Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
File: FqX_fn4arzjlmWnWCYBKOz8Fvog.mft (raw, json)
Hash identifier: fPxV4pH/E85GKHQHnL/m9uYNsdlXC5N9uNDLChHIGEA=
Subject key identifier: F1:5C:2D:C4:FF:E7:24:43:63:AE:AC:2B:6A:DB:02:48:21:90:D0:B1
Authority key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
Certificate issuer: /CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Certificate serial: 0194BC3C28C73DA0C22D83174A7DE45DCAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
Manifest number: 0271
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: FqX_fn4arzjlmWnWCYBKOz8Fvog.crl (hash: AQccS7JGdheXB4hIrZiBO9AtISE/aRdvAn1IPras/uM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:28:c7:3d:a0:c2:2d:83:17:4a:7d:e4:5d:ca:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=f15c2dc4ffe7244363aeac2b6adb02482190d0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:90:de:63:4b:f0:d1:b6:ac:37:98:84:d8:
88:66:9c:67:ec:a3:26:47:b9:ca:28:74:eb:62:14:
9c:a5:80:b5:69:3d:ce:a9:7d:f9:b3:66:7f:a9:4d:
8a:cd:f8:21:6b:ef:6e:4e:96:06:0a:44:d4:59:8e:
1e:6d:62:22:fe:0c:2c:fd:29:ac:f7:9a:bb:d2:04:
5c:fe:b8:bc:73:b3:97:90:a3:3b:29:53:8a:97:48:
0b:42:86:fd:df:9d:78:23:0c:39:7b:6c:ed:72:36:
68:63:de:2d:3d:3d:da:ae:6e:b5:18:01:3c:77:8b:
95:26:d2:f9:bc:2c:9c:96:e5:8c:81:b5:b9:c0:06:
eb:93:6a:31:52:2f:db:36:f7:c3:e4:85:f8:d6:c5:
2d:17:1e:7d:54:08:f7:0a:9a:30:88:46:ee:56:ac:
21:64:08:7a:61:a0:24:c6:6b:91:d5:32:76:9a:4b:
a5:6f:15:ac:2b:f8:a1:a6:89:f2:93:64:56:8d:1a:
a8:db:95:7b:56:e6:a2:3e:7f:08:64:40:e7:d6:48:
0a:dc:03:f2:fc:42:bc:6a:f5:3e:0d:fa:94:2b:e0:
17:42:df:06:6f:43:0a:26:bd:7d:57:47:c8:de:02:
35:d4:d8:7e:3f:f5:53:b5:f8:78:0b:49:20:b7:3c:
9b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5C:2D:C4:FF:E7:24:43:63:AE:AC:2B:6A:DB:02:48:21:90:D0:B1
X509v3 Authority Key Identifier:
keyid:16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cb:2b:15:76:4f:23:2c:a7:1d:c1:c5:d9:3c:97:6e:ec:a7:
4e:76:c1:9e:6c:e5:27:f5:04:27:1f:6f:f6:8a:a6:9a:d9:15:
3b:c1:48:19:af:17:63:59:cd:54:e1:c3:2d:2c:cf:ed:ae:43:
df:31:d0:ef:78:68:8b:16:19:e5:72:30:17:4a:60:42:56:d0:
f7:fa:91:6a:84:bb:f8:c3:fd:bb:b1:5a:a6:fa:1e:b5:35:c3:
40:a3:2e:54:eb:81:93:69:22:64:8d:c6:50:e3:f5:dd:a1:d2:
9d:60:ce:94:43:c1:f1:24:b4:7d:0f:1d:4b:79:48:6e:7f:08:
ea:9f:a6:d3:7f:d0:ae:54:dd:dd:f8:72:fa:67:98:12:12:e6:
ae:6f:fc:41:19:01:1c:41:52:0c:63:5a:06:7e:b2:d0:6c:60:
92:07:e9:d7:5a:b9:b7:95:ba:23:76:64:b0:9e:4f:9b:5f:82:
c9:bd:1c:b5:9a:e3:25:91:c9:09:73:ba:40:3c:17:ce:81:21:
d7:dd:40:39:87:d4:ab:91:9f:98:b9:b1:ea:b6:8f:eb:66:ef:
49:c4:19:48:a0:eb:55:f9:f8:12:9b:59:94:53:3f:e9:de:b2:
be:bd:ca:e8:86:3b:9f:8a:5b:64:11:dd:99:eb:89:31:11:d5:
98:fc:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:47 2025 by rpki-client