Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
File: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft (raw, json)
Hash identifier: urYHRF0e50kkqXtuEkSrklVorY2zv+fDvLd8CRHi6sg=
Subject key identifier: B0:44:69:64:85:18:47:05:F5:7E:8A:62:A8:A1:8E:A5:6D:44:64:84
Authority key identifier: 16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
Certificate issuer: /CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Certificate serial: 0194BCE0837180249B1AC43D8F2EF13F229B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
Manifest number: 08F2
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl (hash: qV768R4q67nEiYjZR3XN8/elCJQBbrRCSAImLuCRz8A=)
2: KhY12QXPgZGvijy8NVkM5-EZS4E.roa (hash: CzHA8lyjc+xI7dPqpc2iJoeImIrTVoVteRcgbm8dNIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:83:71:80:24:9b:1a:c4:3d:8f:2e:f1:3f:22:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=b044696485184705f57e8a62a8a18ea56d446484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:15:c4:1f:64:cb:f6:ba:5b:4e:59:42:53:
bb:c2:cf:a8:a9:f2:3b:d0:69:2a:83:54:7e:2b:2c:
8a:60:20:ba:c5:b0:81:f0:bf:27:78:65:55:59:c2:
62:65:58:7d:a6:b5:39:ef:50:75:44:61:41:6d:0a:
99:be:3b:3b:37:55:a0:b0:67:f6:93:c2:f1:f0:65:
1f:21:e1:d2:43:5b:41:16:fe:b1:3f:21:dd:24:70:
50:14:b8:23:41:b6:67:9b:f5:4a:7c:61:a0:3b:56:
2d:4b:ab:31:b0:e1:44:6f:41:d6:f2:14:5c:a6:82:
7f:f8:d2:63:09:a4:19:d9:68:9d:29:a6:84:30:f6:
71:95:ab:c9:26:5d:7e:36:bc:a6:10:8d:df:1d:05:
f1:f0:ad:a4:76:fe:84:0f:11:09:c1:79:f2:8a:50:
26:1d:9b:3c:07:f1:5a:1f:8e:66:7e:19:d6:47:7f:
30:c6:57:e1:e5:9c:98:08:9d:79:ec:21:84:0a:45:
61:a5:94:3e:90:fe:59:38:1f:1d:09:42:93:8c:dc:
50:f4:95:d6:ee:75:7a:8b:d5:f7:06:5f:83:b6:bc:
a1:c4:5d:57:32:a6:7e:77:e1:e9:c6:e3:da:ed:13:
73:25:70:46:af:a5:03:63:f6:1d:7d:95:7e:49:53:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:44:69:64:85:18:47:05:F5:7E:8A:62:A8:A1:8E:A5:6D:44:64:84
X509v3 Authority Key Identifier:
keyid:16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:77:de:10:40:e6:2f:1f:d1:1e:da:5c:eb:f6:68:fd:7a:1a:
51:1e:a0:7e:f7:e5:01:43:b4:ae:73:b2:24:5e:d9:45:12:55:
35:70:f0:a0:a1:fe:8d:04:30:8e:37:d2:fe:50:98:a5:85:b1:
d2:30:11:24:49:ea:a6:fc:1c:e0:7f:68:fd:ab:e6:cc:a3:72:
d2:91:84:59:44:01:e9:a8:61:b5:1f:24:cb:70:5f:fb:21:ca:
28:ce:86:99:b7:57:f3:34:fb:40:58:11:09:f2:0e:93:8d:31:
4b:91:0b:6f:c5:8f:8b:a2:0b:fe:5b:3b:ad:b3:29:1f:e6:2e:
59:5e:06:a2:d7:f7:fd:4a:f0:9d:2d:9a:84:ff:58:4f:54:1f:
7f:c9:f7:d9:a8:bc:76:dc:ce:b2:f1:8b:db:34:61:9c:c1:f1:
72:32:32:61:d9:62:3d:76:01:e3:d4:bd:89:9a:14:4c:98:d4:
12:6c:95:13:24:50:fc:f1:0a:f8:16:cc:a8:55:51:15:65:e2:
72:04:bd:bf:95:8b:1c:06:aa:08:69:72:ed:9a:e9:b5:2b:d7:
f9:79:a6:81:74:cc:fd:eb:b2:92:e7:1c:84:5a:04:f0:7d:71:
da:ee:a3:e6:c0:df:11:1a:d6:d6:9f:a8:33:6a:75:40:14:2e:
f2:d4:53:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:47 2025 by rpki-client