Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json)
Hash identifier: RucCNPWIhtBeDY+I6Py0JG4Gq7CLgHEc5px5ZMtjXEo=
Subject key identifier: AF:5A:4D:DE:AD:33:9B:10:91:BE:34:C0:89:57:07:E2:A1:02:2C:B3
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 0194BD85553E85597D21F9D0B07657AEEB79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
Manifest number: 1445
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: DijsTPRMDDAwzM1kVdMXddoz0yXXg5oOcZaFEG7oIIU=)
2: Ky4bLo9J6pOGQKNm7HdTTpVyXUQ.roa (hash: Nz/bgREWmfO74J020d6hSSWbUR82qaNTZZa/sGleP5Q=)
3: ZuxCaM0jvO8dT69rrtCo-UU_fGM.roa (hash: mTx3iBU5+gUzCuwkRIlwRwR4OdmyhWs/YLzJTZWJgsk=)
4: _ZHo0DXp29WN4BOS9yj8UgLowqU.roa (hash: k2O5B28gMEUS5GB1MDIowIqcob2fshstanyKIafnymc=)
5: i4MzjZTpbtZK_ZPjW181XA_QlOs.roa (hash: a3SMnVU0VU8ASpu/GP3SPdiJleFoyqLmWwLdGByzs8I=)
6: s09aV916ePc245Z9GMH4Ts0cTn8.roa (hash: hdMuDE9zUjm2uLsuj9BEHmHlQ1AMBc0s6keoHZxmUYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:55:3e:85:59:7d:21:f9:d0:b0:76:57:ae:eb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=af5a4ddead339b1091be34c0895707e2a1022cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:15:d3:27:61:50:e9:d9:cc:b2:b6:d1:7e:
79:bc:89:1a:d6:64:0c:0a:1b:8f:79:19:e5:94:65:
b8:66:ee:09:a6:a8:e9:9a:19:5f:66:c9:1c:04:fd:
c5:98:09:50:47:5e:a4:64:4b:ec:05:d5:90:f5:7a:
d0:52:31:32:7a:e7:b4:1b:15:22:ba:2e:01:00:02:
9c:c5:c0:5d:da:e7:fb:ab:1d:c4:a8:9b:ee:3d:03:
16:84:4f:fa:d1:b6:a1:ba:37:c5:ab:28:77:12:3c:
80:7a:26:02:c6:6f:d1:8f:17:cf:c6:6f:d9:eb:4b:
a4:d2:ce:65:c5:1a:25:84:29:6a:8d:5a:3d:0a:2f:
59:00:2b:bb:a2:60:9b:a9:c8:46:b3:b1:a5:a1:e9:
1e:eb:04:4f:77:70:05:6e:3b:a1:53:1c:e9:1c:5e:
95:21:a7:9e:0c:71:32:6f:2a:47:d1:dc:2d:d1:1f:
e0:b9:20:9a:82:7e:76:41:12:3f:08:17:9d:3b:3a:
f8:b0:82:f0:90:d4:0e:0f:90:23:55:6c:7e:b7:97:
0c:87:7f:e6:51:bc:26:ed:31:65:f9:18:2c:8e:ee:
33:b6:8b:bd:21:2f:f0:2f:4b:4a:92:22:5f:22:b2:
8a:4a:4d:55:ba:13:f6:74:7f:80:cc:df:c6:18:d3:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5A:4D:DE:AD:33:9B:10:91:BE:34:C0:89:57:07:E2:A1:02:2C:B3
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:53:e8:ca:b7:a1:63:8f:ce:48:81:cf:53:a9:f9:4d:f1:0b:
26:b5:ec:1a:b9:c7:02:c5:eb:13:6d:d3:31:f7:98:af:1b:db:
bc:3c:4f:92:37:7a:44:bd:7f:86:5e:e0:70:51:27:eb:ea:5d:
6c:da:e7:6a:ac:cd:e4:e7:fa:ed:c3:34:71:c0:c7:9a:c4:88:
79:88:05:72:dd:c5:34:22:dc:17:25:34:08:68:11:d5:8e:d2:
51:65:62:df:f9:d5:a2:0b:b3:dc:99:6f:6b:7d:2c:da:1a:2e:
24:c4:71:8c:0a:94:cf:1e:2f:c3:6e:1f:95:bd:e8:ef:bb:95:
b5:b0:f4:e9:28:72:69:d3:33:47:f0:2d:a2:16:9a:30:cc:d6:
4f:8b:be:37:e6:83:52:c1:f8:82:aa:e1:88:65:6a:bc:45:0f:
00:7e:d4:0b:fa:c4:8a:4d:9d:40:09:cb:ac:e1:09:5f:b6:d4:
f4:c1:a1:15:8e:e5:96:00:55:17:fb:42:b5:b5:63:13:db:86:
9b:b4:28:16:55:36:e4:50:b5:29:37:b4:e8:11:00:4b:04:80:
6b:39:cf:99:9d:9f:30:21:1c:64:6e:5a:c0:f6:01:3b:06:34:
36:9f:63:6c:ae:a3:60:1a:8b:e0:e9:0a:ea:3e:62:67:7f:83:
5d:0a:4d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:20 2025 by rpki-client