Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
File: FrUekDbKbnVqAWPDh3ggzV_OEa4.mft (raw, json)
Hash identifier: 9DYpYOFipl43inoWGRPO606nDqpWz54zGm3mYtRxP0U=
Subject key identifier: 79:5B:EF:B0:33:DD:12:DB:AB:94:14:CA:4C:36:AD:B4:E3:70:85:BC
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Certificate issuer: /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial: 0194BD858DE5D6F1BB12898971BCF950F8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
Manifest number: 0B20
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: BxCrfrb8MepjOUn66ABB5pXZXGY.roa (hash: /bAJpFbE7wB5BoE8ivAocFlXAPpfXoiDSMMP5BxwgYU=)
2: FrUekDbKbnVqAWPDh3ggzV_OEa4.crl (hash: DFUMaPyxSQu+IyYyxdl7dzzqvxy+nWGbMSiF4z7pExQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8d:e5:d6:f1:bb:12:89:89:71:bc:f9:50:f8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=795befb033dd12dbab9414ca4c36adb4e37085bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:c0:2e:68:15:fd:2d:ee:48:4a:95:59:1c:
e1:12:bd:86:19:d1:97:74:a1:93:f9:be:c3:b6:ad:
eb:ba:3f:bf:9e:ea:13:22:7a:fe:67:18:fc:36:79:
91:e1:5f:5a:13:26:90:a0:72:c2:6f:89:d1:33:dc:
b7:dc:55:ff:4e:78:62:51:fe:aa:fd:28:f6:8d:b9:
46:8a:57:dd:80:b7:3d:75:d6:b4:1f:45:8d:ae:93:
d5:aa:16:cf:21:59:fb:f0:f5:6c:19:88:8a:a6:26:
d3:d3:6b:9f:13:26:22:45:c3:d1:34:a5:99:a6:7f:
69:ac:1b:22:a3:a7:db:95:f9:f9:df:83:c9:90:78:
28:1f:a9:51:22:ce:37:2d:18:ec:6f:6a:e2:bd:32:
55:cc:2c:05:44:10:2c:df:d5:bf:c9:67:55:cf:95:
d4:b0:79:05:14:59:4e:61:ba:c9:c9:cf:6f:8b:6e:
cb:d0:0e:52:a4:e6:64:23:49:92:9a:59:4a:ec:a4:
db:1d:1e:42:cb:24:10:6e:af:5e:f6:c8:61:b0:7e:
86:fd:0e:30:7b:c2:86:28:af:a7:f3:fa:5d:ac:f2:
ce:c1:c7:d0:09:97:9c:51:96:00:4b:04:ee:16:44:
99:58:a1:10:ad:b2:e3:b7:eb:90:2b:0a:90:d6:41:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5B:EF:B0:33:DD:12:DB:AB:94:14:CA:4C:36:AD:B4:E3:70:85:BC
X509v3 Authority Key Identifier:
keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fb:90:de:64:e1:d2:52:4f:f5:65:89:26:d0:6e:11:04:cc:
76:54:25:8e:fc:43:cd:11:82:d5:9f:74:91:78:16:0a:35:d6:
26:7a:2d:58:f5:21:ea:f7:e9:30:94:a4:ba:b2:79:c7:5d:e5:
81:61:42:c6:bb:8b:a3:13:59:54:3f:67:05:bc:82:0e:b7:c5:
1e:6b:db:4c:14:90:ff:19:aa:ae:26:11:7f:a7:27:0e:b5:4e:
33:87:32:fa:77:ce:86:33:0c:a8:df:fc:9d:5c:8e:b0:47:35:
d7:03:1d:1c:c5:01:62:fc:6d:35:7b:0d:44:db:a6:03:7b:cd:
37:32:b3:d2:39:5e:a3:24:93:bf:fe:15:43:cf:3d:a4:36:82:
b2:55:fa:66:6c:38:97:e5:63:fe:d2:6e:39:19:8e:79:23:9c:
15:7a:1f:11:4e:50:c9:8c:74:48:93:23:4a:62:3e:82:80:5c:
6a:bd:74:c7:e3:ed:78:ec:43:29:ff:95:cd:30:45:bc:d9:06:
2e:f6:25:98:a7:90:67:0f:0f:bb:08:3b:5e:aa:67:dd:6a:d8:
14:28:d3:53:5e:94:f2:0a:4e:a9:36:b5:11:0c:35:9a:03:a6:
5f:f7:38:e6:18:c8:66:6a:8f:1b:96:9b:11:53:ff:23:53:41:
ac:71:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:06 2025 by rpki-client