Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: F4csoSn5o6deKGqtEnE9jnGyU8uqCT3G5pZykR72RC0=
Subject key identifier: 33:52:E9:39:63:A0:DD:99:05:09:82:85:B8:43:84:B5:F7:81:E1:C8
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 0194BCE094EA4DC70B4A0AF340A86F49B5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: 0CFFqR0SNdSyzAXA7VK0xg+mHZbChoPYYBd9A8b1RrQ=)
2: ThZzWFH5INkQ7ymiA_IBq-KPEM4.roa (hash: dM5mDKUs0Ppdg4qZBmK0UY+RheCcm2hY4o7VfDpWvQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:94:ea:4d:c7:0b:4a:0a:f3:40:a8:6f:49:b5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=3352e93963a0dd9905098285b84384b5f781e1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:45:4c:44:e5:6d:13:4a:2c:c6:34:ae:c3:18:
36:fb:71:73:36:98:35:68:ac:e4:02:24:ea:01:97:
e8:c7:f7:56:22:ab:b0:78:a4:a2:02:3c:6a:51:e4:
81:39:50:74:2b:ef:1c:65:c8:f4:5c:d2:1c:c2:6b:
2d:38:d8:b4:3c:ec:3d:ae:09:0d:d8:8d:0b:6a:2a:
3d:a6:43:ef:06:b2:f7:de:d1:63:ba:69:87:d5:ae:
18:8a:81:ba:16:0f:4a:2e:1e:27:19:80:b9:64:eb:
9c:c1:55:e9:0e:3e:d9:47:1a:8d:ec:38:69:e5:90:
aa:74:e6:b1:e2:2f:d9:53:ce:eb:08:50:3e:46:f3:
b9:c3:0f:fc:73:08:8a:84:0b:96:72:0b:13:8f:4d:
c3:47:7d:d6:35:ae:e1:55:b5:5e:d8:b8:cf:89:b1:
f4:ce:1a:7b:77:dc:22:43:26:b5:c5:38:94:73:d2:
9a:c1:d5:e6:2c:79:60:19:df:91:40:f5:f7:04:ec:
1d:b0:b9:40:d1:e7:eb:9a:f1:c4:38:48:9f:c1:bf:
78:3d:fd:12:3b:51:e4:c2:1f:1e:9f:b9:38:ff:4f:
f9:1e:c1:33:da:80:ce:dc:89:5f:f6:5a:94:65:92:
cf:87:3b:01:95:5f:90:b5:90:83:fb:fc:e4:64:d5:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:52:E9:39:63:A0:DD:99:05:09:82:85:B8:43:84:B5:F7:81:E1:C8
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cf:e2:d1:e4:53:d3:46:87:10:aa:45:93:1b:4a:0a:9d:32:
1f:a0:cb:00:36:4e:b3:62:6b:9e:5e:69:95:87:1c:1a:62:8a:
ea:51:7a:59:cf:f5:f3:0c:17:e6:a7:9a:bf:4b:d6:4a:5a:79:
08:be:a7:4a:5c:67:90:1e:91:b4:df:a6:8c:dd:5a:f0:e6:cc:
39:35:77:ee:a9:3e:43:0e:26:2f:24:be:70:c4:e9:5c:f6:3e:
2d:9f:ea:44:90:9a:a2:a3:e3:55:70:e1:9d:cd:71:ca:ac:13:
28:36:e3:4e:8e:10:46:39:80:91:be:59:85:c1:5f:06:d3:4b:
2f:cb:ae:11:63:16:3a:bf:a9:6f:c1:b4:b8:a8:2e:41:97:fe:
59:33:ac:14:0c:85:5e:6d:9c:4a:a1:83:b6:35:2e:da:18:69:
5c:51:77:3b:a4:e4:d8:72:74:4a:12:22:77:0b:91:27:ea:55:
39:e9:33:e1:e8:35:c2:bd:8a:54:00:02:87:49:83:b3:f7:95:
cb:0b:44:4c:25:33:51:d0:ac:f7:93:4b:6b:cf:42:64:69:92:
41:9b:1f:26:5b:87:50:6d:b1:c3:cd:c9:3e:8f:c9:c4:cb:14:
7a:b0:38:c7:56:f9:c2:37:21:9d:61:d3:1a:9d:ba:c6:89:5c:
f1:6a:47:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:44 2025 by rpki-client