Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: aEKIaGSUqS6DWOrtVkXq14bKSrRn+plvSZFlSCMwYa0=
Subject key identifier: 32:15:CC:14:6D:2D:A4:D2:F6:92:2A:45:8A:78:59:A1:64:EF:AA:F9
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 0194BC3BC973486F3D37E5A034D33C49D088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 0F6F
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: 6t4HM6NAm/aBNPhc8qNDp7As/nRVYPPkLjSERJgt8Sc=)
2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=)
3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c9:73:48:6f:3d:37:e5:a0:34:d3:3c:49:d0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=3215cc146d2da4d2f6922a458a7859a164efaaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:34:53:53:a1:a1:8f:76:16:eb:87:a4:ae:
29:49:3d:13:ad:25:47:a6:f1:d6:30:65:b9:96:2e:
e0:db:e1:66:ea:14:72:eb:25:35:16:f0:d7:30:a1:
19:d5:1f:74:3c:5c:aa:76:1a:21:c2:89:c7:13:5d:
34:d7:dc:10:0e:5d:19:fb:65:58:84:e9:47:b2:21:
56:7b:f4:09:86:25:15:c0:83:79:64:3d:c9:20:67:
ac:25:1d:ac:14:ec:a9:9c:16:28:1d:40:1e:97:54:
97:86:ff:19:8d:9e:9f:26:f8:33:ee:6f:a6:be:af:
15:32:5a:91:fd:86:09:2e:0d:aa:30:11:aa:a8:ce:
f3:cd:e0:c5:fd:d3:2c:aa:16:98:60:22:02:e6:0f:
e6:fc:d3:5f:c4:4e:77:b5:b7:30:c6:3e:31:b7:d8:
f2:e8:35:9f:7a:19:dd:ad:47:34:85:9b:67:7b:b8:
c7:78:5f:9a:2f:e5:14:fb:b9:82:9d:89:8f:7e:ec:
8c:e3:36:b4:72:8f:3e:93:87:a1:78:71:8a:34:04:
22:12:09:8c:7d:32:34:61:9d:62:f3:1c:ec:d1:4e:
ef:d5:12:41:66:dc:c2:6f:8b:a7:4e:00:d6:f5:b3:
b6:4e:a0:ef:82:b8:f0:e0:a4:6f:60:b5:eb:c6:81:
0a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:15:CC:14:6D:2D:A4:D2:F6:92:2A:45:8A:78:59:A1:64:EF:AA:F9
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e8:27:bc:44:64:e2:36:a9:a1:90:05:70:26:c7:34:74:9c:
99:71:bd:f4:ba:99:d1:eb:a7:cb:86:9b:92:98:ba:d0:4e:65:
3e:25:90:0d:f7:f9:55:4f:5e:29:12:04:8a:ac:c6:bc:4e:b0:
a7:d3:5f:8a:41:c5:d9:df:a1:0f:1c:4f:a9:43:e7:81:f4:36:
77:4c:7a:58:d1:88:40:ae:ec:f3:73:53:73:1b:42:cb:6e:b8:
5d:3c:30:ab:cc:bc:45:18:c7:63:74:dd:0b:1a:ec:8b:88:b6:
d1:48:b9:8c:e3:af:f1:e3:c3:8d:01:bd:26:85:24:62:2e:f9:
be:6e:65:3f:07:ba:b9:67:f9:a8:22:4e:d8:2b:15:eb:ab:33:
ad:06:f0:28:6f:48:11:de:6b:92:73:e5:c4:3c:d5:a8:74:7c:
c2:c2:d0:49:b0:8e:67:7d:ab:d1:ca:98:27:fe:93:2c:83:ce:
53:65:e0:bc:8f:9e:b0:50:bf:a0:bc:a8:9d:69:59:e4:a4:b0:
b6:de:98:8c:da:0d:c6:fe:72:70:13:94:30:aa:e6:d7:14:99:
9f:66:cc:27:7c:fa:d8:f6:e1:31:14:08:b7:97:42:d3:9e:7e:
7f:11:3b:cd:8d:d9:e3:7c:51:1a:cc:f0:b1:f0:12:23:78:0f:
13:1f:05:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:55 2025 by rpki-client