
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: a0AcmhgOUEPQ88J2m92D13ozTg+2hQtm1WgsBcToCYQ=
Subject key identifier: D1:27:B6:2D:B0:A2:D9:8A:68:70:19:D4:34:22:79:AB:96:E7:F8:B6
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 0194BD857688C39DF008CA359E5F84150056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 0134
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: 6UlPjtjiedOnsGktANI5rfA0Be6otnqpF/EMHpCPH+M=)
2: Ln2JbGXgQ88O79Pg1zLA68Pqxy0.roa (hash: Mstyw2j7AKFxamlwfGacDBtId3D916+hLBKPld0IQWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:76:88:c3:9d:f0:08:ca:35:9e:5f:84:15:00:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=d127b62db0a2d98a687019d4342279ab96e7f8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:04:b4:79:df:61:6f:dd:9e:fa:3d:40:56:
2d:f1:12:58:30:08:f0:73:6e:ec:bc:fa:11:37:44:
1e:86:6d:b1:8c:dc:2e:03:b9:4e:6f:e3:6e:2f:9e:
65:a7:03:71:a1:66:4b:8a:f7:4d:08:18:70:45:30:
7f:1a:11:65:26:1e:a0:d6:bf:a2:a5:d2:ec:a7:22:
ee:92:3c:d3:db:fb:d1:b7:9e:e1:44:d4:30:57:64:
35:62:67:1b:7c:21:e0:c0:40:5b:ad:6e:b2:0f:31:
be:83:9f:97:47:21:85:f6:1e:28:56:2d:cc:50:fe:
13:11:69:cd:81:49:77:c2:2c:ea:56:11:ed:18:73:
1e:10:79:2a:43:16:6c:c9:20:3d:58:1c:8a:f3:a9:
cd:1a:ea:1f:12:15:cc:38:d4:42:77:e0:40:63:ea:
01:b3:2c:f6:b2:83:11:75:9d:6f:ff:86:40:28:16:
3e:01:5a:55:41:05:32:8c:85:62:d8:cf:e9:49:e0:
4d:55:d9:e2:75:9b:75:38:6e:7b:08:cc:2b:5b:a1:
a9:9c:fe:9b:20:c5:e3:63:dc:6a:1d:ed:16:2c:2e:
1c:cb:97:3a:d7:ef:c2:91:2b:7a:2e:47:87:1a:d9:
d9:59:79:cd:fe:f9:13:a1:28:66:73:8e:08:d5:5b:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:27:B6:2D:B0:A2:D9:8A:68:70:19:D4:34:22:79:AB:96:E7:F8:B6
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ca:f4:8f:fe:f7:da:15:5d:c2:45:8d:8a:e2:68:1d:14:c4:
34:a8:51:d3:5a:46:0a:b1:92:e1:c4:93:10:1a:d8:e5:94:56:
34:42:7d:d4:46:ea:81:ef:4a:5d:13:58:3e:a4:a2:ef:45:f9:
3e:53:1b:da:d2:11:33:24:84:9b:b1:3d:78:77:5d:67:ac:f2:
6f:a6:09:5b:b2:a9:0c:1a:6c:52:66:ba:f2:6a:cd:4a:80:46:
67:e2:06:f6:cc:8f:07:8f:1f:d6:a4:c7:e0:f0:19:bb:7a:b8:
4c:8f:ce:44:11:94:b5:d2:d4:4c:a0:d3:28:33:bb:e7:78:a8:
c3:f0:11:91:45:26:f4:03:ef:e6:e4:f3:c2:ab:68:2f:33:19:
4f:0d:84:b3:c4:0a:d3:24:74:ca:bc:5c:b0:d4:72:a7:8d:47:
01:19:8d:16:de:80:39:a1:32:39:e7:c0:11:2a:d7:da:5e:c3:
20:eb:b3:28:ce:6f:c7:9f:c3:33:97:2a:82:0b:56:e7:f8:b3:
8a:ce:00:08:e0:8e:b3:1a:00:12:81:8e:4f:6d:26:a0:6c:31:
97:11:d5:23:10:e1:98:32:62:b9:16:0d:23:19:39:0c:38:7a:
28:7e:c1:af:51:ff:9a:ae:f0:3c:55:aa:5f:2c:86:78:93:a4:
05:a2:e7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:35 2025 by rpki-client