Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
File: FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json)
Hash identifier: 5tzMFhPE0bkXH3mzbLlvAQxqKs609hlSd1YuG3Ot374=
Subject key identifier: FF:33:7F:CB:3A:5F:8F:01:FF:C4:6E:D7:60:3A:67:39:1B:B0:97:40
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Certificate issuer: /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial: 0194BC04DD14D472E3840ACE69DD7DFEED47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: sOaICEmP+7RyeQc6ZHBC1ej5UmCHsj5zKMDgR51i+24=)
2: qrHcalRy_JXYvUIS1tkkzHH6ZPM.roa (hash: B5LhQQeMhbxhyP/euiUVZeJTjZ4f803srjRMUk59y8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dd:14:d4:72:e3:84:0a:ce:69:dd:7d:fe:ed:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=ff337fcb3a5f8f01ffc46ed7603a67391bb09740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:26:d4:82:b3:08:4c:33:21:7b:5a:15:d7:
d3:b7:df:b1:3a:10:39:2f:5b:7b:6f:f9:89:2a:0f:
16:80:8f:eb:82:d4:79:1e:a4:41:a8:af:00:9f:8a:
f4:a4:f8:1e:83:de:fb:32:c2:95:c5:c6:72:f9:0e:
20:de:4d:02:14:d4:d3:f8:46:5d:f4:cb:8f:36:ac:
b4:10:fa:41:38:6b:cb:4c:8d:41:fc:58:08:62:25:
0a:7c:87:c9:75:05:f9:d1:1a:c2:7d:26:89:41:05:
cb:aa:0c:f8:4a:1c:79:20:b3:b8:fa:f5:e4:e2:40:
e3:30:b1:54:f2:4d:44:dc:2d:25:a9:0b:b1:d1:14:
4a:5a:0e:46:47:86:c9:75:db:8f:ff:54:3d:8b:bc:
38:cf:fb:e2:57:b4:b0:4d:71:24:2a:ee:6f:d2:21:
ab:c9:05:b6:e3:ec:55:49:15:7b:7f:2e:9b:7c:ef:
2f:b4:40:29:12:a0:c8:5e:97:b9:9d:0c:20:89:3a:
33:aa:eb:b7:be:c0:04:91:a2:47:19:93:69:a5:5d:
75:78:61:65:db:7d:b4:99:a5:d0:8a:d1:56:32:4e:
77:8a:d1:0d:2f:7c:28:92:77:c8:be:8f:95:b9:ab:
2c:9d:0c:4e:79:0c:b0:c6:1f:f6:16:ae:09:1a:1e:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:7F:CB:3A:5F:8F:01:FF:C4:6E:D7:60:3A:67:39:1B:B0:97:40
X509v3 Authority Key Identifier:
keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e4:6e:64:e8:ff:9a:d4:99:ce:9e:30:9a:85:46:ea:c2:43:
be:97:5f:1b:5c:49:45:75:2d:91:ef:fd:f1:97:ad:ce:3b:41:
08:f1:66:b5:dc:f8:34:51:33:6d:9a:4a:b1:d8:d4:5f:9a:f7:
81:86:25:cf:2b:47:5e:30:a8:5c:6b:79:20:ce:c7:ca:8d:99:
93:96:c5:3c:a3:73:e9:ef:60:df:9c:96:22:56:b7:4e:c9:ed:
2f:3b:54:9b:36:20:71:08:7c:f2:4d:ad:5e:cd:9a:af:64:bd:
02:48:c4:a3:bb:90:d7:b1:ab:cc:6b:88:e4:3b:bf:e9:78:a8:
95:3e:f0:de:f8:2b:a9:4b:93:c9:5d:ec:60:ee:39:b5:f3:3e:
41:2c:21:d9:8b:8d:f3:72:72:0f:6f:39:7f:e5:32:c4:89:54:
ff:af:d1:00:a3:64:c0:76:d2:a3:71:b0:d2:33:87:99:f2:80:
76:c4:31:64:ad:6f:75:df:ac:80:22:5b:22:6d:e3:87:3a:56:
e8:01:90:36:ca:e6:02:bd:b4:4e:8d:b6:a6:38:1a:27:4b:7f:
29:a7:74:10:92:e2:82:8d:6a:10:18:b3:80:2d:25:48:db:39:
fb:34:87:a9:cd:6f:78:9e:b1:a9:de:3b:30:3b:d3:da:c1:33:
af:7d:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:34 2025 by rpki-client