Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier: MGqYaiFgABSvBfTHyi6jJLtUNxY6OxeTj1uo2k0PsAo=
Subject key identifier: 1D:89:97:E6:34:50:FC:BE:0D:8B:FE:66:9D:91:97:35:6B:29:EB:12
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 0194BBCDD4633A7DCE2CDAAA1685C24AD90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: UbBLVe0gOJNuHEDIvF0HO+5if+4A3DJRiJxLmc25Bpk=)
2: pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa (hash: eiiWFlrGCt5q99WuEtVs0GomqjrXO+w6ZrM3SP/1WdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d4:63:3a:7d:ce:2c:da:aa:16:85:c2:4a:d9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=1d8997e63450fcbe0d8bfe669d9197356b29eb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:e4:19:38:f1:c6:ed:0a:40:7c:cd:ec:43:
62:73:62:8f:b9:62:0d:50:23:0a:1c:b1:a5:55:93:
55:06:c0:ac:2d:72:16:90:1a:09:20:62:0e:84:7c:
5e:7a:f0:01:df:94:cf:36:3d:d9:dd:7c:fe:f3:c1:
7b:b1:0a:be:e6:e6:3b:51:8d:4e:ab:7b:8d:22:12:
7d:29:38:54:6d:0a:14:45:37:c5:b2:f4:d6:99:2e:
57:7f:85:ea:3f:14:c2:4a:52:ee:5d:fb:a4:a9:73:
55:17:ae:f8:cb:e6:5f:0b:fe:96:49:b5:80:01:f1:
a4:b4:8c:3b:2c:a3:54:9f:40:af:3f:e6:90:d5:cf:
32:86:98:17:3f:69:a4:fc:e4:55:81:37:3d:07:19:
c3:f6:7c:22:23:9f:17:ee:8c:45:ce:66:44:a4:02:
49:c4:9f:90:1a:ae:2a:9d:5e:49:9f:1d:ec:6d:0d:
15:64:cf:45:3a:61:c8:0c:16:d9:84:2a:38:c5:54:
e7:46:5f:34:8f:e4:b4:9e:a2:2a:64:db:5a:2e:8c:
65:73:8c:6a:57:61:69:3c:ef:a8:98:74:f3:ff:6a:
a9:d9:6b:96:e1:79:74:1c:9d:8c:65:69:72:77:7b:
b4:c3:aa:19:15:93:24:d8:84:4c:80:ef:80:7a:1d:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:89:97:E6:34:50:FC:BE:0D:8B:FE:66:9D:91:97:35:6B:29:EB:12
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:de:ba:d3:73:13:2a:5a:9f:67:cb:64:08:b4:5e:01:77:a7:
2f:81:36:e2:04:4d:1f:dd:b1:c5:a9:82:b1:1c:33:f1:57:a1:
65:2f:c2:35:a7:8d:33:c8:69:e2:25:30:14:3c:cb:6e:81:bb:
22:3d:b0:3b:2c:e1:8c:9b:dd:ec:3f:32:8f:6e:65:0e:41:31:
b7:6d:ff:ab:46:19:a1:e6:a2:d7:b1:34:e2:0d:8e:b5:b5:83:
87:1a:db:b2:4a:ef:1a:c5:1c:7a:19:9a:6d:61:09:24:a4:4a:
7f:e5:d4:ae:e8:a8:98:45:f0:c2:6e:80:ff:54:f3:9d:d7:30:
0b:79:ea:a9:3a:02:8f:1c:f2:30:90:58:50:65:7d:3e:f0:70:
6d:6f:fe:79:09:bc:74:d9:1e:58:5d:8f:ec:e0:63:27:d5:e8:
12:20:93:64:3f:9b:52:30:24:b9:ee:85:12:fb:7e:f3:6d:26:
50:cf:17:db:ec:6a:cb:21:6a:80:99:23:14:6d:36:9f:e3:e2:
31:2e:d5:eb:af:12:07:66:08:f9:14:f4:cd:cb:53:e3:00:3d:
26:4b:5f:17:d4:33:5c:d1:46:0b:d0:16:1b:f0:1c:8e:4d:74:
c1:18:42:a0:14:33:97:1e:6b:d1:a7:e6:d8:f2:bf:77:6a:32:
e3:02:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:19:43 2025 by rpki-client