Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier: /UFaxOPqq3isyQWZN8pHNK76vnzg2sGE1tZQuXAsY84=
Subject key identifier: 38:7E:C9:89:FF:A8:D5:B6:27:11:7D:A3:C1:8F:D4:CC:9C:ED:47:50
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial: 0194BD4E87D35E7E70264B371CA42A09CE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number: 05AE
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: 2MEo2jMoegCH1A6pe5270kRxVBU.roa (hash: YgKMo8+McPuffH8rbU6912C5wY/cPyLb0wIwXbLwGqw=)
2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: BfuyaDz5CrtWyM3Puo6+bTr6TKkMC27gI8hvZHxQls0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:87:d3:5e:7e:70:26:4b:37:1c:a4:2a:09:ce:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=387ec989ffa8d5b627117da3c18fd4cc9ced4750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fa:83:18:aa:54:ad:cc:98:18:7e:e7:92:06:
c4:ff:3f:1c:09:00:64:6f:49:db:12:fd:cc:95:5b:
13:5b:9b:c0:54:d6:76:16:48:23:d1:89:82:67:b2:
d6:44:90:c0:9b:5a:3b:7f:69:44:96:95:93:62:3d:
03:05:c0:91:7e:9c:51:97:ed:4b:8f:df:b8:c9:03:
f8:2c:40:48:96:c4:18:12:5e:07:c4:be:ea:89:6d:
99:76:5c:c2:5f:23:82:91:06:be:23:04:87:0d:ef:
58:9c:d0:25:ca:a3:ca:5a:9d:5b:d2:5e:21:5e:d6:
72:b4:ce:58:6f:ac:f0:d3:5a:a5:6e:12:17:05:fe:
b8:46:86:42:c2:27:43:7e:0b:9a:f2:36:d6:c3:5c:
1f:14:88:55:48:69:e2:ff:5d:5b:99:32:93:2b:7d:
70:76:eb:77:a5:6d:03:f2:fb:96:b4:39:8b:6b:fc:
a6:26:e4:8e:81:52:b4:47:3e:71:15:6a:41:05:37:
02:31:01:39:31:20:4d:0d:c3:18:23:7a:93:55:5b:
8f:bf:72:5b:ae:21:dc:37:96:97:8b:e2:f7:21:a4:
06:0e:48:69:b8:d8:4e:dd:75:bf:e2:b2:b4:05:1f:
d9:f4:dc:cc:91:37:2c:d7:44:c5:10:47:09:de:86:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7E:C9:89:FF:A8:D5:B6:27:11:7D:A3:C1:8F:D4:CC:9C:ED:47:50
X509v3 Authority Key Identifier:
keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1a:58:1b:b8:a0:2d:47:fd:2d:2b:6e:82:cd:59:f0:50:25:
b3:18:30:8d:25:60:63:14:1a:56:95:56:2c:07:3d:b5:cd:0f:
05:d4:64:64:3d:69:ea:7d:6f:3f:69:1b:ff:5e:ee:b4:e3:4a:
fa:9c:87:bc:47:d2:95:39:6b:39:22:ff:42:a8:56:27:b7:76:
a1:ef:82:9e:f8:6c:53:3c:87:78:8a:bf:c9:50:09:b3:e8:a7:
c7:a3:76:8d:f4:6d:ae:df:5e:9d:49:91:f6:47:f3:e4:f9:5a:
01:a0:f1:f5:fe:bf:fe:70:32:98:20:0e:fd:28:64:3c:0e:33:
90:28:42:68:84:2b:e2:61:62:2e:c1:ce:b2:4b:84:89:34:6a:
59:16:47:c5:58:d3:2b:7f:3a:45:30:35:80:83:4f:7c:0b:c8:
97:5a:5e:be:fd:fe:54:bc:1f:57:ac:a7:d4:52:c3:25:d3:45:
b0:c5:12:06:60:31:9b:21:56:87:36:3a:a9:07:56:ff:e0:1b:
9b:78:97:81:f0:52:a1:ce:f9:5b:78:86:8d:28:7b:d1:2b:19:
5a:63:b5:a2:58:30:8b:ef:5e:91:25:d3:7d:76:70:63:87:a0:
76:36:13:07:d9:90:ed:b3:26:30:d9:8f:e2:ea:bc:67:2b:ac:
5a:bf:8b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:07 2025 by rpki-client