Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
File: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft (raw, json)
Hash identifier: 2x7DB9rXZFs/E7Dj5RVLqdQnJeF8lUHGniZT4LRJqCw=
Subject key identifier: FF:84:2E:32:49:C9:E0:59:B8:6E:E5:24:2D:15:26:BC:84:45:C7:86
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Certificate issuer: /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial: 0194BC050ED9A0A1B3B022121AA4F61644F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
Manifest number: 0CF9
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 1-7k1BSVErLFvFpR9s4khkCRgcx8.roa (hash: OjA0u5BcNw+jfDFu4scr2j7odbJKWBNkQN28Ky+RjrQ=)
2: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl (hash: LAOOwnrxiAlcGLsMmre/syiim+soqQYXRqq96CCpl5E=)
3: ZYpOnf_RMjUdQRpY5DSmoRhYWXo.roa (hash: 1MZ14FF0b6BfjlsKqzDJT2k9XMlDgyRHFf/YVDEx3LU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0e:d9:a0:a1:b3:b0:22:12:1a:a4:f6:16:44:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=ff842e3249c9e059b86ee5242d1526bc8445c786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:8c:fe:7a:b5:4c:bd:b4:d0:17:0b:79:55:
e6:a7:3a:95:05:23:c7:51:63:f8:ab:3c:43:ce:fa:
1b:cc:ed:36:9a:bb:4a:7d:f4:a1:ef:e8:68:94:1d:
f9:cd:4d:e6:13:ab:64:23:f0:37:c8:25:bd:0f:91:
91:a4:97:bd:83:bf:b7:e7:6c:af:0d:7d:39:20:11:
a8:dd:4e:7f:a4:75:f3:f7:f2:97:b1:c5:d9:e4:fa:
ea:ae:8e:a2:bf:84:31:e4:ff:78:9f:ec:45:82:f5:
44:90:f5:0d:cc:cb:30:12:94:9e:b0:06:f6:81:37:
12:8a:96:e9:eb:4e:0e:00:48:d3:a4:a5:90:12:d6:
33:02:92:ff:e2:ca:9d:b5:71:94:85:75:c5:ef:37:
f6:fb:a5:e2:e4:4f:70:c9:da:53:e7:54:70:45:98:
93:49:24:49:28:3f:de:09:c0:9e:9d:4a:db:43:aa:
1a:61:58:29:f5:93:b7:cf:bb:e4:bb:54:1a:c1:eb:
ea:0d:66:af:c5:e3:62:ca:e4:b5:d8:bc:67:9d:34:
f5:4e:49:a8:d8:0b:6b:1d:7c:a4:34:a6:d7:eb:01:
d0:e6:d7:24:09:5a:1c:8a:f7:e0:c0:a6:2b:c1:7b:
bf:34:a8:8c:80:53:f4:bb:d9:14:b2:3d:29:ae:12:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:84:2E:32:49:C9:E0:59:B8:6E:E5:24:2D:15:26:BC:84:45:C7:86
X509v3 Authority Key Identifier:
keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7b:9b:51:2b:10:0b:d3:16:1c:8d:8e:1d:ec:6f:61:37:8d:
a0:8c:c2:ed:64:42:5f:66:45:d6:48:c4:15:01:1d:11:a8:0d:
8c:d0:3f:3a:08:44:e2:26:c1:d5:0b:69:da:27:81:b4:16:29:
73:10:1b:7e:f8:26:3f:03:19:da:26:18:2e:f2:5e:08:7f:14:
b5:52:07:5d:a7:91:70:01:12:bb:4a:b9:c6:e7:d7:85:9d:49:
46:4f:1a:f2:cb:0c:93:c7:16:da:6a:b8:42:41:ee:3c:24:af:
91:08:d5:33:ec:c1:21:87:21:81:0b:2d:c1:73:81:cf:8e:5d:
14:96:76:ee:42:13:a1:b1:6e:7c:b0:b7:08:45:f3:ba:94:11:
4e:90:7b:44:4e:59:d1:2b:d3:fc:fc:e9:d4:53:cf:99:bb:46:
ff:35:27:ae:07:b2:08:2f:58:1e:32:6f:47:88:5b:a1:91:1b:
6e:0a:af:df:5b:85:ca:f2:85:8b:66:23:04:a1:1b:f6:c4:78:
e5:d4:62:66:ce:c0:2b:b8:93:0c:77:32:07:83:f4:ae:07:fb:
66:68:0f:0c:11:33:bf:7a:91:c7:1f:eb:98:f3:46:46:db:13:
46:26:0f:1a:a6:7b:9e:e8:ed:14:14:41:40:2e:a4:e5:b8:a5:
23:74:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:32 2025 by rpki-client