Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File: FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier: otpZ7S5eqXCrcltQmTNewHg1DcxtJGatckl8sY0Akg8=
Subject key identifier: 5B:FE:36:C6:BC:48:79:00:00:A4:D8:99:AF:5C:CD:7C:74:CB:0A:3F
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 0194BD17A71C1EC0854957221509168D6FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number: 0480
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: mgjQIVvtpSVXj6EQHISDxhofXNnMzjGChENLbTgVydc=)
2: QNuVtxOCkP6ptShJW_LgEtc8U3E.roa (hash: GoYMpx4N811JgABiJRx4dBpjrV8ndOKUg755IZS7nEA=)
3: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (hash: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=)
4: W-3K5fzCzMBvM9WtH7NvbBMRwIA.roa (hash: RRZIltRS/dq6CUsYykb/8Cw+Mt7NFvaTFyBHpZDyvgA=)
5: XTWjD9RxeC6l3_NvTHQsET8rn-c.roa (hash: ykYdh3sbXe1rY2ZTlD70M1ZUp3zC5gCXzNGTNEV3S/E=)
6: i0G4rbaluY4hsTsMZnJk3iIOMWE.roa (hash: CiK52+AdXFUQok8ZcOo1/t7ZFlrVVCsMaQ9KmIRXLe8=)
7: q38p2dL7t029dWFRdSznRG0UCDs.roa (hash: SER6fNtd8df23hWn+6WZezoP9krSPn/CNMhUjqtk/v0=)
8: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (hash: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a7:1c:1e:c0:85:49:57:22:15:09:16:8d:6f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=5bfe36c6bc48790000a4d899af5ccd7c74cb0a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:33:9d:fd:3c:7b:55:44:28:79:e5:c8:d8:42:
22:a3:ef:fc:63:33:b3:eb:7a:61:09:1d:06:4c:7e:
2d:61:c0:7d:61:1f:68:68:50:6b:06:9b:8e:b4:c1:
b9:06:6e:c5:4f:8f:d9:d8:37:09:a6:1d:31:bc:6e:
94:e5:83:ff:a9:06:72:d6:ec:ca:ad:eb:8d:1e:bc:
73:30:8d:87:63:70:a9:72:2f:fd:54:dc:40:5c:dd:
0c:0d:69:d9:73:f5:be:cd:57:25:95:51:70:1d:7a:
10:5c:e4:3b:65:80:7a:83:36:66:84:df:70:7d:f6:
50:d0:3e:12:33:df:bf:62:ee:53:a5:12:8c:c2:83:
d0:86:5b:a8:7b:c0:d4:1a:3b:82:97:d0:3c:db:c9:
2e:27:39:1d:9f:8a:73:f5:91:a0:a5:38:d0:8f:be:
7f:19:22:b4:aa:25:df:80:8b:71:28:e8:28:6a:b1:
ca:22:5f:63:21:5b:a5:6e:ca:6c:e3:3c:31:e0:7f:
f2:08:e8:d4:7d:ce:4d:81:da:26:c8:a8:f0:20:30:
1c:54:a7:8c:59:fc:45:ce:da:ab:8e:5d:1b:d8:27:
e0:84:14:2b:dc:5e:e5:84:3f:04:28:96:f1:76:24:
2c:a7:31:cc:bb:db:82:c0:06:87:4d:1a:b1:77:be:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FE:36:C6:BC:48:79:00:00:A4:D8:99:AF:5C:CD:7C:74:CB:0A:3F
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0c:f8:5d:5b:51:f6:a5:3b:5e:12:f8:54:40:04:20:97:37:
c0:ba:20:6b:88:eb:30:dd:f2:4a:42:d4:c2:fe:cc:0d:6c:c8:
9a:83:de:d4:a7:1b:b6:c6:0d:0f:c0:a4:ff:f0:ae:23:02:b8:
65:6f:0a:58:8f:02:f6:a4:59:4a:44:99:91:9d:ea:93:70:32:
bc:88:ca:09:b0:e1:a9:aa:cb:9f:b1:5c:84:ff:61:88:8e:90:
0d:4c:f6:e6:12:f4:46:69:8e:17:20:f3:3c:6e:17:8d:f5:15:
ce:2f:63:61:05:9b:bc:98:a8:7d:11:63:9b:ce:30:13:61:67:
ad:9e:51:71:ea:dc:05:52:6e:47:fd:06:46:1d:8c:ec:e9:70:
5e:0c:f1:cf:e0:af:58:2a:0d:b9:df:32:18:10:6f:c9:d0:26:
4b:d2:f7:fe:5d:99:77:03:8a:14:29:40:11:90:53:a5:7e:e3:
81:e1:be:b5:c5:72:f0:ff:f2:81:55:33:32:7f:be:ff:a3:5f:
fe:00:70:e0:bb:48:53:0b:1b:2a:0a:80:f4:78:a5:09:ff:ad:
66:5c:b1:5d:df:9a:b7:80:3b:ab:2d:14:ce:47:69:0e:51:29:
d1:96:59:23:cb:75:f4:5f:3b:60:dd:00:6d:9b:30:06:b9:63:
5e:6c:64:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:49 2025 by rpki-client