Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: mZu0mA4k7ZpcVpGKr1deE8wLvWzQPXxsYp8ZaHBMCwk=
Subject key identifier: 71:67:29:7F:06:7E:26:B9:F7:00:DD:48:AD:32:65:D3:7A:B1:08:B9
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 0194BBCE0820B267658F8214F9A42949E26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 0D16
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: cZ/c56dtO09cMoY3bIk5amipFZQ2QpQDhzNrAMPIKlQ=)
2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=)
3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:08:20:b2:67:65:8f:82:14:f9:a4:29:49:e2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=7167297f067e26b9f700dd48ad3265d37ab108b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:e3:c7:3a:2a:25:96:92:f0:15:43:8f:26:
57:c8:9e:52:40:68:1f:a4:fd:b2:c2:aa:b0:8a:86:
9a:87:99:ea:ff:32:94:ab:f9:f6:a1:40:1a:0a:d4:
72:85:ac:9b:7c:48:60:d4:48:03:16:2b:23:22:63:
20:2b:b6:ed:07:e5:d1:64:65:2c:a0:69:01:c0:07:
bd:c1:4f:61:05:e5:6a:77:06:b6:b9:fa:6a:fc:17:
e4:f9:41:17:25:2c:db:fb:6e:24:22:be:59:e2:9b:
77:02:96:fb:c1:e9:95:78:fd:70:be:11:01:34:ef:
b3:da:76:6f:6c:7e:34:1a:f5:57:03:c4:16:dd:40:
34:85:a6:34:99:c0:30:f2:6f:f0:dc:02:2f:e2:dc:
df:f6:53:ee:15:b9:22:fe:81:fc:70:67:c5:94:51:
36:ae:aa:8f:10:97:fd:3f:fe:90:df:6d:b9:e8:57:
88:c2:c2:74:06:78:0d:ba:1d:da:f2:ba:13:c7:0a:
fd:9e:58:9b:2e:cd:e6:d3:5a:f6:fc:f7:f3:f5:ba:
fc:de:dc:f9:77:f6:38:c9:1e:59:14:d0:92:14:b9:
7d:a2:32:25:3e:36:4c:57:fc:08:41:32:44:90:88:
8e:c9:51:3d:4b:06:9c:9b:67:5c:88:bc:48:20:25:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:67:29:7F:06:7E:26:B9:F7:00:DD:48:AD:32:65:D3:7A:B1:08:B9
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d3:e1:d4:02:7b:99:58:22:3f:ad:ba:a1:7c:93:64:c0:d6:
4e:90:85:3b:83:2a:96:ad:5b:52:74:93:cc:d4:11:48:58:51:
b0:ed:09:73:77:88:cc:ff:e6:98:7e:8a:fe:c1:1b:23:53:ac:
09:a0:a6:f4:5d:2e:38:ce:32:0b:90:9f:8f:11:9b:87:38:04:
02:1a:4e:5f:62:4d:f9:9a:ae:b8:c6:12:9e:24:c7:42:b3:97:
4f:a3:f1:c0:d8:52:d7:20:10:5d:fb:a0:00:b4:7f:ca:25:39:
b3:56:3e:ce:5e:61:b8:19:a3:45:f7:a7:99:03:5b:97:22:8a:
f2:ac:6c:16:72:d2:ec:0f:89:24:44:cb:d2:ce:03:a1:69:d5:
05:d6:a1:1c:39:b4:65:39:f1:81:5d:33:3c:e0:66:18:7e:14:
05:66:04:65:42:cc:9a:09:39:a1:0b:87:1a:60:08:cb:6d:b9:
b5:2f:fe:b6:29:ff:83:f5:72:8d:5f:6a:bb:6b:e3:43:bb:98:
5a:10:15:4e:52:68:e6:dd:5a:6a:a6:33:3f:2f:19:e6:8c:87:
40:73:a9:2c:7f:57:2a:7c:19:2f:d9:0b:01:b0:89:7c:15:83:
d0:59:7b:9b:ef:d8:e1:3e:6d:ce:eb:d3:12:1b:1e:1a:3b:52:
44:e2:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:03 2025 by rpki-client