Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
File: FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json)
Hash identifier: DiUiBarg3jln8Tq62v8lFlI5WIvL3fCQ1d2KFu48hbU=
Subject key identifier: 2F:AD:D6:80:4E:EC:6E:A5:7A:F5:E7:85:DD:8D:CA:85:24:F3:3B:38
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 0194BCAA1D4AB4FC543B981ECEC4C2B739A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: 9svdSi4VMR39LcPpfRqTZ_ivzWU.roa (hash: qkFZEN8wS5/7d3PWnlFnfBgG42VLZsiC6RIzbDuNeoI=)
2: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: FpOVrliUP1CDSBMmCgGwdsGAxvKYYVmz2TTTiVwN1iA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1d:4a:b4:fc:54:3b:98:1e:ce:c4:c2:b7:39:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=2fadd6804eec6ea57af5e785dd8dca8524f33b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:01:63:fb:26:42:d4:43:ae:6b:6a:35:2b:
79:8f:1d:71:6c:fe:27:c3:ef:e0:b2:98:02:6b:f9:
52:f4:3e:68:04:81:6d:77:6c:19:ae:c6:7e:7f:00:
7d:c2:da:0a:4a:ce:4b:0d:a2:8d:3c:f8:81:8d:9b:
32:ed:db:38:72:28:5e:b9:18:15:f0:cd:b0:ab:71:
5c:d4:20:53:83:11:8e:47:1f:82:33:76:49:39:04:
76:e5:70:66:27:c1:9b:9b:8b:94:13:33:f4:08:4c:
fc:0b:da:3c:f9:d2:6d:1c:cb:17:61:1f:7a:06:00:
8c:f7:3a:1a:e0:46:8e:78:5f:cc:e9:89:d3:5e:b0:
3d:11:36:51:71:08:c9:94:26:41:e0:ac:07:d7:5f:
e4:2c:5e:71:63:26:60:8c:14:18:29:03:92:f9:6a:
6f:10:90:42:2e:47:94:9e:47:d7:97:f6:a8:a4:a8:
e8:be:3a:a1:8b:2b:b9:09:6d:a5:e5:9a:25:40:b1:
46:82:92:55:08:17:23:87:95:de:b7:4f:8e:31:7e:
6d:0e:d9:59:99:8f:8d:03:1e:d6:5d:35:6e:a3:82:
2c:8d:78:79:09:92:33:85:8e:ae:1b:67:8a:76:d4:
e7:7f:ec:a5:62:62:df:7a:af:43:b3:79:dd:b3:d5:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:D6:80:4E:EC:6E:A5:7A:F5:E7:85:DD:8D:CA:85:24:F3:3B:38
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:95:de:61:27:ce:a9:a3:e8:1d:74:6f:35:fe:6c:85:e6:ef:
1e:59:91:c0:13:a4:83:79:c4:ef:b3:ed:37:fb:95:3e:fe:b1:
b5:11:d6:54:ab:6d:a5:a2:a4:9b:1c:5d:af:21:5b:31:20:73:
5a:54:9e:9e:98:da:66:ab:3c:f4:51:a6:d9:12:a8:92:b0:cf:
1f:7f:10:53:8c:a9:3a:4b:9e:dc:62:50:b2:a3:ae:2d:d1:12:
ee:35:fc:fa:e5:30:ef:8f:58:67:65:92:a0:ec:4a:fa:3f:2e:
aa:b7:4f:74:b1:e2:39:bf:82:a6:58:9a:fd:45:72:31:d7:ab:
ab:f0:e0:81:da:8e:ae:cb:ea:72:73:37:b0:7d:fe:95:b7:0b:
6f:c9:d6:a5:6b:5d:e6:21:73:fd:fc:16:e8:e2:a8:e4:b3:4d:
3e:46:f7:a6:2b:58:92:4f:c7:d4:5a:2c:83:f8:2b:8d:1e:62:
78:ff:52:10:f6:b7:8f:4e:5f:1e:0b:02:af:8f:0d:38:ae:5a:
c5:21:7c:1b:cb:12:e8:00:b5:b4:45:54:9a:11:1b:6e:ff:26:
1d:d1:3b:8f:4e:fd:59:ed:bc:09:ed:b4:3d:b2:fa:54:f3:cd:
51:c8:92:6b:c3:55:9d:cc:f8:1a:13:fa:f5:54:09:9d:34:a8:
20:82:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:42 2025 by rpki-client