Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: m6GFHhakdsK3KzLIPhT26ERxPJWlD3QE+vABI+RIlgw=
Subject key identifier: 78:2D:2F:98:F0:3A:50:CF:EE:FE:D5:2B:9D:0D:98:BC:7A:25:07:8D
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 0194BCE0709C48C1D29DD037E3AA3762B384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: UaVypsk61egenqaKVBZU6f811LXC3SQ1MQMtMwAyb3k=)
2: UUcKOryc_ykhvD7v1VUPE00sScs.roa (hash: dAexA2neb3HcfI1bNYdykFIadotQ4NdMRRVIE6QTBe4=)
3: q7sVZrLDAVZQekWMRkAvaSDSl9g.roa (hash: RRTQ5jExs41DvyGCsYtTzal7l6KRuDTnah7ylDN5VEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:70:9c:48:c1:d2:9d:d0:37:e3:aa:37:62:b3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=782d2f98f03a50cfeefed52b9d0d98bc7a25078d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:00:2f:7c:f4:61:ef:72:0e:84:4a:65:d7:b7:
a1:ed:bf:ef:55:06:c6:01:89:9b:be:4e:bb:b6:56:
a1:32:fa:91:89:53:4f:57:ae:c7:d4:f7:57:46:80:
75:a0:c1:a7:bd:0d:95:4b:6f:76:53:0b:bd:b5:c1:
19:81:98:82:44:0e:bb:84:72:4b:70:49:5f:1c:ac:
cc:f2:0a:77:7f:8c:19:ca:81:85:d8:ce:82:d6:09:
19:c2:97:80:3a:85:7f:b1:20:90:47:8a:38:73:3e:
e8:7f:93:f1:e3:2b:c6:43:fe:e5:b0:7e:c2:a0:8a:
16:83:e7:fa:d4:41:07:84:fe:e5:81:b1:ad:1c:0e:
03:0b:17:49:a1:e6:ed:26:ee:d2:12:94:a5:07:36:
32:90:4c:df:79:90:e2:05:5e:aa:8f:14:ac:b4:2f:
e7:11:4f:fa:d8:e9:57:cc:52:28:eb:1e:c6:97:02:
4a:de:90:90:76:9c:a9:bb:d9:d8:71:90:09:ae:c5:
b0:77:cb:dd:38:c5:da:f3:c0:79:81:51:c4:44:a9:
0d:dd:4c:79:62:f5:94:b0:2e:74:1a:c0:bc:0c:c0:
b3:76:c0:a7:13:37:fb:37:25:83:fb:4d:ad:49:b5:
f2:ef:93:4b:41:64:e0:0d:a4:85:67:ba:59:a3:52:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2D:2F:98:F0:3A:50:CF:EE:FE:D5:2B:9D:0D:98:BC:7A:25:07:8D
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a0:81:24:e9:94:ad:08:6d:13:ab:ae:8f:2d:a1:55:8e:c2:
93:30:de:90:00:35:c7:1a:45:c8:9f:0f:29:72:90:f3:f8:50:
ac:ad:34:d9:fb:df:dc:9e:d4:08:55:7e:e9:d4:13:53:5c:23:
f3:27:ef:2f:a7:84:56:91:b9:51:f4:f9:30:4c:46:ab:9b:0f:
e7:98:3f:42:83:1c:fe:e2:bc:e4:3c:62:19:0d:f1:ab:b7:0a:
db:77:8e:4f:b7:9e:99:99:45:57:ca:a7:3b:93:ae:81:30:94:
32:05:b3:69:10:71:37:5c:9a:79:13:60:37:8f:9d:be:b0:6d:
64:8d:bf:51:2e:56:b6:2a:29:95:6c:14:c8:e6:07:48:b9:eb:
c8:cd:c9:63:c3:5d:e6:7b:38:6a:fc:5c:b1:eb:ab:6a:24:7b:
57:1a:76:ca:ba:6e:35:03:9e:d9:e1:10:42:08:7b:a3:0a:4b:
1e:86:c8:fe:d7:5a:f9:26:c4:89:ac:f7:71:17:34:d0:58:a9:
96:ff:0e:35:3f:6c:91:84:0f:9e:a2:2b:1e:75:67:8e:87:bf:
11:85:37:05:ad:40:12:a0:75:25:11:ef:cd:74:e9:00:a8:9c:
b6:37:6a:d3:43:74:ee:7a:ff:79:a4:8a:f3:c2:9f:30:1b:ab:
07:7f:b9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:51 2025 by rpki-client