Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File: FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier: Y4bPHZUF+gMhkZVMM21+2jrxJBVDy+23Ibx3TJhfRJg=
Subject key identifier: 7C:74:C6:88:14:3F:37:F8:67:D2:EB:34:47:86:53:76:F1:74:F2:FF
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer: /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial: 0194BBCE620A5FA7A2B8752DD7529CB07C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: rmwfz/nZUC1OV4n4T1G0aP7tb6QYIMkIn0mOfgWhWsI=)
2: xdBt6mgdPLmEK6zvGwvirp2QCKY.roa (hash: nTAIAin8JLzpAvSGVhNOts7eSHkAmQZF1jcZc7SgaKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:62:0a:5f:a7:a2:b8:75:2d:d7:52:9c:b0:7c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=7c74c688143f37f867d2eb3447865376f174f2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:b5:31:d5:f1:a8:c9:c1:f7:4f:17:31:12:
0d:f8:9a:5d:fc:df:44:e6:b9:bb:ce:1b:a1:39:24:
50:e2:37:50:7e:b2:3e:76:dd:ce:66:7a:94:e0:a1:
39:e9:0d:d3:50:42:f6:85:a4:5a:ca:44:b8:7a:ee:
62:ea:01:75:c9:45:51:74:71:38:06:10:91:d3:c7:
3c:f6:96:ca:98:b1:62:fd:c3:a8:19:59:0d:4d:99:
55:89:57:24:7f:d2:3d:b4:9c:d1:c6:90:aa:c3:a2:
ab:1a:ce:9b:1d:56:46:f9:e9:1b:05:4e:d6:57:d4:
df:05:88:4b:85:01:9a:9b:8b:fd:cf:1a:65:16:07:
bc:3d:21:89:5c:e6:9e:e4:a6:a8:44:4f:a7:be:45:
a3:ef:6a:4a:a1:85:43:8d:9d:3a:af:b0:4b:da:bf:
f6:1a:64:17:20:0c:bc:81:fa:b2:fd:24:27:ac:b8:
03:19:de:0b:ef:94:80:f8:f2:4d:4f:bd:c0:f1:f9:
1f:dc:6a:3c:4d:74:a6:a3:e0:b6:30:20:42:22:21:
08:0e:17:5a:88:1b:2a:9d:1a:b4:29:d7:10:dc:9d:
aa:71:c6:57:0e:92:c7:73:17:5b:e8:77:8f:a7:c5:
86:72:19:85:73:c6:86:6a:47:aa:9c:99:53:17:06:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:74:C6:88:14:3F:37:F8:67:D2:EB:34:47:86:53:76:F1:74:F2:FF
X509v3 Authority Key Identifier:
keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ee:e0:e4:f8:15:1d:ff:ce:7a:b8:35:c7:ed:7c:25:27:89:
e1:2a:1e:16:97:0f:01:57:1c:ab:c7:90:41:06:1e:19:20:d1:
92:85:94:e6:2a:61:d3:ed:e9:01:24:50:67:4d:28:d0:f2:a4:
b6:e0:75:b6:7e:93:52:f2:cb:a2:29:a6:30:4f:47:bc:d9:51:
a8:71:3c:4a:0e:09:e2:40:72:da:31:76:02:85:2d:36:7d:15:
fe:c5:f8:ae:e5:42:d3:7e:55:3b:9f:3c:df:c6:db:59:36:17:
91:f6:ca:cb:58:b8:c1:f8:8c:c2:be:15:4f:b8:e4:e1:e5:eb:
23:b8:06:46:9d:45:23:1e:0a:58:61:20:f2:6c:a4:53:69:70:
29:ce:e0:e0:74:9c:aa:8a:e2:ab:8d:53:0c:dd:d9:93:57:5c:
7e:ef:dd:6a:61:0d:bb:b4:da:9c:19:76:62:5c:ff:1f:0b:1f:
57:b3:5b:7b:0c:6c:83:c1:5c:79:5e:e6:32:24:16:17:b7:89:
36:bf:03:d2:fd:10:58:06:5a:38:a2:25:98:f0:b5:d3:ad:e6:
46:77:5a:7b:cf:81:68:1e:42:0f:0b:cd:00:3c:b7:4f:c3:f0:
ed:3d:94:4a:bf:01:1d:fd:75:13:bc:b7:ce:3c:73:1a:13:e8:
43:2b:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:33:20 2025 by rpki-client