Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
File: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json)
Hash identifier: 87OrrKUVE2PhtuiQuEKOFr0E70dcbkuB7y9uMjXZZ88=
Subject key identifier: BC:80:3D:CC:0A:90:AE:FC:2E:DA:1A:38:27:85:A0:65:14:37:B7:DE
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial: 0194BCA9E95D9EDA2EBE5FE57AF668CDE1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: ptJmZ9iO+bXn705ehPKwLaXXB4Q5QShHpRh39HBoQ9M=)
2: JFz1OMtyYE0bdrPpAzWAHxoNfr0.roa (hash: GCMi3F+baVVPvUwQFwt0LCTFyVV4lIfA34WPsvrvO6A=)
3: RnPjQu1TRB6OusL4aMQpC4JKqmI.roa (hash: fzeYA/Ogqc2irWhfM/UbWuBPWyUJiutWTEcNUX+4+LU=)
4: Ut6Isd3FyfcwFqXffcOSTj20big.roa (hash: 6WWf7LzHGfNpFV/UMH6n5UZ2IDbI9b8RYTztg7MMT9k=)
5: YrBEbKYcRihrrXhf5rGMn4NnWP8.roa (hash: 0EjDwiQerEsJrNpiAV/U41dtG8QfC+EEgtF9mTKQLqE=)
6: oVdkjWCoO6UKiUnCLGAAHjBO9ms.roa (hash: 60Qb8QX+Ft+JLMQ7m3ymUwisPXVeh0oMfLPMdsaJtK0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e9:5d:9e:da:2e:be:5f:e5:7a:f6:68:cd:e1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=bc803dcc0a90aefc2eda1a382785a0651437b7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:10:ca:62:0e:bb:3c:10:19:6b:6c:37:f7:be:
de:89:c4:62:11:a2:41:aa:e6:2e:66:3e:4d:0f:c7:
7c:1b:7c:f8:ab:89:99:f0:01:11:e0:f6:3c:72:ee:
1f:34:e9:e9:86:db:3c:bc:65:72:2c:85:8f:7e:ab:
f0:27:ec:df:f2:71:00:bf:5a:76:90:ea:b5:72:e6:
fa:9f:85:05:49:5e:f5:07:d6:01:56:eb:e0:ae:a4:
70:6d:c2:d6:04:08:44:9b:41:ce:d9:ba:9c:5a:1d:
81:72:b0:f1:f9:74:fc:42:e9:d9:79:4f:06:e6:ae:
df:90:c6:ab:26:a7:2a:b3:58:af:24:f9:29:fb:32:
cd:e9:63:64:7c:87:36:9a:4f:6d:ed:99:b6:d2:f5:
d5:3f:52:f1:16:9c:03:9a:d6:f1:b6:d0:eb:98:98:
dd:32:d2:5c:1d:c9:47:81:22:46:d9:56:f3:5f:ee:
c3:bb:e0:0b:11:32:8d:02:db:09:0f:ed:9b:28:04:
97:03:92:f5:2f:69:a9:8e:d2:ec:f7:d9:b6:d3:16:
69:ef:b4:9f:a5:79:a9:5f:50:2a:d3:7c:79:71:68:
7d:af:b6:f7:b8:66:2e:a8:01:8c:65:01:6d:04:8f:
15:da:14:be:ba:d1:6b:25:ad:92:69:8d:5d:8b:11:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:80:3D:CC:0A:90:AE:FC:2E:DA:1A:38:27:85:A0:65:14:37:B7:DE
X509v3 Authority Key Identifier:
keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4f:35:03:48:96:1a:21:e5:59:3d:35:24:42:7c:50:54:91:
fb:70:39:6b:c1:67:9a:d7:35:7d:d1:d2:e2:41:25:7b:8d:0d:
08:9b:e3:30:f8:33:b9:68:42:a4:ac:9d:84:58:0c:7f:40:e6:
5d:1a:48:30:f3:93:4c:cd:06:97:ea:59:ae:5f:f4:a9:7b:30:
be:3f:29:18:a9:f5:ee:ee:c5:80:0f:ff:22:b4:e9:88:c4:2e:
10:7a:18:4d:f1:56:23:da:85:d3:8f:43:4b:0c:1d:80:36:8d:
b8:17:df:4f:7d:56:7c:27:4e:a5:7b:06:e1:af:1e:9e:a0:ba:
ff:97:77:8f:28:d2:36:65:c9:16:b5:c9:6c:2a:4e:cd:dc:d9:
03:f7:9d:43:1e:20:7b:9f:d1:39:d2:02:66:0b:a2:d3:5d:da:
e4:0e:a3:e6:8c:d2:96:be:7f:88:a0:d6:e1:f0:32:7e:31:b5:
d4:e1:e8:83:5a:45:c0:18:69:7b:0d:f5:f6:85:e6:e2:a4:a5:
41:87:c9:91:31:bf:6a:55:7a:30:0f:66:6d:a5:ff:43:81:23:
13:23:db:12:0b:b7:c3:ce:81:bf:b9:fe:ab:63:58:74:c6:1f:
9a:f4:a5:d6:93:43:9a:8e:9b:16:b9:54:18:6e:b4:32:9a:90:
00:0e:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:18:33 2025 by rpki-client