Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
File: FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft (raw, json)
Hash identifier: Nr9qK3j3rC7v4saBb+NHEAzbvuTatzuqmh0n/HcRBtM=
Subject key identifier: F8:FC:90:6A:1E:3C:CA:95:36:4D:BD:B9:CF:31:4A:3D:84:B6:65:51
Authority key identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
Certificate issuer: /CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Certificate serial: 0194BCAA1C70FCDE45083E5D19583F23BDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
Manifest number: 01D9
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl (hash: nH1a4wDUz+x6ItZjeG15fjvCntsBe8Br1efmfL0Mswk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1c:70:fc:de:45:08:3e:5d:19:58:3f:23:bd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=f8fc906a1e3cca95364dbdb9cf314a3d84b66551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:a5:e9:f6:b4:f5:e0:fb:52:c5:2d:07:4d:
a0:fc:ac:e8:77:d3:32:4c:7d:7e:1a:2d:a8:9c:47:
76:00:6c:0c:24:bf:ea:fa:ed:1e:bd:c8:cc:5d:6f:
dd:56:ee:e3:a7:fc:08:82:17:91:9f:e8:fa:8e:ec:
84:e5:b2:5e:07:b5:0e:3f:3f:20:c8:08:95:51:65:
55:bc:1e:84:b4:b2:1b:65:21:4f:64:04:7b:1d:00:
ae:b1:9e:ed:4f:17:ba:01:92:8f:42:a0:c0:e1:64:
8b:31:33:c7:08:5d:85:54:98:6f:98:8f:61:49:69:
f5:a8:2e:d0:64:34:b1:6b:61:33:1a:ae:f7:ed:cd:
3a:7d:0e:fb:b8:e2:b3:96:51:d3:e9:c7:f5:da:c4:
c5:8a:8c:45:09:67:c5:32:7b:4d:69:26:b8:90:9d:
d1:88:ee:8f:60:33:ef:32:cf:ce:2f:00:fc:c5:93:
86:a8:0f:ed:ae:a4:0c:26:b9:82:7c:d2:cb:91:22:
2b:61:4e:1b:9f:b0:31:19:70:43:a6:17:5c:84:54:
1d:c1:b5:0b:dc:9b:b0:d5:89:f8:4f:b2:9b:9d:d9:
3f:f6:33:98:4e:d7:02:8c:f3:e6:8b:e1:1f:cc:3b:
3d:68:f2:80:08:30:d3:91:8c:7e:fc:39:aa:f0:a9:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FC:90:6A:1E:3C:CA:95:36:4D:BD:B9:CF:31:4A:3D:84:B6:65:51
X509v3 Authority Key Identifier:
keyid:16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7e:35:2a:b4:33:ec:60:06:e6:85:0d:18:cb:c4:94:80:41:
02:79:08:2a:13:1b:90:62:47:67:e9:03:12:8a:51:df:5b:5a:
0f:6a:90:f7:62:2e:12:dc:6c:11:56:52:e8:c7:f0:e4:c7:74:
1c:47:e5:56:ee:aa:55:d4:fa:fd:b1:ed:f4:3e:70:6e:3c:e7:
d9:a0:04:e2:1b:06:58:2f:3d:8c:76:96:10:af:b8:ed:5a:e0:
52:58:a1:81:6d:c0:e8:6a:9a:cf:6a:bb:27:b6:66:70:08:13:
56:a0:31:85:74:43:19:a6:08:54:9c:f7:21:63:2c:fc:b9:f1:
5b:df:ef:6b:03:fe:48:78:fc:0c:ae:3e:16:de:d2:fd:b4:27:
7e:e2:6c:46:a8:9a:86:44:ee:96:32:7b:3c:50:c3:dc:4a:3b:
85:df:e4:9f:b7:96:f9:7a:de:45:d9:ae:d5:4d:e7:45:43:08:
45:e3:36:a8:4f:ca:73:b5:c1:0a:cf:a9:90:6d:c3:af:2d:c5:
5f:f8:1a:0d:84:b1:7b:cc:ae:35:81:a7:a4:f9:33:64:b3:1e:
66:9d:a6:c0:9a:af:8e:0c:9d:9b:9e:99:50:ff:5f:8f:6d:9e:
7c:95:fe:73:e2:08:9f:1d:d3:02:27:47:f5:5d:3d:af:de:ff:
45:c9:c7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:37 2025 by rpki-client