Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File: FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier: R1UBbdenDP9np4EC80GY/fD9Dkr2ThRWiLrBUqGs9C8=
Subject key identifier: 50:08:27:5A:2B:94:C1:82:C4:0A:AE:1E:2A:96:B3:65:9D:2C:3E:7A
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial: 0194BBCEFF1CFDC7ECE383D83B5A460EFEB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number: 11AC
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: qvbA5Lbhq+FdkPj/Y2q2nSk0t7oQTKLq9ONOQ/GJeE8=)
2: GBpd_CXuB-9kNsxFo6gk--Reihk.roa (hash: g01Wtwi7iT3bkjePjiBnddon67j1RhvdGQsrObyK/EU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ff:1c:fd:c7:ec:e3:83:d8:3b:5a:46:0e:fe:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=5008275a2b94c182c40aae1e2a96b3659d2c3e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:08:75:6b:6b:84:92:28:eb:9c:9d:ae:48:
ef:d4:4b:29:5a:42:db:67:37:5b:97:48:3a:46:1c:
ac:9e:ef:60:4f:e2:57:df:fa:ea:ac:7d:4b:ea:fd:
9d:5d:38:a4:b0:58:c6:0f:c7:ec:47:6d:9e:e4:d9:
58:1a:a4:f6:e7:89:5b:8c:14:57:e4:2b:6d:db:dd:
fa:ce:8e:a5:2a:44:45:6d:83:71:2a:6a:b4:4f:8a:
49:43:61:59:d7:85:50:79:00:49:98:02:64:2b:e2:
99:fb:0c:2b:f1:7a:00:cd:fc:6a:e3:5c:6a:7f:68:
cf:e1:c4:57:c7:e5:5e:95:49:f6:6d:88:be:c0:ff:
34:f4:0b:9c:9d:bc:eb:cc:cb:fb:09:da:e9:42:97:
65:7a:d6:9d:3a:d1:b4:ad:bb:a9:be:56:b4:a5:eb:
0a:0c:53:97:5d:36:a0:46:cf:f8:9c:7a:87:1d:0d:
30:0e:ce:07:e6:29:91:b9:9b:ac:9d:b0:93:a9:41:
72:67:94:0d:6c:10:86:51:ef:87:35:c1:69:b4:ee:
f4:df:51:f9:b6:67:70:2b:73:a6:50:22:ca:aa:01:
18:88:4f:f2:f2:fb:f7:f6:d0:4c:40:e4:0f:eb:97:
a2:c1:9b:13:5a:02:27:b0:13:73:f4:7c:f4:9f:e5:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:08:27:5A:2B:94:C1:82:C4:0A:AE:1E:2A:96:B3:65:9D:2C:3E:7A
X509v3 Authority Key Identifier:
keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b1:37:a7:37:e7:1b:18:d2:0d:31:e2:23:83:9c:d3:cf:4c:
e4:3d:7e:2d:45:92:60:32:b3:10:c7:ff:e5:fe:27:7b:fa:76:
01:d3:3b:d8:b1:f6:27:e7:d2:ce:5c:0e:d1:f1:f9:b1:f3:36:
ad:91:dd:6f:db:20:0b:8d:aa:98:98:87:ba:42:5c:38:5e:94:
be:98:8b:b9:38:c1:b0:f1:ea:fc:9c:87:be:6b:5b:1c:33:c8:
c3:e1:ca:2b:c8:41:5d:53:b0:7c:05:47:9d:5e:1f:8b:ae:ee:
30:04:3f:a7:e1:fb:9f:a6:1a:91:03:0c:4a:ca:0b:40:c0:69:
31:3a:cd:0d:df:25:ae:93:e5:99:38:9e:c5:b3:97:65:ad:19:
8b:1f:37:65:04:b4:d3:4d:e3:ab:46:a3:ac:53:14:a4:8a:bc:
88:29:3c:1d:7c:cd:1d:ee:d4:2d:7a:07:24:27:b9:04:62:cf:
ab:84:6b:51:9f:bc:3d:0e:ae:08:d4:08:0b:0d:23:70:3d:90:
a6:16:28:91:97:cf:7f:7e:a4:c5:96:70:70:da:25:49:7f:1e:
45:2d:89:9d:1b:d2:8a:ac:21:0f:6e:0f:8a:91:1d:5a:b3:e5:
cb:2d:94:08:e5:2a:22:2e:d3:0e:cf:de:09:33:a1:2f:8f:9e:
6e:c6:4d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:32 2025 by rpki-client