Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier: i+MaZ9y2u1/FLzFgufcliPtLkaHncTmWaNMwAeNAiGg=
Subject key identifier: 91:C2:31:FA:8D:32:BE:AD:FF:D9:55:34:6D:1A:32:35:68:83:F3:02
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial: 0194BC04B70968B5A8A92EA9226CC0DC4B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number: 074A
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: M3U2nfNs3njz/SXiTd7NLnWKALQGxRNlQ2ks+Iohu80=)
2: g3b-X86nv3p6U9DOq4hCU_Dnmdo.roa (hash: 2YoEPjb/mUp/HqQp7Qak5HkOS9XgXc9API514lfVQEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b7:09:68:b5:a8:a9:2e:a9:22:6c:c0:dc:4b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=91c231fa8d32beadffd955346d1a32356883f302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:37:3b:94:de:d1:0b:b4:d6:9c:8b:71:4c:
ea:f9:8f:a6:27:5e:d2:76:cb:d2:a3:84:d0:c8:f5:
ad:49:10:2c:9e:d7:dd:60:32:9b:b4:b7:e2:7b:79:
e3:82:59:ad:90:f6:a4:e0:fb:60:2a:b4:38:13:94:
db:1e:ad:62:55:04:66:92:43:c4:c9:16:b4:4c:09:
b9:f7:de:d9:90:a5:13:97:27:df:e3:ec:e7:a0:3f:
a6:bf:91:aa:c3:a9:fd:32:44:0a:b6:09:aa:f5:55:
95:9f:47:b5:81:37:77:26:99:dd:29:70:a1:bc:54:
c7:d7:0d:81:2e:17:6a:5a:bc:3a:5c:e5:a0:30:75:
95:57:e7:e7:30:4f:73:93:39:25:30:0c:c5:bd:db:
1e:88:6d:be:30:c9:46:44:40:93:0e:36:16:a1:7a:
e1:00:87:3a:27:cc:66:18:e1:34:5c:52:a5:20:93:
e2:3a:b8:f1:1a:98:b0:ca:38:5c:90:74:f4:31:04:
52:7d:85:d3:16:18:fa:0a:d6:f4:44:ef:46:ef:70:
0f:09:0b:a2:47:de:2d:69:47:93:ee:8d:ca:67:c4:
c6:b6:29:f9:72:52:ec:18:73:43:6f:66:5c:e2:89:
2b:02:f4:b7:c3:75:00:cb:21:bd:77:6d:85:28:7f:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C2:31:FA:8D:32:BE:AD:FF:D9:55:34:6D:1A:32:35:68:83:F3:02
X509v3 Authority Key Identifier:
keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:47:c3:95:18:15:1f:20:94:86:f3:8e:d5:6b:c7:f0:74:59:
f6:fe:e6:b8:55:78:37:e3:d7:6a:92:35:8c:be:de:23:02:b7:
f9:a3:ee:91:ef:98:c3:7f:c4:20:c1:7f:38:cc:06:5a:9c:95:
8a:a2:c9:2c:77:a0:b9:d2:96:81:fe:34:90:09:3b:14:63:14:
04:d9:1b:35:ea:22:5b:48:8b:ba:44:1d:a4:94:f2:3f:85:c7:
0f:3e:be:d6:49:8c:5d:7b:eb:03:48:c8:6e:1c:6f:27:e6:d0:
1b:a2:8c:00:bf:f7:6d:4c:78:97:be:36:e7:39:7e:1d:c5:c7:
c7:f4:66:94:ad:76:74:4e:87:23:41:bc:a6:26:39:dc:d7:7f:
c8:14:51:4e:ef:92:ce:42:9d:1a:b0:55:0a:54:c3:bb:83:ba:
f2:8b:33:07:14:50:0a:c4:97:57:e8:a5:f0:00:8c:c0:83:0b:
cf:73:97:83:30:8e:31:b5:24:6d:d2:a2:df:c8:7c:1d:b6:6e:
e7:de:b1:8f:b9:76:1b:e2:7b:01:ef:3b:ed:b7:ba:3d:ef:9c:
c3:47:3a:f4:8e:77:3a:ab:30:39:da:ab:a1:b5:ec:ac:51:5a:
09:e6:c7:b2:be:d8:73:5b:35:3d:d1:e2:90:e3:b9:3a:a5:e1:
50:f8:1a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:20 2025 by rpki-client