Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: vC0dCMKVx+FV1Z4/HOJMNCh1U0Fepu+PqVZFV0Y2/Ys=
Subject key identifier: 5C:85:18:6A:BF:F1:24:9F:DE:44:8C:3B:9F:EF:DF:11:EF:C2:AF:B1
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 0194BC04DFD520FEC8497DAB4DDDF7795DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 036A
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=)
2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: j5DfI5k5/qeuTh2jL9DS2oX1p/hj2KuwUV0Q/3GcK6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:df:d5:20:fe:c8:49:7d:ab:4d:dd:f7:79:5d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=5c85186abff1249fde448c3b9fefdf11efc2afb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:71:bf:13:a7:04:6b:a9:65:cd:bf:43:e5:
e7:73:1c:71:16:e9:46:d2:24:d9:a3:14:75:b7:59:
d2:ad:9b:b0:5f:1a:e0:b7:1a:87:2d:43:0f:89:a4:
1f:db:fb:c9:99:46:da:5a:2e:f2:6d:c8:5d:63:e6:
8e:1d:fe:58:53:a3:d7:18:08:61:50:bf:85:56:db:
fe:d8:25:50:fd:58:4d:2f:cb:ae:00:5f:d9:24:bd:
66:e6:1d:0d:89:40:31:6f:e4:55:77:69:d4:33:37:
ef:e3:65:3e:17:78:fe:ef:d3:d1:5e:d8:5c:49:69:
fc:26:0a:04:69:9d:b4:58:c4:56:ca:5d:21:c8:05:
88:cc:74:d8:75:c7:3b:1f:28:6a:13:9c:5c:5e:48:
08:73:3e:04:32:27:17:11:2e:24:ce:07:d8:27:29:
c9:06:da:26:ba:87:7f:30:06:0f:c5:be:58:bf:1c:
33:da:32:92:e1:e3:b5:a1:05:4d:fc:7b:53:ee:8c:
40:63:ca:29:1c:25:2a:12:49:95:f6:ba:ba:f8:7b:
aa:fa:f6:e1:6d:57:d3:eb:58:49:33:11:2c:ca:45:
9f:16:ab:f8:20:12:2c:fc:23:5c:de:92:b7:22:4c:
1f:f0:71:e0:15:a4:f9:26:4d:58:ea:f1:4a:b3:ba:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:85:18:6A:BF:F1:24:9F:DE:44:8C:3B:9F:EF:DF:11:EF:C2:AF:B1
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:22:79:c3:50:9d:27:4c:85:8f:10:35:06:a4:9b:ec:1e:1b:
c2:07:9c:36:3e:5f:6c:9b:84:0e:59:23:7d:f0:f1:d9:08:51:
eb:21:fa:6e:80:ed:a2:ee:38:99:24:ef:19:73:10:1e:ec:3b:
4b:52:61:2c:79:47:8d:00:4e:ae:71:91:63:40:d3:84:93:bd:
d7:b0:11:45:33:3f:66:47:46:f9:ec:c6:5a:f7:f2:63:3c:4a:
94:48:a4:95:a1:2a:21:6e:13:da:85:c1:46:0a:3c:5f:b7:c1:
40:32:dd:d9:a4:7b:14:cf:f0:9e:4f:24:36:59:64:9c:50:12:
88:54:60:2e:ba:d7:f9:df:d4:86:92:e2:87:2a:54:c3:33:54:
52:ea:b8:77:03:2e:60:25:53:07:57:bd:70:4c:bf:b7:3a:e8:
a8:ed:f3:36:64:9b:8a:d5:bf:f0:69:22:ea:5a:06:46:21:7a:
8c:33:75:ed:55:58:11:59:af:9e:45:83:60:f5:c8:f7:83:52:
54:3f:1b:23:a7:ac:6a:64:fe:c4:97:3a:ed:01:31:08:96:f5:
f5:02:54:a0:a1:b3:00:33:b0:20:8c:65:79:de:4c:a6:36:13:
92:b1:34:a5:4d:1d:ff:5b:ab:82:c5:4d:23:46:a1:1b:39:11:
e9:e9:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:28 2025 by rpki-client