Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
File: FqMhIVpNNe0imLBzlx20CIZP02I.mft (raw, json)
Hash identifier: ZYAglDIfYclOepEMMVBOPACa6jA5lR5fuxcidzrVCz8=
Subject key identifier: 52:57:BC:F8:37:12:B8:4A:30:3E:84:D1:7E:EA:3E:00:D7:0D:38:E2
Authority key identifier: 16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
Certificate issuer: /CN=16a321215a4d35ed2298b073971db408864fd362
Certificate serial: 0194BCA986AE2C95BAC2159791722330D54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
Manifest number: 0C53
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: FqMhIVpNNe0imLBzlx20CIZP02I.crl (hash: kGe+RsgXkz1jdc3EicTkJGcLjSz/tEiGI6UiNrT7MC4=)
2: q9FXpjO7WYpYF_PuEvxdIBNk31U.roa (hash: eU80FRwYJKXcKKPdsKCtTdJX7dfta5v66z6KC/V+tqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:86:ae:2c:95:ba:c2:15:97:91:72:23:30:d5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a321215a4d35ed2298b073971db408864fd362
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=5257bcf83712b84a303e84d17eea3e00d70d38e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:19:fa:2d:11:be:4e:c5:7f:38:9f:34:92:
93:cd:20:62:1c:1e:93:74:9a:60:ba:ff:40:7b:4a:
43:06:c4:9d:6d:9f:9f:5d:92:b4:d9:de:c2:8a:12:
82:cd:a3:a0:b3:4a:e4:b2:d9:0e:2d:a0:ea:28:43:
12:23:60:e3:5f:42:0b:70:f1:20:7a:e2:b3:2a:f0:
ee:d9:ad:1b:24:34:5a:17:d9:a7:d1:c0:54:00:6f:
d7:9d:35:c3:f6:50:a7:26:ca:5c:b4:91:f5:d3:03:
4e:4f:31:4f:71:10:2f:43:aa:2c:0a:ae:21:3b:10:
83:cc:08:19:c6:90:69:5e:b0:1f:cd:78:e9:94:93:
b7:67:f5:4d:c4:4b:09:49:30:7a:95:a3:a8:c3:8a:
37:2b:22:21:b5:e3:f2:02:72:a1:d3:1a:5a:ed:52:
08:60:8c:6d:52:91:b0:42:3f:11:cf:3b:8f:eb:76:
0b:30:5c:f6:d1:b1:ef:fc:21:93:15:ba:eb:94:18:
b9:d5:24:78:4f:c9:66:c0:ec:76:c5:50:5b:44:d5:
78:3d:86:e2:2c:ad:43:47:73:41:45:06:8b:bd:6e:
19:6a:bb:11:05:d4:f6:14:d6:3d:34:eb:bc:34:32:
b1:31:59:3c:14:c0:29:a6:0d:4a:30:82:53:15:7d:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:57:BC:F8:37:12:B8:4A:30:3E:84:D1:7E:EA:3E:00:D7:0D:38:E2
X509v3 Authority Key Identifier:
keyid:16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:c3:d4:27:85:73:fb:c8:0a:4b:78:a6:22:df:fe:e0:90:30:
5d:22:99:e9:1c:0e:29:75:91:bc:5e:28:d5:bf:42:cb:37:a6:
27:bf:5a:b5:09:3d:6b:b2:6b:97:a8:83:3e:19:50:36:67:ca:
80:03:09:c8:4c:69:21:e5:d0:cb:fb:b2:89:63:dc:10:b9:8a:
38:5b:23:6e:3f:8c:a4:3d:1f:0c:d6:7f:ad:a1:59:48:d8:3f:
2e:4b:30:50:d0:ec:2e:b8:7a:38:dc:74:a4:1b:df:39:56:1c:
49:4b:6d:e3:9d:88:7d:e4:b1:af:5a:c6:8e:2c:2a:0c:6f:74:
83:ce:93:6a:d2:ab:95:14:e4:02:4b:27:a2:37:7d:ee:d9:a9:
6a:1a:5f:41:64:6c:8a:9d:5a:7f:e8:43:88:4a:25:e2:f0:7a:
94:2f:3d:a4:90:78:2b:91:66:02:78:dc:ba:30:c8:22:1e:9f:
ec:f9:b0:de:17:25:9e:6f:10:56:72:e5:bf:51:d9:bc:5a:c5:
d6:aa:b9:00:13:85:be:86:a3:c0:fc:59:59:0c:a6:d3:fb:10:
a5:1f:a6:2a:8d:1e:b7:e7:52:98:3d:0e:95:b8:f8:42:6a:23:
e0:6a:64:c1:60:48:6a:3c:f7:14:fc:e2:89:c8:4a:73:e2:f3:
0a:33:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:43 2025 by rpki-client