Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json)
Hash identifier: 7oQBJocUG37pTPZE9Z4NW758cRuWMIwQjJksvpmJfrM=
Subject key identifier: FB:72:0E:B7:11:D3:01:15:BC:70:6F:0B:8D:91:33:F6:B1:78:C4:3B
Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Certificate serial: 0194BD4E74F368A0C74149FAA84D92909640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
Manifest number: 11CA
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: 77yJaauLzrFexoGSd8mW28O_fIU.roa (hash: ub7MVHo9mZ0L5vdaNfZlA1Alkn53dGfVV4Z9Peyi1bs=)
2: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: /w8n35GsmhelM7bjehfP+gA4BFBArZUPZ4hDK7T4dxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:74:f3:68:a0:c7:41:49:fa:a8:4d:92:90:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=fb720eb711d30115bc706f0b8d9133f6b178c43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:ad:a8:97:d7:64:16:df:fc:84:6d:00:56:
35:27:4a:3b:5c:26:e9:84:cf:86:a5:0b:59:24:65:
e5:23:ea:ce:7a:7e:0f:65:d0:b7:c8:92:37:84:65:
5a:c0:1c:e2:00:01:d5:6c:37:3e:9e:c5:d6:33:f2:
00:f4:d3:45:80:36:68:88:d3:f4:1b:2f:81:5c:46:
fe:4f:51:5a:b2:0a:45:7c:5b:cb:f9:fb:3d:66:45:
b5:95:d5:da:a3:cf:02:20:4f:e9:cc:71:0c:d4:a0:
b6:16:fd:ef:e7:5e:57:6c:76:d2:ae:1a:96:91:1f:
05:b5:ec:47:07:52:63:1b:9b:a9:c2:fa:f9:73:89:
fe:77:5e:f8:76:7a:cb:04:65:9f:bf:64:cd:90:12:
71:f5:52:99:52:8a:65:b4:65:3d:bd:10:bf:68:57:
a5:e7:59:5c:85:00:3b:a4:cb:cb:ad:93:2e:39:8b:
fa:e1:4e:d1:81:dc:5c:5c:cb:5b:99:d7:2f:17:27:
ea:3b:f8:21:85:e4:77:df:21:6d:62:1c:d0:f9:b3:
8a:74:33:aa:cf:1e:78:72:6b:2a:d9:7a:1b:4d:02:
d0:4c:9e:02:45:82:01:a6:e2:7b:65:07:75:64:b0:
62:3a:b3:9c:2a:8e:a4:7c:4a:cf:b2:3e:f8:36:49:
bc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:72:0E:B7:11:D3:01:15:BC:70:6F:0B:8D:91:33:F6:B1:78:C4:3B
X509v3 Authority Key Identifier:
keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:78:42:65:cc:03:d8:a5:1f:ca:a7:d5:60:66:f1:0a:7f:7e:
cd:31:1d:24:1f:6c:76:7c:8f:fd:94:63:72:22:f8:3e:c2:bf:
7f:d3:1f:62:ea:8b:60:e1:88:21:46:01:be:8b:fb:b0:29:bb:
bb:bc:71:83:2b:20:01:b5:0e:fb:2c:f5:5e:61:72:fd:72:c7:
e2:e7:46:06:4b:0b:c1:2c:4f:e5:f4:a9:a0:40:7e:14:be:1d:
73:2c:5a:df:5a:29:2e:0d:24:86:8a:07:20:8b:73:e0:d4:27:
b0:c4:9b:95:84:4c:53:0f:c8:c5:68:57:ee:6a:84:df:95:ac:
22:dc:b8:c2:34:f0:f7:38:0e:1a:95:17:fe:a0:a8:b8:50:44:
1f:80:de:ce:6c:03:35:ef:35:2a:4c:17:e9:f4:98:48:62:d2:
ce:24:70:0b:15:f4:ec:69:d0:d6:1e:c9:8d:8d:97:8f:f5:8c:
a5:09:9a:07:14:76:69:d6:7a:5d:b6:d1:da:c7:73:da:fb:33:
0e:10:b3:58:81:86:b5:4c:f8:82:72:35:78:1f:69:14:bd:da:
29:61:a5:bc:88:81:41:10:31:ff:87:15:5b:3b:eb:51:a2:79:
1b:8c:5b:33:ba:af:79:04:84:5a:75:38:9b:18:83:5a:07:44:
5a:50:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:39:56 2025 by rpki-client