Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
File: _fnlz5EF-11F34wfudTxx6WQVMY.mft (raw, json)
Hash identifier: NB/zFhjirk+62L9ZsuEvVxBmONCyEjs1inmpXwAP1eM=
Subject key identifier: 4A:C1:15:DD:26:03:31:39:15:D1:D3:D3:40:87:FA:FD:1B:D2:EA:7F
Authority key identifier: FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
Certificate issuer: /CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Certificate serial: 0194BBCDC377222D578861443103E060003B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
Manifest number: 06FC
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: _fnlz5EF-11F34wfudTxx6WQVMY.crl (hash: sSK8tiKkbIZBuw87UCZ5a1CNRb5rw521ydltOiHV7gc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c3:77:22:2d:57:88:61:44:31:03:e0:60:00:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=4ac115dd2603313915d1d3d34087fafd1bd2ea7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:66:50:ef:76:cb:db:12:d7:38:f0:25:b3:
d9:a2:81:89:17:6f:fe:bb:07:b1:05:06:e2:f9:06:
78:bf:f4:5d:b6:92:d5:93:88:23:4b:64:ff:21:64:
1a:95:17:22:d0:2f:56:00:81:15:9e:83:18:d9:c2:
12:50:d6:e2:ce:b0:0e:a5:42:4a:46:4c:0b:df:ba:
91:ae:6b:2e:ee:8d:39:b9:40:01:c6:13:48:35:b9:
39:eb:a9:80:b1:68:7b:47:5c:19:40:e7:e2:6e:13:
58:1f:ee:77:be:63:44:3d:c8:03:df:38:8a:62:8f:
ae:3e:ba:42:de:65:00:40:01:fc:ec:13:0f:a3:33:
2d:3a:f7:69:95:50:61:e5:1d:0c:4b:94:61:4d:21:
fc:fb:16:be:5a:c5:3d:9a:f2:0f:04:be:d7:0f:fa:
38:ee:77:c9:40:2f:b8:8c:79:ab:4c:a0:b0:16:e5:
8f:14:1a:47:86:8b:48:d3:29:c7:f7:b5:c9:bc:86:
04:e6:f9:56:82:20:da:79:74:b5:27:07:89:99:e6:
6c:b0:af:48:01:ac:92:c8:0a:f0:32:46:71:1a:81:
9a:dc:35:3f:01:43:e8:72:d4:71:10:22:b5:ba:88:
bc:2a:87:80:12:6c:cd:a1:a6:ff:b4:46:60:2f:bb:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C1:15:DD:26:03:31:39:15:D1:D3:D3:40:87:FA:FD:1B:D2:EA:7F
X509v3 Authority Key Identifier:
keyid:FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:46:ca:ef:b9:49:8a:0a:2b:8a:c2:e0:46:d4:7f:b2:2f:5d:
ca:f3:91:3c:2a:3e:09:2b:69:06:bf:99:4c:bd:f6:66:e2:46:
03:09:a8:7d:d8:47:cf:c8:44:6a:07:03:04:d2:7a:a9:d2:b8:
35:ac:58:60:9b:1d:47:dc:71:91:3d:78:d5:f0:9f:c0:f3:c9:
d3:e7:f1:fa:53:0a:83:a5:2c:d8:69:98:23:23:28:c8:50:03:
1b:0e:3f:e2:f0:8c:13:61:10:57:6d:1e:c1:80:62:29:80:b2:
79:e4:e0:9e:9c:4f:c2:01:76:e1:f5:35:ca:c3:26:ab:ab:2d:
11:be:34:25:a5:60:9b:30:35:6a:6f:ab:27:b6:7c:23:50:92:
8f:ae:bb:29:37:10:3f:c2:15:07:7f:51:99:5f:89:ab:b5:7f:
c0:63:89:03:b6:4c:27:36:3b:8d:52:41:15:14:0d:c9:a2:c9:
61:5a:78:f0:34:96:86:f9:bc:34:5f:01:e5:f4:2b:64:7d:d4:
12:22:57:36:b9:95:d7:b7:ba:32:eb:70:4c:30:cb:fe:4a:7f:
13:60:d3:60:db:24:78:d3:63:b5:d8:5d:32:60:e6:3a:81:f8:
5c:6a:01:21:fe:28:ad:f0:c6:55:a7:43:1c:c8:ea:c6:e8:3d:
fa:a8:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:28 2025 by rpki-client