Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
File: FqThByM1EnDNjJzGSwlkiOZOIw4.mft (raw, json)
Hash identifier: 4mYHUOgSiBs0GXN4msfw3cvXlER/OxVPywPmAsbzbhI=
Subject key identifier: 35:78:37:C9:9F:E9:37:CF:68:C4:6C:75:00:32:F4:87:9A:56:39:42
Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
Certificate issuer: /CN=16a4e10723351270cd8c9cc64b096488e64e230e
Certificate serial: 0194BCAA06B6EFBF968B4CF9FB65918AA646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
Manifest number: 059B
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: FqThByM1EnDNjJzGSwlkiOZOIw4.crl (hash: 9IDnmINse1TCUyXnukVGj6bu5XgCIxHhI+QXgnbdfoA=)
2: LHS-1GPmf3JlxOhkC8EvvEXsIio.roa (hash: qJmDzf2hiWRAwgR4H4d0P3HUtRpMHlkEr8kbVnNHB5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:06:b6:ef:bf:96:8b:4c:f9:fb:65:91:8a:a6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=357837c99fe937cf68c46c750032f4879a563942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:a5:e6:b2:a4:55:21:ab:fe:57:9a:8f:cd:
f3:51:60:cc:f2:be:fd:bf:4f:db:6b:cd:c9:b7:09:
17:2d:fd:70:de:2c:fd:3d:f7:25:87:d8:f7:74:5d:
20:70:5f:0b:e1:64:72:55:c1:f8:48:a2:a8:35:bc:
5b:36:39:0f:39:9d:c8:6c:e4:35:b3:b6:88:fa:ee:
8b:21:e0:8c:0c:2b:19:cf:81:83:e8:ee:7a:6b:49:
3d:ba:94:94:e8:2c:ed:99:c3:ed:23:f8:27:fa:c7:
7b:39:1a:83:8e:03:8b:20:69:fa:e0:60:3e:09:f4:
89:59:a5:2a:b3:18:6f:97:6a:ef:cd:5e:92:e0:68:
83:c9:26:53:18:40:ae:50:65:d9:86:43:c9:38:de:
56:55:14:2a:bf:d7:11:3f:8f:92:2b:41:5e:a2:94:
cc:33:8e:5b:36:a7:31:fb:dd:f0:e4:f9:93:b6:0e:
7e:00:e8:35:90:51:85:24:e7:51:d6:0d:dd:d7:6e:
09:ba:ec:f4:75:e6:2b:4a:f8:e4:c1:27:c6:71:64:
ba:eb:9e:50:89:a3:72:7d:7e:26:09:4a:66:08:63:
62:21:5b:64:5b:02:d0:fe:72:07:9e:d6:1b:26:8b:
7d:6b:a2:65:40:b6:89:97:b6:cd:79:45:57:22:52:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:78:37:C9:9F:E9:37:CF:68:C4:6C:75:00:32:F4:87:9A:56:39:42
X509v3 Authority Key Identifier:
keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:25:ea:f2:dd:31:26:aa:c4:8e:d4:2e:1a:fe:7f:87:cf:53:
26:88:da:37:b4:68:fe:5e:aa:2d:4b:54:c4:90:9f:f8:c8:7d:
af:d6:85:5a:af:e4:e4:a2:91:5a:83:15:72:00:41:0f:5e:4e:
0e:af:a0:69:49:2a:3a:d9:3b:15:ff:4c:92:73:57:9e:fc:be:
6f:bb:e7:e6:29:d4:f6:a9:4a:16:11:e0:fd:b0:46:53:52:42:
95:5a:43:b0:de:70:e0:25:fb:fa:b8:49:6f:c2:bb:8c:0e:8c:
67:a9:18:38:6b:d7:40:23:69:65:8f:9f:98:6f:20:98:2e:7c:
9c:7e:c3:31:92:f6:38:30:c4:81:aa:2e:9c:8a:4c:43:f9:e8:
f3:c5:f7:34:bb:50:6f:1f:56:c0:f0:a6:f3:40:ab:bf:b3:de:
ed:1e:da:fa:6e:c4:77:d4:5b:5b:7d:49:f8:6d:ee:e2:1d:2a:
ab:2a:18:93:84:f2:9b:a6:a2:44:98:ae:54:64:67:97:0d:11:
ef:de:24:62:a5:19:27:2e:82:a1:dc:e2:51:b7:3d:b9:f9:21:
14:43:4b:fb:cf:fa:bb:58:aa:40:0e:12:76:b0:9b:c2:37:83:
02:7d:f0:7f:3e:7a:74:78:9d:f4:57:a0:41:dc:75:be:da:92:
7f:34:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:10 2025 by rpki-client