:a4:e8:42:05:93:fc:23:74:86:27:0b:87:dd:fe:47:8c:
2a:65:43:5d:6d:97:30:51:d5:51:40:b6:55:53:95:51:65:2c:
45:62:ea:92:4d:ef:11:8f:c9:68:6d:fa:dc:08:68:de:3d:51:
ed:78:b6:03:7e:f5:41:0d:15:b1:cb:64:d8:84:37:95:1a:ce:
1f:c6:3c:3e:58:42:f3:32:02:e6:f1:92:33:5b:f0:0d:d0:4e:
9b:36:69:b7:df:cb:0e:04:79:f2:c0:6f:33:58:27:40:07:fc:
2e:ad:b6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:57 2025 by rpki-client