Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
File: Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft (raw, json)
Hash identifier: 5RKncQVM2fnbovvfmI+cT826n4gLcdWOBdkardVuWX4=
Subject key identifier: B6:CC:3B:4D:C9:42:1B:A4:9E:10:B2:E1:73:DB:DF:1A:B3:32:E5:FD
Authority key identifier: 16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA
Certificate issuer: /CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
Certificate serial: 0194BCA9C1532A30AD2B3C602A44F9E5A88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
Manifest number: 0ABD
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl (hash: Jc+0/oGzTPbv64xVxFqvmqJiR95QebLCR+Fr1O9UO10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c1:53:2a:30:ad:2b:3c:60:2a:44:f9:e5:a8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=160cf1daaff1dcb2765cdc4f78e8704e4e2b9ada
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=b6cc3b4dc9421ba49e10b2e173dbdf1ab332e5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:e5:18:fb:6d:fe:d5:5e:99:25:54:cb:ad:
35:bc:e5:35:a7:07:26:bf:01:5d:fa:5f:fd:ee:98:
ba:d3:33:84:8c:e9:f5:2c:66:bd:d5:1e:2d:32:c5:
ca:70:ea:e7:59:d1:ff:26:7e:44:f4:69:fe:12:38:
97:b6:92:a5:02:27:e6:cf:6c:dd:8b:fb:e3:42:a0:
89:38:fe:a4:0c:ec:02:24:20:a1:6c:60:1e:79:ca:
9d:8f:63:38:08:c3:10:78:94:01:be:49:42:c8:8b:
70:f4:06:5f:c3:9d:28:18:f2:c2:d1:92:0c:32:b3:
ff:c9:aa:43:1e:2b:9c:32:a4:03:38:86:cf:00:5f:
bc:75:86:06:65:43:db:d8:4b:8e:c1:3f:a7:92:9e:
f5:5f:12:e8:3e:ff:d6:be:2b:20:c3:ef:e0:d5:f3:
c9:f4:90:58:7d:b8:24:47:ce:df:81:e4:c9:dd:34:
7e:1e:da:46:3b:5f:93:b3:70:66:fd:0c:88:a8:29:
ec:dd:88:ce:5b:83:f2:ba:34:d0:c5:23:5d:c8:4c:
7a:34:01:0a:63:28:e9:dc:36:89:ac:89:3a:3d:26:
8c:7d:57:e6:80:64:0d:16:04:9d:e0:60:6a:b8:d5:
bd:1e:88:f3:07:5a:b7:22:69:0a:c4:6d:07:80:57:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CC:3B:4D:C9:42:1B:A4:9E:10:B2:E1:73:DB:DF:1A:B3:32:E5:FD
X509v3 Authority Key Identifier:
keyid:16:0C:F1:DA:AF:F1:DC:B2:76:5C:DC:4F:78:E8:70:4E:4E:2B:9A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/323c74-ce53-445e-aba4-e9231be439d3/1/Fgzx2q_x3LJ2XNxPeOhwTk4rmto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f1:42:19:91:df:c6:70:aa:76:69:6c:88:1a:f6:41:f2:e7:
97:94:81:99:fe:49:9e:ed:5c:45:82:2c:c0:ad:40:49:b6:68:
32:7b:43:94:b5:49:7c:8f:27:6a:f5:8f:ee:39:e5:ef:a2:e8:
c5:fa:5d:ba:c1:74:3c:e8:07:1f:ed:f1:0e:7a:3a:62:0e:b2:
2c:4d:a7:91:f5:a1:a6:48:af:b6:67:12:4d:15:44:13:38:91:
c0:26:a0:00:e1:c7:2e:1b:f6:87:a8:b3:c2:46:2c:a1:fb:40:
a6:f5:ee:97:91:a3:9a:dd:c0:6f:ea:dd:d5:f1:cc:cf:89:89:
3f:5b:4d:f8:15:dc:00:b9:73:4b:81:91:01:a3:7d:92:0b:21:
68:b8:16:3e:86:54:1f:03:07:5b:03:ef:81:83:56:ba:7d:22:
7f:6c:68:cc:c2:f6:fe:b5:9b:49:b3:f2:66:da:2c:72:1f:2d:
14:49:b2:fc:48:d3:4b:a5:9b:31:3b:a5:10:99:cf:f8:c9:8d:
10:66:93:c7:93:9e:a2:91:86:0f:ea:87:10:1e:4c:c9:c2:3f:
83:dc:9d:c8:c3:ef:f0:13:d6:bd:52:90:bb:a4:7b:d8:47:5b:
b5:ce:5f:12:7c:a9:c0:e9:ee:89:9a:e3:84:08:7a:72:37:26:
6f:1b:29:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:46:00 2025 by rpki-client