Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
File: FlHT3cat1IO3YawEdiaVM_5-pxc.mft (raw, json)
Hash identifier: yrXxn0mphRjiDp6pnVlqd6LIBzBRAnsA2BT7BXqTmPc=
Subject key identifier: 54:9C:03:2D:D8:90:83:7A:92:59:B2:D7:B0:8E:EB:BD:C7:F5:FB:91
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 0194BC3BD802ADC1AA034B2EF77BC4D4C43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: FlHT3cat1IO3YawEdiaVM_5-pxc.crl (hash: gIT18g8iEZruDVJLVt9QpTVc75iR1d7z6zQKOXo/Ajo=)
2: OAOWe7maY9pSBU-5gVNjG4r2PZI.roa (hash: cj95WRLXDZ1GDxFc9L374qruvZwqpq+kg9Wr756ijmA=)
3: RS5heur6Cn3t-3NSKUpCkvrpLSg.roa (hash: TdAX1fGTzy2GwxRzSlF7GAvHIAjv8je9eFZvPOiAzfs=)
4: cisW_uPMTWGjpMgFOVf9HNh_jYk.roa (hash: Wdm0HXAD65sFut0/XjR/drYS0oNc3aDjPik/CLx6CYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d8:02:ad:c1:aa:03:4b:2e:f7:7b:c4:d4:c4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=549c032dd890837a9259b2d7b08eebbdc7f5fb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:d3:1d:3a:ef:be:b6:2d:97:80:20:27:65:
50:71:51:ed:1d:40:0f:7c:39:9f:25:73:05:72:79:
e6:b7:e5:2c:d0:c6:e1:c4:2e:af:58:02:31:6d:1b:
72:bd:55:b5:82:a5:2f:88:d5:a5:da:52:c1:ea:f6:
6e:c5:c3:67:37:6f:77:92:39:82:61:ff:ca:a7:b5:
9a:bb:15:f2:2c:6c:d8:81:d4:fe:7b:5b:35:cf:4c:
15:97:2b:fe:eb:fb:0a:ef:d2:6b:64:68:41:35:b9:
ba:34:c5:52:ee:1b:cf:63:2a:d3:f6:06:49:ef:42:
4c:c2:7c:76:5e:ef:8f:8b:0a:4c:be:53:59:54:5f:
15:dd:7f:99:f1:f5:54:1e:7c:c6:50:99:0c:ac:56:
53:38:14:39:97:ec:73:4a:6f:ce:d7:07:3c:87:95:
6a:c8:ae:cd:d4:7b:0c:8e:71:ee:67:25:66:9e:b0:
7a:0f:83:f4:c3:6c:31:ca:cb:9a:22:2f:20:9d:7c:
1f:db:13:ca:a8:88:ad:e1:06:e8:92:d5:61:ff:d1:
d1:30:6a:04:12:ef:f9:d2:e0:08:79:d0:77:32:13:
04:a2:b9:c0:4c:8f:8c:69:a7:7c:e7:64:f7:7c:4d:
db:0c:4f:2b:cd:6f:45:38:fb:80:a9:fa:13:7e:2b:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9C:03:2D:D8:90:83:7A:92:59:B2:D7:B0:8E:EB:BD:C7:F5:FB:91
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:13:6f:a1:58:e9:b4:da:c0:18:52:17:b2:1f:51:d4:5d:6b:
10:73:bf:bd:2e:fa:1a:45:1a:d5:ad:31:b7:0d:aa:e1:64:0f:
f8:ff:58:8b:3f:cc:17:da:ba:82:2b:d8:a7:ae:a3:db:49:28:
da:d2:92:bd:8e:9e:36:1a:eb:33:36:b9:85:f6:21:d8:4e:40:
d7:76:fe:0e:c9:8e:55:20:4a:22:95:87:6b:b2:10:f9:70:bf:
cd:1b:fe:c0:8f:bb:73:cc:08:16:46:8f:9a:ab:d3:37:9a:c4:
6b:08:3f:ae:64:99:a4:ba:32:ff:64:94:4a:11:2d:d7:74:56:
09:98:3f:ae:fa:f1:6d:27:dc:cc:c3:91:6a:7b:61:1d:bc:86:
93:6e:e5:80:94:4b:15:b1:9a:ec:38:ff:8d:bd:78:d8:9c:c0:
fd:10:2e:2c:93:e3:22:e0:87:3c:58:69:48:e8:6b:df:25:f6:
af:98:c0:f1:19:b6:e0:bf:4c:5f:c9:91:5c:9e:d1:a0:d9:b3:
2e:e1:18:4e:70:ee:95:3e:d9:41:1f:0a:1a:9b:f4:9f:83:f9:
21:2a:7a:1e:a4:0d:25:b8:c6:a7:fe:36:84:2b:e7:a5:1f:28:
d4:51:c9:7b:e7:cd:24:12:90:23:10:9e:cb:88:03:fe:04:b2:
94:33:42:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:56 2025 by rpki-client