Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
File: FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json)
Hash identifier: 15Jqo7rpBZFmOkq+49QGnOA2tpUXkt9KkdBtxk/djLk=
Subject key identifier: FA:AC:9B:57:D9:A1:1D:44:04:4B:FF:73:74:05:E6:75:6F:80:2F:56
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Certificate issuer: /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial: 0194BCA9971B17066B6DF2C76003BA688CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
Manifest number: 0735
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: eJdWcrF08cF/di3xkdlsxNt4gjl4jCqPNkhr7G5HMDg=)
2: IUfWM-T8xAGUnehJbHrihlR8Ip4.roa (hash: +ZYqqzAxCIjpw2v4zvSgH/2R+ZjJqO0o/ztNO/Ll//g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:97:1b:17:06:6b:6d:f2:c7:60:03:ba:68:8c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=faac9b57d9a11d44044bff737405e6756f802f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:79:b2:5f:77:d0:5b:69:7d:69:e0:e1:87:
52:e3:46:bd:77:92:18:cd:b2:36:31:2e:4c:91:74:
a9:bb:41:ae:ea:1b:6a:81:99:a8:41:bb:e6:80:6c:
4d:5c:92:87:8a:bd:9b:54:55:92:10:5e:00:9b:b4:
88:35:4f:37:2e:6f:8b:27:0b:db:ba:36:5b:af:9a:
ca:bc:92:6d:24:4a:1a:86:c4:71:7b:67:14:c4:ac:
e6:96:c7:d9:d3:65:42:7f:2c:79:92:3e:20:7e:fc:
52:91:6e:c0:e5:85:a1:ef:f0:25:7d:95:e6:11:40:
13:49:49:fb:5c:92:2c:d9:25:f2:54:5c:23:e0:76:
96:f6:4e:66:43:f4:1c:38:1b:01:fe:eb:12:e2:c2:
d6:e3:7e:12:aa:e6:5f:dc:a5:be:ab:a5:67:3a:82:
fb:05:9f:20:40:e9:70:db:11:1d:8f:8b:c0:e1:d0:
9f:c3:d0:ee:da:30:a1:05:4b:e4:bb:e8:cb:0b:25:
62:c5:84:7d:93:91:53:2f:24:3d:50:5f:a8:bb:2d:
98:46:ee:ca:3f:12:f2:93:6c:47:09:5f:7c:e7:c2:
83:9f:ae:62:e9:06:87:1b:fe:1c:f4:4f:bc:1c:a2:
6a:a2:b0:72:77:da:07:38:ad:f8:23:f5:4c:a9:9c:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AC:9B:57:D9:A1:1D:44:04:4B:FF:73:74:05:E6:75:6F:80:2F:56
X509v3 Authority Key Identifier:
keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:43:6b:fa:f6:c6:97:b4:4c:c7:2e:bf:56:fb:92:50:18:5b:
9a:73:f5:96:35:1a:b8:6f:53:61:8d:07:de:df:64:44:2b:55:
ea:a8:8b:c7:f5:ad:71:8c:02:96:f6:27:8b:3d:3e:3f:c8:03:
a8:70:1c:ab:a1:f5:e2:6e:b8:08:86:80:71:53:29:6b:36:9d:
49:81:18:05:32:64:4b:84:d2:be:f3:5a:35:0b:bc:ea:c4:c6:
40:9a:b4:a5:9f:74:09:d9:26:1b:ea:e1:24:4e:99:f6:91:77:
13:91:79:cb:36:29:f1:44:16:99:5e:5e:0a:ff:4e:b5:d9:87:
b8:f8:90:07:e3:f2:24:d8:d6:c7:cf:1f:f8:f6:a1:91:09:94:
d3:47:cc:88:b2:24:35:fe:25:bd:51:75:af:78:b0:05:1f:51:
72:b1:de:ff:c1:a0:1a:6c:c9:fd:60:ee:69:f2:a0:f5:bc:8a:
d9:75:e6:af:7e:f2:52:65:e0:06:de:b0:ff:e7:01:83:7a:15:
89:5a:ac:aa:9c:95:7f:c4:50:78:28:b8:4e:c3:b4:c7:30:63:
8f:28:e4:2f:01:25:ad:08:fd:1f:9f:69:d1:b6:55:ca:85:b0:
fa:c2:74:76:24:bd:66:ed:04:5b:fd:d2:91:a8:93:22:cd:90:
e6:17:d5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:15:23 2025 by rpki-client