Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
File: FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft (raw, json)
Hash identifier: Ts7qM6wwKWaq+sOAkM0WtrE09y2DUqRruBSTckr3RAc=
Subject key identifier: 2C:DC:0D:45:61:1C:C9:F4:A3:6F:D8:A8:DE:D8:AC:C9:E2:A0:5E:4D
Authority key identifier: 14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
Certificate issuer: /CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Certificate serial: 0194BBCE9AE44F19DD2051C334A9F1FC03D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
Manifest number: 074B
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl (hash: bDVtSiGyidxVbS1HysjozCCCuTaV0TAFSmFAC2cZSrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9a:e4:4f:19:dd:20:51:c3:34:a9:f1:fc:03:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=2cdc0d45611cc9f4a36fd8a8ded8acc9e2a05e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:92:c0:e0:c5:03:e4:95:17:da:bd:cd:f1:
31:c6:a2:e0:21:21:03:ba:2e:5c:ec:c5:72:12:b3:
cf:32:e6:15:08:67:2e:c8:38:01:22:d1:74:1d:c3:
94:0f:44:5a:6a:aa:86:3f:c0:5e:06:a6:23:fb:39:
cd:95:41:95:d3:ca:98:de:7a:18:25:3f:cf:d1:fb:
1a:7f:0e:45:fc:4a:2b:04:80:9a:68:50:74:0e:8e:
02:85:22:64:2f:82:3e:3d:5e:4c:94:34:f6:53:65:
18:2b:34:0f:76:81:22:11:91:ea:42:a4:af:e6:6a:
5e:bb:1d:8e:63:bc:05:db:8d:1e:f0:ab:21:e6:66:
8e:56:73:6b:a2:f8:2a:2c:a7:d9:30:5a:d2:da:ee:
3d:7d:cb:62:d4:94:62:78:ed:44:f4:8d:13:02:1d:
e4:3e:31:f2:78:a1:11:63:ad:61:e5:e7:78:28:f4:
ee:1f:30:3c:e3:15:4e:93:de:d3:1b:19:3b:62:ef:
f9:1b:e8:ed:af:88:ee:11:52:a1:0f:1e:1f:d1:1a:
4a:a1:fb:a3:48:6b:db:2b:96:98:ff:0c:72:60:db:
bf:44:bb:53:fa:00:98:ea:f5:76:dc:f9:4c:36:12:
19:53:5e:25:a1:ae:1b:dc:52:7f:5e:7b:8f:28:7f:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DC:0D:45:61:1C:C9:F4:A3:6F:D8:A8:DE:D8:AC:C9:E2:A0:5E:4D
X509v3 Authority Key Identifier:
keyid:14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:54:61:d4:f4:57:89:98:2f:1f:48:76:41:8f:c2:0b:c7:c4:
9b:fc:f3:24:ab:bf:6f:38:ff:28:f6:93:f7:67:10:ae:c9:68:
45:06:30:c4:1f:05:52:ad:df:73:79:e7:c6:63:77:fa:20:0b:
95:77:02:21:12:f3:a9:36:dc:e7:45:97:42:9b:b8:c5:01:62:
2e:1e:5e:75:ca:80:d4:2d:48:ee:a2:b1:45:2a:04:ff:36:63:
47:a8:d5:c7:e3:e7:d7:6d:19:c5:59:db:84:78:26:1f:de:e9:
a5:07:06:79:ff:52:73:d7:01:98:f7:df:80:18:c6:e4:65:5b:
81:d6:ea:f0:73:5d:ff:60:39:05:30:a1:7c:de:f7:a5:75:f3:
c1:17:10:58:37:7d:b4:ea:7a:dc:27:43:3c:9f:06:ec:48:d7:
99:56:d9:34:65:7a:4b:42:26:32:87:fc:d1:bd:b1:fd:0b:38:
c7:80:b4:59:0c:02:6a:39:e3:67:3a:58:4c:e7:3a:21:0e:9d:
5f:24:be:4d:a6:13:78:09:6e:93:3e:2f:6e:53:da:69:8c:c1:
6d:ca:20:a0:f6:a1:50:c0:42:8a:be:cb:a3:bc:4e:a8:d6:a7:
26:3c:bf:77:28:d7:25:84:c1:48:03:c5:c8:dd:83:f3:b5:ef:
4b:bf:29:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:13 2025 by rpki-client