Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
File: FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json)
Hash identifier: /IuWq/TCuU7RjdwxQ6645f23oKmt5EMV0q0zv4hkgo0=
Subject key identifier: 2C:3C:CC:CA:67:25:C5:17:E7:F4:09:58:77:FB:7E:A6:FF:9B:CE:82
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Certificate issuer: /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial: 0194BCE0B4DACD32C70E6446BF5FEAAEB500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: npKm4xJPad7HTtu2QVpyhT4WGOrdDJaXCDd7AaDvuQc=)
2: m47qBE9phwomTDeqf52wHfAYr9E.roa (hash: 7rx0B/HjAB/FPNOSkgRw7oYEkC39mslIeJTzls7ObLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b4:da:cd:32:c7:0e:64:46:bf:5f:ea:ae:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=2c3cccca6725c517e7f4095877fb7ea6ff9bce82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:d5:38:58:3f:0b:0f:10:d0:f0:4c:19:40:
9e:05:ef:c3:87:03:a9:af:63:59:e4:d3:22:50:69:
e9:e1:84:5c:09:61:71:1d:b7:1b:52:67:c9:67:6f:
1d:e1:0d:18:57:6e:ee:46:eb:21:28:25:50:9e:89:
01:55:69:29:82:6d:3b:16:84:52:5a:e0:0a:a4:13:
63:cc:67:b3:31:79:1b:11:2b:5d:00:57:6e:43:e5:
d1:04:d3:c6:f1:80:96:d8:91:92:7c:d7:9f:1c:83:
31:f9:36:e5:c1:b1:36:15:50:c2:c1:64:12:63:db:
b9:8b:5b:40:6d:47:5a:a5:a0:9f:60:03:f3:41:ec:
7f:46:c4:97:19:c3:32:e4:2c:81:ea:66:a8:6a:be:
9b:01:4a:63:43:33:28:89:56:89:cd:2b:be:91:71:
de:cf:15:11:ee:d1:de:1d:d8:a9:d4:43:4d:e5:c9:
31:93:7a:bb:ac:dc:6e:1b:2f:3d:18:75:35:6a:77:
23:b9:08:9b:a0:e9:f5:dc:44:99:0e:37:56:53:6c:
90:cc:ea:b2:46:94:0a:85:3c:6c:a1:4c:76:d9:28:
3c:83:ba:9e:bb:7d:2a:0d:23:83:d8:4b:67:48:45:
82:50:1f:4d:f4:3f:b4:84:eb:99:cd:47:74:8f:3a:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3C:CC:CA:67:25:C5:17:E7:F4:09:58:77:FB:7E:A6:FF:9B:CE:82
X509v3 Authority Key Identifier:
keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7e:fd:13:7e:84:d6:cc:c1:3b:a2:62:6a:32:62:04:d3:6d:
78:31:6e:3b:ae:7e:09:cb:44:b8:0c:7a:52:0e:81:d2:35:78:
db:ee:fe:2f:8c:93:fc:a2:75:7c:58:f1:5d:c7:2f:46:4b:4f:
bf:2a:94:28:a8:66:66:e0:18:b2:ce:5d:db:cc:40:b9:b3:4a:
92:22:58:74:87:09:86:05:34:94:76:28:70:8e:6a:f1:02:ce:
5e:cd:6d:a6:8d:49:89:d6:00:98:00:29:ba:40:29:5b:0a:f2:
ec:3e:d7:f0:70:b7:cc:95:17:40:b9:4f:b2:57:59:4a:4e:da:
ec:34:50:b9:83:a1:e5:23:df:5a:e3:08:51:75:d2:db:c4:72:
9d:ca:97:da:60:e5:20:67:f4:06:46:38:c5:aa:ed:8d:8a:ff:
59:34:ef:c0:c9:18:93:86:2e:c9:0f:8f:d3:ea:7f:5a:79:11:
3f:fa:4f:ae:3f:9a:7a:14:d4:e6:49:bd:39:f3:9b:e7:fa:8b:
70:b2:ff:95:ab:f8:97:bf:92:fb:8a:db:14:a7:0f:d1:37:c9:
2b:1b:fb:d4:45:20:25:78:f8:fe:ac:4b:62:4a:a7:5c:b7:2b:
e6:f0:e3:34:46:4a:c0:dd:82:5f:00:28:66:de:81:bd:bc:2d:
b6:ae:fa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:56 2025 by rpki-client