Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a4b45-dac0-4c79-8e14-7f3eb7546102/1/FlNvx1alhkqqLB53u3ZCSNq-Jgg.mft
File: FlNvx1alhkqqLB53u3ZCSNq-Jgg.mft (raw, json)
Hash identifier: Xx1bUhNGd2dtlFWV7Up8qW35QP6ZJw5jJEMPmUl3o4w=
Subject key identifier: 78:4D:56:38:48:D0:D3:49:94:8E:8C:87:67:B8:8D:4A:F5:6B:CD:F9
Authority key identifier: 16:53:6F:C7:56:A5:86:4A:AA:2C:1E:77:BB:76:42:48:DA:BE:26:08
Certificate issuer: /CN=16536fc756a5864aaa2c1e77bb764248dabe2608
Certificate serial: 0194BC3BBFC7DAFB1B7CE47412A72BCA8476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlNvx1alhkqqLB53u3ZCSNq-Jgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a4b45-dac0-4c79-8e14-7f3eb7546102/1/FlNvx1alhkqqLB53u3ZCSNq-Jgg.mft
Manifest number: 047C
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: FlNvx1alhkqqLB53u3ZCSNq-Jgg.crl (hash: 6ptQ4B4RRBqNUk2Cf9/+bolNlgm+jsPMuLe6ZAHTh6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bf:c7:da:fb:1b:7c:e4:74:12:a7:2b:ca:84:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16536fc756a5864aaa2c1e77bb764248dabe2608
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=784d563848d0d349948e8c8767b88d4af56bcdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6d:cb:67:0c:76:83:66:74:f3:a6:93:dc:8d:
ce:b3:3a:d6:54:a7:91:77:b5:eb:e3:46:ee:9f:cf:
b1:f5:ca:dd:e2:37:96:7d:46:a0:ae:73:50:fc:dc:
53:65:d0:00:b3:d4:0b:b0:fb:d0:73:5c:7e:3d:eb:
b6:e9:dd:44:e3:41:70:f7:fa:65:1d:2f:a4:db:99:
df:b7:bc:77:13:1f:e5:ab:fe:be:34:91:5f:dd:32:
44:04:7d:29:1a:b0:ed:df:f9:90:05:3a:93:94:3f:
e4:66:23:86:5c:3f:94:c1:df:e0:2d:77:40:f4:b7:
ae:1d:09:4d:bd:2a:54:d1:a6:07:33:11:62:ce:28:
79:82:0c:0a:3e:0c:4d:4e:6b:e0:2f:74:bd:80:b7:
ed:47:fe:d3:1d:4f:a1:ee:34:8f:fa:f1:8e:93:86:
0b:51:03:bf:84:0f:c9:cd:db:fa:98:de:1b:5b:d6:
77:05:a7:44:4d:26:3c:15:32:49:69:19:15:9c:16:
8a:7d:ed:41:0f:c4:56:c8:0b:e2:a8:e9:ae:3a:c7:
ad:44:07:c1:04:98:98:47:26:8c:30:ca:ce:30:3e:
2f:9a:48:e4:75:59:8f:3f:35:9c:9a:36:b9:ff:8c:
57:3b:f3:c4:50:5d:86:a6:1c:ba:0a:63:e5:a0:8c:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4D:56:38:48:D0:D3:49:94:8E:8C:87:67:B8:8D:4A:F5:6B:CD:F9
X509v3 Authority Key Identifier:
keyid:16:53:6F:C7:56:A5:86:4A:AA:2C:1E:77:BB:76:42:48:DA:BE:26:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlNvx1alhkqqLB53u3ZCSNq-Jgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a4b45-dac0-4c79-8e14-7f3eb7546102/1/FlNvx1alhkqqLB53u3ZCSNq-Jgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a4b45-dac0-4c79-8e14-7f3eb7546102/1/FlNvx1alhkqqLB53u3ZCSNq-Jgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6e:8a:1f:ac:4f:99:3c:a8:a9:cf:a6:e6:fc:89:00:5b:c3:
71:18:95:64:58:a4:3a:56:e1:ed:57:b7:0c:1b:14:38:64:10:
d8:67:ab:22:85:a7:46:9d:28:7c:6a:d5:a1:31:32:0d:6a:ba:
b1:d2:3b:42:06:94:e1:23:cf:5f:0c:ea:98:7f:af:8f:ab:b4:
21:4f:62:66:7e:14:27:6c:c3:41:bd:af:6a:96:f7:ae:71:94:
0f:27:08:90:b4:d7:5c:bd:a5:99:1a:7b:4f:ac:48:c9:b1:56:
d6:61:0c:bf:90:a8:15:ae:f3:2c:92:27:74:92:92:af:b5:47:
51:b7:68:3e:d1:00:92:06:be:12:f8:eb:17:5f:48:ef:1b:f7:
88:65:eb:26:76:d0:54:3e:4e:25:e2:3c:e2:0f:51:09:81:d8:
44:07:ea:f0:28:79:8b:a3:5c:ec:58:04:e7:43:86:45:aa:7f:
df:44:22:3b:b9:b0:72:57:5d:90:7b:6f:4e:ca:3d:e5:08:10:
57:fc:f8:7e:a6:f5:2f:46:70:39:99:70:a4:a3:20:b9:ac:2b:
86:76:21:64:fc:51:74:90:de:41:5b:25:e5:b5:4c:9d:18:7f:
ba:63:25:4f:7b:e7:cf:ef:21:2a:b2:98:0d:20:24:bb:c1:e3:
7c:96:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:06 2025 by rpki-client