Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File: FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier: iiu6U/oK3T0ujImbm+jSeWlzUZCHmr8ajSIiX4ATrIA=
Subject key identifier: 8A:DB:A5:47:F0:51:FA:5C:02:15:11:5D:91:A5:24:83:4D:39:8A:C9
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer: /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial: 0194BC04FF4E5208F5C9C6501BF787C5A834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number: 0C69
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: xESepEOVBOi1v6F6mSSN8zk7yMYVfHnC3BE7ahTycNk=)
2: u0DOKBtKEXfOYPXrhlfb2Ryk4Zc.roa (hash: VOn09+bdFNjvpl/Gu+Ha0G2LvOgVJGvmVcF7NTjr9S0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ff:4e:52:08:f5:c9:c6:50:1b:f7:87:c5:a8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=8adba547f051fa5c0215115d91a524834d398ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:16:08:d9:45:e8:25:ae:5a:7c:c3:c0:99:
54:46:8d:4a:08:8d:58:1f:24:87:fe:f8:c7:2c:2c:
b1:c6:71:04:2d:f3:88:a5:86:d8:31:63:6b:0c:5a:
2e:5d:25:c2:56:ba:f9:aa:d4:e8:93:8b:64:3e:c2:
ee:f2:b5:e7:a5:2a:bf:78:6e:49:8b:61:bb:c7:db:
81:60:d2:52:cd:44:90:15:67:56:d5:75:d7:07:f4:
3c:b3:66:91:31:d3:74:b6:93:1d:49:15:88:f2:02:
8f:7f:6b:0c:e0:b5:0a:98:f5:53:0e:e9:2e:50:90:
de:7a:1b:9e:9f:ea:1b:9f:3f:be:32:03:4b:5d:51:
9c:36:05:b5:55:96:9a:a6:6a:52:ec:42:b6:e6:06:
b8:77:ff:4d:69:fd:49:50:5f:18:6e:2d:55:31:b3:
bd:03:b3:0c:c3:f8:a9:14:5f:e0:ac:a2:61:5c:0f:
93:a9:b8:53:c8:e6:47:1e:fd:75:9b:91:21:2e:3a:
66:1d:65:78:6d:78:c8:b5:bd:21:bd:55:21:03:87:
f4:54:13:6a:cd:d8:fa:25:70:79:59:ea:05:7e:74:
13:ba:69:15:f1:79:7e:e6:56:51:fa:4d:65:d6:5a:
08:b1:b0:18:89:4d:62:bc:f9:36:02:2a:9a:a5:2c:
85:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DB:A5:47:F0:51:FA:5C:02:15:11:5D:91:A5:24:83:4D:39:8A:C9
X509v3 Authority Key Identifier:
keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4a:af:ac:c9:b4:cc:31:32:79:09:38:73:a1:dc:3e:50:f3:
e9:66:f8:8c:30:cc:20:4a:8b:c8:d7:32:ff:1e:a3:e2:3c:03:
1e:dc:92:e1:4c:d9:78:7d:e1:a3:c6:f8:d9:2c:84:44:3d:ea:
ae:49:3b:18:6e:26:cc:fb:12:13:f3:f4:a4:89:54:2c:46:4d:
49:b6:47:2e:ad:e3:e4:d6:7e:78:40:24:d9:4b:e0:4e:78:57:
cd:6e:a6:55:9e:55:bb:61:17:2d:fb:bf:84:8a:6b:98:5e:4e:
8d:35:9f:e7:c4:8b:b5:69:f2:da:7a:bb:b8:1f:52:bf:3a:ac:
1b:96:0e:27:0d:9f:b9:eb:37:ed:a8:9d:2e:67:3c:e4:8a:72:
16:ef:d7:b9:7c:cc:4f:8f:3e:83:2b:7c:00:46:29:e5:5e:24:
e7:1d:95:43:fe:b7:a1:96:12:7c:24:90:48:9d:31:5b:69:93:
2f:0f:a8:f0:e8:25:89:11:9c:f4:a6:b7:f4:b9:23:86:35:2f:
3f:8f:89:5f:ea:9d:b8:1a:6c:73:4d:11:6d:1f:80:f8:1b:12:
7e:c3:ed:8b:14:4a:4f:0b:33:e4:cd:97:1b:f0:5b:88:a9:97:
b9:f4:38:b4:67:71:90:d6:d9:34:66:a6:ef:b4:c4:e8:4e:77:
5f:58:de:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:47 2025 by rpki-client