Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
File: FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json)
Hash identifier: danfK9CvyHd+oWCD90RZMSmDMPjg9EnbPE7013Tiifg=
Subject key identifier: 17:BD:DA:44:9B:01:2E:22:62:DB:44:54:B7:7A:16:7B:B2:53:1A:C8
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial: 0194BD8594AF1C550E2B5BAB0729C90EB56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: 1pesYopv7bOVV4tmC40Y/5cjaVEMaCfFS65GfNYMWL8=)
2: LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa (hash: ZLQQjKLBIHt19Vm7p7ixs8F7wMqUIQn9Y8DFLps+wZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:94:af:1c:55:0e:2b:5b:ab:07:29:c9:0e:b5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=17bdda449b012e2262db4454b77a167bb2531ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:f7:a8:eb:ec:16:89:dc:9c:6f:35:74:6f:
4a:51:8f:6d:98:f9:10:20:5c:af:f6:c1:12:08:57:
c0:98:3c:0d:41:58:6f:ee:d0:61:55:7d:ae:21:bb:
8f:d6:82:96:1c:28:30:df:7b:d0:a2:dc:fb:58:b7:
da:f4:96:88:7b:2c:9e:05:39:f7:62:92:1c:7f:58:
17:9f:98:f0:e5:27:6c:23:f2:8e:26:29:79:79:d2:
be:50:fb:9a:b5:66:9a:ec:96:a8:f8:ec:06:aa:4b:
d1:77:8e:04:1e:3f:9a:67:ec:36:fe:7e:9c:9e:6b:
53:36:68:71:66:a1:23:4e:2f:2e:f7:cc:c3:c9:f7:
09:7e:2b:a2:08:48:1d:ec:41:e9:8e:5a:24:68:2f:
a3:9b:ae:89:9a:8f:e9:20:0c:0d:98:4e:bb:f3:0b:
7a:a5:8c:6b:f1:7c:16:1c:0d:42:f1:a5:cf:8f:fb:
28:41:18:34:52:c2:71:29:d0:76:14:26:23:e1:14:
c7:a6:76:77:49:ca:bb:99:d5:c6:84:43:ec:07:99:
c6:a8:b4:ab:d0:cc:8b:34:b8:28:41:7a:9d:21:25:
7b:cb:fa:1e:b4:57:20:d9:e2:61:3f:7b:66:8a:5a:
34:f9:c6:ce:5a:d7:5b:28:65:aa:de:b1:1f:79:f4:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BD:DA:44:9B:01:2E:22:62:DB:44:54:B7:7A:16:7B:B2:53:1A:C8
X509v3 Authority Key Identifier:
keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5c:67:6a:e0:67:b8:95:c4:76:10:ab:b9:a9:db:d6:0f:8d:
03:d6:ef:37:be:c7:75:11:f4:59:90:2c:da:f7:40:e8:27:6c:
c9:2e:e7:54:85:88:41:1e:75:eb:96:7f:32:40:a2:d6:22:9f:
41:7b:6b:62:0b:c5:a4:cc:01:a4:ec:aa:01:7e:20:7f:36:69:
26:63:01:a4:9a:4d:01:88:b1:cb:84:e0:ac:1e:ec:e2:21:b9:
38:bf:16:b8:e1:ad:1d:e6:7b:5b:62:5d:3a:77:b5:ea:9c:7d:
35:83:12:1d:a0:92:39:6e:32:2d:3c:6c:48:c2:33:12:dd:d1:
ae:d3:df:ab:11:b3:22:9e:e4:47:5e:61:85:3e:d0:c3:fa:1f:
43:b8:6a:26:e9:99:24:4d:6e:1e:97:b1:0b:95:13:db:e6:ce:
dd:3f:32:57:7c:6a:6e:18:44:49:ef:63:a5:d5:f0:de:c1:44:
ea:aa:e8:d7:e5:cf:aa:2a:1c:fa:57:b1:e2:23:5a:b0:92:b0:
f2:fd:e1:e9:c3:ee:6f:8d:33:e3:56:d2:ad:4b:23:6c:16:34:
ca:c2:29:d7:58:d2:5d:d8:7b:08:ae:a1:b6:31:65:7c:b2:2f:
fe:8f:af:42:e3:38:e1:75:8b:ec:93:f6:45:8d:85:50:78:29:
49:df:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:56 2025 by rpki-client