Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: XhGCEXFrYguGGSomg1AKGdgJ6hq9Qrln7T1hlU43VuA=
Subject key identifier: 47:6D:5F:45:70:3E:7B:FC:58:B6:2E:7E:16:9A:1B:8F:FF:5E:84:55
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 0194BD1757852FDC11E1EE8CB14C97D061FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 0EEF
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=)
2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: ixZZ6x6W89B+WmoY7Cf194qYiG/Zz25Z+keDN2cj2bo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:57:85:2f:dc:11:e1:ee:8c:b1:4c:97:d0:61:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=476d5f45703e7bfc58b62e7e169a1b8fff5e8455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:bc:2d:b3:88:71:42:88:da:69:81:73:ca:
a6:a4:9d:9e:02:1c:69:3d:41:52:ca:c6:29:8a:0d:
c2:dc:93:bd:6c:4d:7c:dd:d3:31:2d:e2:32:7e:8e:
c8:ca:3f:9b:57:5c:80:a6:72:11:35:9a:b7:7e:8d:
6d:49:79:7c:54:4b:14:3c:c9:1e:a2:49:3c:71:ca:
82:8c:4e:e7:d0:1a:db:41:30:d8:10:9a:f3:1a:ae:
10:e4:3f:21:be:b0:e3:94:bd:ee:58:cf:73:6a:4d:
76:e1:fd:6d:51:46:d4:9b:b5:c1:83:d1:9b:77:8b:
bd:51:e2:05:eb:9d:ba:94:aa:44:60:3b:da:f0:72:
05:e6:59:a3:c2:49:64:a2:56:3c:f9:c5:6e:2b:cc:
9b:a2:27:e8:b8:1f:59:0d:00:b2:66:47:13:87:ac:
bc:cf:be:43:7e:a5:e0:69:1e:47:6c:2e:7a:fb:c0:
0b:c1:3d:b2:24:b4:29:f5:5e:c1:b2:bf:dc:76:9f:
2a:80:89:9d:09:9a:e1:45:f4:da:a9:2d:21:be:cd:
e5:b7:5c:3f:a8:01:ff:d3:29:2d:dc:9c:ae:f9:f8:
8f:46:74:42:23:f1:7d:0f:8e:2f:aa:53:56:c8:2a:
f0:4c:6e:28:6d:d4:6b:04:c5:90:e5:cb:64:07:29:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6D:5F:45:70:3E:7B:FC:58:B6:2E:7E:16:9A:1B:8F:FF:5E:84:55
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a9:ab:75:88:73:e9:d0:55:1e:2e:ce:7c:cf:fb:72:15:ff:
ac:84:a4:6b:4a:26:7b:5b:47:ad:9b:cf:3f:59:f6:e2:73:2d:
47:5f:f2:eb:22:ec:81:45:16:db:d4:cf:a7:b2:c0:a8:9b:29:
60:f4:89:6e:03:cc:a0:bb:11:3b:e4:1c:52:dc:98:56:54:52:
1f:3f:9b:0d:a6:67:37:1f:83:4c:0f:9f:68:d1:3e:05:05:48:
37:27:6f:e8:dd:3a:6e:32:bb:f7:3f:ee:c0:9a:c4:8f:98:12:
a3:8f:c3:3b:1d:ab:5f:7c:2a:0b:de:98:a5:45:ec:f1:ca:ac:
62:56:e3:6c:d2:7d:22:2e:3e:6e:03:25:87:17:59:cf:37:29:
60:77:54:2d:f8:ec:1a:6c:fe:b7:c9:fa:f1:69:40:62:ee:53:
58:32:16:dc:57:c7:ef:30:05:11:5f:e2:5a:df:e0:fb:f3:dc:
13:fa:46:12:8c:df:aa:65:e6:11:ab:22:69:b7:57:38:e1:b4:
82:68:50:9f:9c:52:e3:68:c2:cc:56:09:aa:cc:68:67:2f:01:
99:59:40:42:92:76:08:d0:11:5d:d3:f8:5e:86:32:07:23:cc:
e8:72:31:56:e0:31:e0:c0:62:cc:e1:ef:13:c2:4f:18:bf:dd:
00:d3:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:16 2025 by rpki-client