Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
File: Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft (raw, json)
Hash identifier: Kjnq4esjHlzWEGGTjPdFPr8qtGfeH6B7bh+ZYUCiy3Q=
Subject key identifier: 21:37:37:A8:48:54:8D:59:39:D1:F2:64:7C:BA:79:B2:55:31:18:70
Authority key identifier: 16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
Certificate issuer: /CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Certificate serial: 0194BC729F3F8B57CAAD6EF2D246C2D6BB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl (hash: N4FA5dbB3CNCyq2KkQ0V42pLsIRMQKVkbbbISM5IXJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9f:3f:8b:57:ca:ad:6e:f2:d2:46:c2:d6:bb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=213737a848548d5939d1f2647cba79b255311870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:34:07:7c:49:42:8f:d0:31:77:96:70:8f:
57:a2:0f:b8:82:90:b6:68:83:3a:db:e4:28:85:52:
45:9a:1c:05:0d:0a:4e:7d:0f:1e:28:09:a6:da:2f:
80:9c:22:c0:01:41:23:3b:75:c1:c9:ac:7d:a8:65:
0e:c8:28:7b:f9:dc:b3:bb:4d:e2:b3:23:3a:2f:e6:
5d:af:5d:a7:2f:dc:48:42:b8:28:a6:70:b3:25:36:
12:1e:c8:5d:11:3d:a7:35:f1:98:5a:63:56:54:7b:
56:89:1e:b2:cb:6c:5b:49:e4:cb:d2:4f:72:01:c0:
21:96:7c:c1:5e:43:25:88:50:e5:f7:13:c6:ec:59:
ec:7f:60:f9:9f:1c:64:d9:00:21:e2:ac:cc:03:b2:
28:2f:8f:29:10:63:a6:c9:05:87:e6:a4:70:3d:b9:
0f:17:80:c6:3d:22:34:dc:17:6c:30:99:cc:e3:bc:
d5:0d:bc:f8:8b:f7:65:c1:4d:9b:ef:63:fb:54:dd:
91:31:d2:55:9a:3e:3d:f5:5f:2b:17:5c:8f:88:b3:
0e:48:8d:75:4c:ff:64:93:f6:70:d5:84:4b:f2:55:
5c:8f:2a:d1:dd:f3:2d:c9:4b:cf:d1:26:d0:b1:23:
a6:37:2b:84:6e:32:71:45:c6:0a:20:98:ad:a7:59:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:37:37:A8:48:54:8D:59:39:D1:F2:64:7C:BA:79:B2:55:31:18:70
X509v3 Authority Key Identifier:
keyid:16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a2:f2:75:58:17:f0:4d:4d:7b:11:ae:d3:4b:96:c9:75:4b:
01:8c:6d:22:dc:21:b2:18:f3:38:1b:8f:6b:35:4c:a5:23:30:
32:af:a2:79:df:d6:32:5f:d3:0e:62:84:10:f3:4c:2e:8b:81:
91:ea:65:c2:68:3f:2c:5d:c7:af:74:c8:5f:f5:36:b3:0c:c4:
e4:92:56:f2:4c:f0:dc:58:be:cf:15:2b:f5:1d:f2:a7:41:06:
fb:62:da:ee:9b:40:dd:26:e8:5f:8d:a6:de:9f:63:d3:ba:7c:
2b:40:2b:aa:49:3c:30:a7:41:e2:08:92:ae:7e:0d:ba:e4:4a:
51:2b:bb:c7:e4:5f:df:da:45:27:a8:04:19:cd:50:45:c6:57:
3d:28:a5:8c:42:12:3b:40:00:92:e9:af:fb:b3:5d:46:ac:49:
71:ce:11:d2:26:4b:f6:fa:c9:04:a9:cc:6d:a0:2c:d7:8e:32:
51:3c:29:0e:b2:94:96:4a:4b:50:af:82:3a:68:28:44:0a:5d:
1d:69:46:a9:48:d8:b0:a6:9d:89:ef:16:cc:71:ac:64:51:ed:
37:56:54:b6:de:06:d1:3a:00:be:01:f0:08:55:36:26:1c:5c:
13:fc:a3:2c:22:59:bc:34:60:72:cb:22:c3:ce:3c:8b:10:6e:
ea:03:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:29 2025 by rpki-client