Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
File: FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft (raw, json)
Hash identifier: ZuQ5lWJV+6sx1yTkPm0czC2AfIHpvHbL9BvsArMiMB4=
Subject key identifier: 9D:74:2A:E4:C2:CA:46:70:7D:BB:11:A1:00:8D:99:0A:79:42:84:CE
Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
Certificate issuer: /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Certificate serial: 0194BD4E5391D94BF3B868EA31B907D91AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
Manifest number: 08A8
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl (hash: BHD4Q+Ce9+lbKBwLR5q7YpkA0Hff+yvFG84V1x9bNkI=)
2: QNhj8szxUJQB2UJkTSFbnKRcj2U.roa (hash: G9tQdAu6v2DV1kcxNZeTfgXQ9D3NQf3F0+ROvxbmmRM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:53:91:d9:4b:f3:b8:68:ea:31:b9:07:d9:1a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=9d742ae4c2ca46707dbb11a1008d990a794284ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:3b:cf:c6:a7:87:b0:53:f9:84:bd:9e:e7:
bc:39:c1:c9:0e:39:0b:2d:ae:20:00:52:27:36:36:
8a:d2:64:03:c2:e3:e8:4c:52:34:65:ee:c8:de:1b:
41:b2:0c:6a:d6:23:bf:26:3e:ec:b0:de:e8:bf:8e:
10:96:91:91:9b:0e:95:9d:a6:d4:32:2b:65:47:f1:
ba:51:ac:0c:9d:dd:28:aa:8f:72:0e:f8:98:a0:a4:
80:f9:5f:ba:01:40:b6:78:4e:d0:0c:c3:1a:f0:4d:
c6:35:18:e2:14:8d:ea:7f:f3:19:a5:6a:2e:fc:20:
42:3a:8a:4e:4b:78:0f:67:68:5e:b2:6b:2c:70:54:
12:4f:8e:47:d4:52:cd:29:32:48:dd:d7:8b:f3:16:
f9:d7:19:cc:cc:ca:49:9b:88:c6:0c:9f:7b:e0:7e:
73:bd:b2:ac:8e:10:a9:28:a1:f0:86:ed:66:54:4c:
a0:b4:78:2a:e4:80:b3:a1:3c:90:03:60:aa:b9:ee:
9f:59:f1:56:97:8c:7a:63:02:f4:d1:05:0a:66:05:
f9:9c:8c:8d:da:e1:b8:84:c2:2f:7d:cb:75:70:39:
fa:e3:35:9f:88:9e:35:60:72:f5:b6:a5:c2:c4:9b:
31:8b:16:5f:8b:b0:f4:59:da:e6:90:a2:1b:38:a9:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:74:2A:E4:C2:CA:46:70:7D:BB:11:A1:00:8D:99:0A:79:42:84:CE
X509v3 Authority Key Identifier:
keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:95:e6:1a:40:9d:14:57:4f:1a:83:9f:86:29:5e:d9:06:3c:
05:4d:14:2d:5a:88:4b:ca:85:a5:77:28:bd:91:05:87:23:e0:
f3:ed:2f:eb:e8:66:0f:9d:ad:d4:97:7c:13:d0:39:48:d1:13:
9b:93:e1:65:31:2e:af:1d:5e:67:e4:0c:6d:d4:6d:34:e9:07:
d9:03:e4:21:f4:73:56:f2:1a:19:bb:89:13:20:88:30:62:e1:
57:c5:5b:69:91:95:e4:4a:6e:28:ab:af:bc:34:05:a8:75:8e:
c0:4d:92:24:e2:1a:85:c1:15:89:e3:96:be:78:90:8d:43:22:
d3:63:ab:b7:23:b9:01:9e:13:c5:cb:e6:63:ab:5d:95:b3:83:
e9:f7:9d:77:dd:69:ee:67:89:cb:4d:ff:02:97:57:b0:05:0e:
03:69:43:45:1e:3e:32:de:22:8b:e4:7a:cd:4a:65:1c:94:e4:
fe:0f:d8:f8:19:43:90:26:2c:65:8b:2b:76:04:4d:1b:3c:8d:
16:de:fe:ae:c8:4f:d0:05:76:d2:1c:5c:07:ac:70:12:30:eb:
b6:41:8f:7b:a8:82:b9:12:3f:be:c6:89:43:97:fa:10:b4:42:
57:c9:86:9c:ed:26:75:23:bd:7d:c7:e7:59:49:a7:e5:6e:2d:
17:85:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:46 2025 by rpki-client