Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
File: FQmDQfJrtURkBQe9iAqZp-eiNdA.mft (raw, json)
Hash identifier: JIV2JDImQCwvi38pX3IVMLAElXDYTjCDVyLKUH2ZKYg=
Subject key identifier: D3:E1:5C:20:91:C7:A5:2A:0B:A2:32:3D:32:6D:20:45:1C:B1:BB:50
Authority key identifier: 15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
Certificate issuer: /CN=15098341f26bb544640507bd880a99a7e7a235d0
Certificate serial: 0194BC3BC435A3B47A82EEE9D28CFCE6B926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: FQmDQfJrtURkBQe9iAqZp-eiNdA.crl (hash: 0DncjfA7NdrfbVYIfFJH/ZWCWNwTFaebqLMwx5iUdrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c4:35:a3:b4:7a:82:ee:e9:d2:8c:fc:e6:b9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15098341f26bb544640507bd880a99a7e7a235d0
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=d3e15c2091c7a52a0ba2323d326d20451cb1bb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:07:dc:b9:a3:35:f3:8f:ab:f9:d4:a2:9a:
ff:7b:fb:39:23:ae:74:5e:10:b1:55:4c:5e:97:17:
dc:c9:bf:e7:b2:c3:ee:11:b4:7e:59:55:8b:0a:ab:
fb:c6:0e:80:18:88:f0:37:23:8e:a3:18:5e:86:b9:
ba:4a:88:cf:a5:b0:b3:f0:fe:e0:e2:d3:a9:33:46:
8b:08:3b:52:09:70:ff:6b:96:03:7b:57:70:2c:d3:
02:09:84:61:1b:2a:24:0b:a1:6c:d3:de:1e:24:53:
50:b7:fc:75:61:66:2e:2e:e4:30:78:9b:d9:f3:13:
b7:f4:eb:24:4a:7b:4a:d6:57:2e:8c:1e:48:a3:e5:
38:cf:e7:f2:fe:01:62:3e:b8:7b:5b:86:d4:0a:57:
b7:d1:4b:e2:49:16:83:ee:48:09:21:11:ca:6d:fb:
d8:b1:d0:54:23:4c:42:7a:a6:c8:00:7f:43:e5:d4:
00:27:bf:8f:60:64:28:48:78:70:4d:ec:06:51:af:
29:ad:ee:14:0d:c7:91:ba:f4:de:8e:9d:30:a8:b4:
04:c7:a0:58:0e:c7:38:7f:9b:8e:3b:b8:d0:f3:d4:
d7:91:51:38:bc:aa:cf:b6:4c:41:c9:db:4d:17:63:
95:0c:e7:ce:c0:34:5d:05:6b:ac:3b:6a:a9:a7:3d:
82:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:5C:20:91:C7:A5:2A:0B:A2:32:3D:32:6D:20:45:1C:B1:BB:50
X509v3 Authority Key Identifier:
keyid:15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:64:73:d1:f3:29:71:0a:a2:b9:51:27:05:dd:ea:21:56:25:
4c:88:3e:14:0f:81:b7:3a:46:a0:76:23:d4:46:67:1f:6e:e3:
3a:6d:32:a9:9b:2a:38:ed:2f:6d:2d:89:d9:d5:1b:69:89:45:
dd:2c:28:74:1a:e6:5d:d1:8c:d1:2b:b0:fd:91:61:22:e5:ee:
e2:2c:a8:44:ec:78:37:05:3c:a5:13:60:1b:bb:25:c7:93:91:
fe:f3:d2:d6:44:36:a9:c9:cb:6f:3e:16:9f:22:27:92:3d:4e:
3e:ab:7c:fa:dc:b8:5e:d2:a7:47:e4:38:e1:52:ad:c1:f7:e7:
94:2a:5c:5f:de:3d:94:71:63:23:98:fe:52:d9:4c:b9:a5:be:
09:2f:41:0a:02:0a:ec:67:22:1c:ae:66:62:66:44:cb:48:95:
d5:fe:12:ee:ec:c7:04:52:77:57:59:bd:e1:da:31:fb:16:96:
fc:f5:2c:b7:26:b5:aa:16:99:4b:e7:ed:e3:4e:15:a8:f2:c5:
69:16:c4:5f:84:8f:7e:71:1b:3b:e0:9b:84:b0:bb:e5:9e:13:
bc:f7:40:47:58:ec:08:b9:1b:3f:d2:45:a3:3b:50:0a:b2:44:
46:68:a9:57:d0:ef:5e:c2:b5:3e:4d:92:5f:e1:77:6d:1f:60:
4a:ff:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:02 2025 by rpki-client