Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
File: FTD76iUBSVl304gVrTwnCCbwY6A.mft (raw, json)
Hash identifier: bnzYLG8ZBYQqVXA3QQLt6RszhpGXGqJhCzosH++7iaE=
Subject key identifier: 2E:14:34:33:93:B3:E5:90:62:13:A7:B9:41:FD:CD:C3:AB:79:1C:54
Authority key identifier: 15:30:FB:EA:25:01:49:59:77:D3:88:15:AD:3C:27:08:26:F0:63:A0
Certificate issuer: /CN=1530fbea2501495977d38815ad3c270826f063a0
Certificate serial: 0194BCE0EC09ECA4CEEC31BE2B1C576AFA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: FTD76iUBSVl304gVrTwnCCbwY6A.crl (hash: aJsLw0rmaFgAzn114hRaEBf+Pb1aavKoI7lnhKCQUGQ=)
2: rADueZxFQHJbIbrjKeYeAXGGBpc.roa (hash: qtSN6Vm03JzTJBZ5ewdm444W/Qon6bt3NPDuYq9sI8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ec:09:ec:a4:ce:ec:31:be:2b:1c:57:6a:fa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1530fbea2501495977d38815ad3c270826f063a0
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=2e14343393b3e5906213a7b941fdcdc3ab791c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:5c:c5:aa:ed:04:03:18:5f:8a:49:0d:92:
28:49:ba:35:48:73:06:43:c1:5d:07:4b:ab:9d:4d:
92:87:8f:9d:a3:d6:ef:7c:22:c5:3d:8f:19:2d:71:
34:d3:52:f3:32:47:e0:46:65:df:88:15:57:c5:80:
d2:28:44:e7:90:34:ab:a7:ed:aa:9a:11:f3:e9:2d:
64:f1:e2:a9:e1:df:7e:4e:66:f4:05:d2:2e:7b:7a:
0c:11:f7:f1:0a:37:09:29:43:d7:ef:8d:25:ea:05:
f1:1a:3e:fb:c2:d2:cb:b9:78:7b:2d:9b:9b:e9:26:
55:33:e0:bf:e5:3f:c5:3a:b7:dd:ad:7e:5e:68:1a:
be:ec:22:79:c5:f3:10:cc:fe:e0:cd:fd:96:b2:04:
81:1f:81:78:30:76:f9:14:dd:94:f8:f1:29:16:51:
f6:cc:35:ea:df:53:92:97:05:fc:05:c0:fa:bf:02:
50:b5:a2:db:07:24:24:23:d4:c6:01:8c:f9:45:84:
24:a6:6e:73:ca:49:a3:aa:3b:38:b7:b6:6d:37:25:
0a:28:34:96:c3:32:6d:84:10:1d:ae:ae:37:66:35:
c4:49:ac:f3:c9:bc:d1:de:86:7e:f7:59:5f:db:d1:
11:b1:1c:ce:2b:2e:4e:d4:a9:16:92:c6:17:fd:4a:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:14:34:33:93:B3:E5:90:62:13:A7:B9:41:FD:CD:C3:AB:79:1C:54
X509v3 Authority Key Identifier:
keyid:15:30:FB:EA:25:01:49:59:77:D3:88:15:AD:3C:27:08:26:F0:63:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c7:c4:15:39:5a:1c:d7:6e:06:36:8e:e7:36:74:05:48:66:
61:b9:6a:05:87:f8:bb:75:66:f1:cc:49:06:22:9a:f7:01:01:
7c:fa:9c:c5:8c:a3:a9:4f:49:c1:62:40:2e:11:3a:d8:a3:7e:
03:ca:96:f8:b7:ce:1b:ec:15:56:a3:87:16:19:54:38:ff:1e:
8d:73:6b:27:10:90:ec:78:7a:fa:40:bd:4b:b3:15:d2:8e:0d:
c5:1a:d4:e7:c4:e4:0d:e9:42:7d:40:06:e2:d0:c4:c5:47:10:
93:27:eb:ad:17:d1:a3:20:c7:63:da:fc:18:b2:5c:02:20:a1:
13:3a:ae:36:84:40:eb:b1:25:63:69:b7:51:0d:e3:df:29:44:
88:53:0e:34:bf:66:2c:a7:b3:fd:07:cd:6e:5c:77:52:36:76:
48:c9:43:e1:10:44:66:cf:ba:a6:e8:0f:4d:c1:b1:3b:95:c6:
5d:68:93:8b:ae:b5:d4:c6:2e:03:a1:30:7a:5d:14:49:b7:3a:
65:80:d1:43:51:da:0b:49:58:2c:aa:60:cc:44:3c:99:58:07:
62:a0:60:c4:9a:1b:c4:e8:09:65:0e:86:70:46:a1:4a:2e:7a:
0f:89:28:6c:15:86:25:31:05:0a:28:4b:58:22:60:74:ac:12:
d6:29:bc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:57 2025 by rpki-client