Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
File: FO-9HV4axzX28jUJzyoOtKH5tOk.mft (raw, json)
Hash identifier: bV6e3eCj70lypnz87PvemtDLnpiqSswhArJaElYYGtQ=
Subject key identifier: FD:5B:37:40:F5:50:15:C9:9A:13:BB:DB:97:53:D9:0B:9E:AB:CF:A2
Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
Certificate issuer: /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Certificate serial: 0194BD4EA96B19E49EF4DC08C763D81A1D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: FO-9HV4axzX28jUJzyoOtKH5tOk.crl (hash: 6jjM5/+eDvGTuJwEwju3C6xnkDvw67HYjlBHrfiXJOk=)
2: O3vVokpmMILfLuCvtK11xQ6QzgQ.roa (hash: QJ033XApjs5jTBUXlpnVdiwOxF+/6PemalcFTFglCaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a9:6b:19:e4:9e:f4:dc:08:c7:63:d8:1a:1d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=fd5b3740f55015c99a13bbdb9753d90b9eabcfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:33:d2:7f:92:bf:38:22:df:9d:88:9f:62:
61:21:3c:8c:2e:92:ae:67:8c:49:1a:4c:40:7b:ee:
53:54:ae:4d:5f:ff:9a:24:b5:e4:24:32:7e:00:49:
c7:a2:33:c7:b2:0c:b2:6f:89:41:a8:8a:81:91:92:
90:9a:51:42:de:b8:86:4d:86:35:9b:d8:6a:d4:79:
fe:45:c5:a1:5f:b7:7a:e4:87:4c:65:8b:cd:f8:f6:
fa:fe:be:f9:7e:48:15:0f:4a:e4:8b:e0:ff:51:9e:
7e:d4:9c:b2:7d:97:00:e4:34:66:ca:60:8b:35:49:
62:7a:84:81:cd:1e:41:60:91:5e:ae:88:1e:05:7f:
c2:73:76:29:83:8d:8f:2d:33:ab:42:7b:ca:39:95:
6b:f3:5b:c4:be:bc:0b:4c:83:4d:9d:45:d7:e7:13:
04:49:46:b9:cc:9d:24:ce:fb:6c:19:39:df:f2:5a:
0f:6c:cf:3d:f7:f6:72:a4:e5:d6:e8:ff:1e:64:82:
7a:1a:51:f3:e3:ec:db:4b:3d:e8:64:e5:dc:a1:d4:
ca:87:63:43:cb:d9:cd:c7:d6:0f:e1:1e:32:16:bd:
f0:40:72:40:4a:b4:81:8b:df:c6:74:1c:8f:80:c9:
0d:10:ba:de:1f:5e:c1:a0:4d:7b:39:23:52:34:4a:
ec:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5B:37:40:F5:50:15:C9:9A:13:BB:DB:97:53:D9:0B:9E:AB:CF:A2
X509v3 Authority Key Identifier:
keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bc:51:82:bb:e1:6c:96:e3:d7:cd:43:45:75:df:84:cf:63:
bb:f9:2a:3e:18:a2:50:5e:a2:44:dc:e1:3d:b8:dd:3f:04:a3:
1e:6a:a5:92:35:f8:68:d8:2b:aa:97:22:d3:69:53:fb:49:a2:
73:b0:6a:8c:0f:ae:bd:27:b0:7a:fb:2b:e7:c4:c1:6b:4a:cc:
5c:3b:56:4c:c4:a4:5e:31:2e:ce:f5:52:6c:07:3b:22:6a:3b:
99:9e:1f:7d:fb:ab:f4:25:07:59:f3:40:22:ca:20:7b:6a:64:
e8:44:d4:56:ba:51:a1:35:2b:b3:13:f4:18:c2:cc:27:9d:4f:
86:a7:21:99:cc:96:a0:07:9f:a7:ea:6c:5c:00:13:1c:78:06:
de:ee:47:a1:7e:16:55:0d:e7:b5:1d:b7:14:8b:39:4a:c4:7a:
2a:29:5e:46:06:1c:17:93:a6:30:e2:ab:2a:9f:3e:c6:22:ac:
c8:07:08:46:81:18:d8:07:9e:d6:85:39:52:38:bc:56:9d:11:
a7:c3:cd:a0:91:a8:bf:6f:96:23:28:6e:65:58:e4:f0:2e:38:
7b:6f:15:c7:6b:0f:7a:65:1b:e2:cd:f7:88:6b:dd:31:81:a2:
6e:d3:1a:82:d9:1a:e1:ec:4a:58:fe:93:96:5a:61:b5:7a:c5:
9f:87:6e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:12 2025 by rpki-client