Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
File: Ftmm_lJPhujQhO3I1kpg361S3xM.mft (raw, json)
Hash identifier: v+coiIwvXuBWxtZ7neKK5PMXnwhP01Ay9fMAD07uVt8=
Subject key identifier: 83:B6:93:19:58:06:ED:11:FA:DA:5E:04:92:34:03:23:76:3E:67:C6
Authority key identifier: 16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
Certificate issuer: /CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Certificate serial: 0194BBCDD22C7873BDA33BC7163BAB4737E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
Manifest number: 039F
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: Ftmm_lJPhujQhO3I1kpg361S3xM.crl (hash: K3/i4y+dZpHdgGL5QC/GP4tnGlDbwaYIsfs0o4tl5+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d2:2c:78:73:bd:a3:3b:c7:16:3b:ab:47:37:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=83b693195806ed11fada5e0492340323763e67c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:37:46:65:61:3e:23:8b:05:18:e8:d8:21:
48:b1:78:ee:e8:a8:dd:5d:89:1b:67:7d:c4:0d:d6:
89:f3:24:2d:a2:e9:c4:01:18:e5:51:72:50:e6:e4:
78:5c:cc:5e:d8:91:6d:b9:72:72:76:b6:83:aa:04:
5f:b8:50:09:a8:45:b3:eb:92:b0:68:a2:74:2e:3e:
7a:27:ba:65:33:8a:b2:81:eb:81:79:2e:3c:51:74:
7e:80:06:4b:45:71:86:64:0c:8f:a3:73:70:ad:f3:
a8:82:d7:df:9f:54:6f:73:4a:3a:bb:2d:64:30:20:
1d:2b:12:17:d6:5d:75:80:01:da:57:e3:d6:42:3d:
d1:76:b2:67:22:51:a0:b5:5b:50:41:7b:3a:a1:21:
84:bd:f6:2c:95:8d:94:23:7c:d2:d2:e0:ea:b5:6b:
a0:fe:98:61:f4:8b:4b:29:9a:6b:43:16:7c:f6:2d:
4c:bb:fd:e0:5f:62:f7:ba:fb:ed:cb:e0:b0:e1:56:
77:c0:b4:c3:cc:d2:5d:e9:21:d6:9d:37:7d:90:65:
db:2a:75:5b:05:41:c9:f8:62:2c:42:ce:10:0d:36:
84:80:d9:a6:b8:df:b1:66:2c:58:60:45:06:06:63:
97:49:71:54:b4:bc:4c:a4:e0:92:d5:f4:e0:51:75:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B6:93:19:58:06:ED:11:FA:DA:5E:04:92:34:03:23:76:3E:67:C6
X509v3 Authority Key Identifier:
keyid:16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b8:06:10:b1:51:c1:48:97:82:da:17:c7:71:e3:b2:d6:76:
f2:77:31:1b:ad:0b:93:ba:f9:74:c0:aa:a4:05:4a:ad:56:b4:
21:00:7e:aa:1c:b3:fa:ee:d9:dc:69:bd:70:ca:03:3b:b0:26:
79:8e:55:92:74:ff:4f:22:55:6d:83:4b:cd:e3:36:58:b0:a2:
4e:11:e6:14:4d:5f:60:32:cd:3e:19:99:b6:1f:36:55:25:e4:
76:1a:8c:23:be:7c:79:01:f4:6a:8d:94:15:bb:c7:71:8e:c9:
41:b9:90:32:eb:be:4a:9c:e8:ad:aa:7f:b9:e4:e2:ca:d4:d8:
22:a9:2a:af:42:37:e6:30:33:cb:5d:f4:56:8c:be:af:9a:7d:
a5:ed:d0:8c:8f:99:e8:e9:03:ba:66:c0:03:4d:8b:f8:a8:50:
08:00:85:71:0b:9f:ab:8c:0c:01:08:86:a8:b5:dc:1a:1b:ad:
b5:25:56:f0:79:5a:9c:5c:4a:06:6d:1d:4d:4e:a6:82:9b:56:
53:39:f0:0e:71:f5:26:1b:16:ea:d6:3e:b4:b0:6e:67:1a:83:
ca:ca:cf:a7:66:e8:cf:80:31:cf:de:11:9d:37:bf:d1:a4:f1:
d5:61:5b:24:c5:3d:82:6b:81:e9:00:64:ec:58:06:c7:6d:09:
06:83:7d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:06 2025 by rpki-client