Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json)
Hash identifier: VGb0HYBAHokzV9rRfFlHx6dQDLYtpzYbQBG96oKsLOI=
Subject key identifier: A4:87:1C:83:BE:19:34:CC:93:F8:10:3C:38:7C:E2:0E:CB:B5:D1:B1
Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Certificate serial: 0194BD175EFD975EFE50D63AB4044F2916E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
Manifest number: 109D
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: sbq3WyQsifyDblbgx8ioXUCtl3SFcWucVvBw9+vkfcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5e:fd:97:5e:fe:50:d6:3a:b4:04:4f:29:16:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=a4871c83be1934cc93f8103c387ce20ecbb5d1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:e8:f0:23:9b:91:a8:3f:c2:53:5b:bc:8a:
fc:4f:db:0a:ff:2e:6b:3f:95:b6:67:2f:d4:30:69:
ec:b8:f3:89:57:c3:f4:6d:9e:48:a8:60:bb:fb:00:
d4:86:38:ac:fd:6b:86:38:7f:ad:5d:e9:f3:ec:cf:
3c:59:ec:58:d0:48:3e:23:f0:2e:46:d3:3a:1d:0e:
13:7c:23:8d:ec:c9:6e:59:b6:38:7b:e9:94:ac:74:
e6:73:ee:7a:ad:14:ad:3c:ef:8e:b9:76:15:cd:9e:
95:94:9c:46:8a:5c:3b:59:1d:e4:b2:20:b2:bf:02:
ec:4f:2a:d6:33:b8:70:c7:ba:c7:70:fe:3d:75:9e:
87:b7:74:2a:6b:d4:ee:4f:8f:a6:3b:f3:22:b5:9e:
6d:e8:4b:c1:38:e9:f2:ce:40:8d:e0:4c:89:c6:d3:
a2:da:9f:6c:0f:e6:cd:60:13:5d:76:ee:c1:a4:d5:
bf:21:1b:e5:57:2c:bc:c5:bb:ca:54:a2:05:18:44:
cf:f2:11:d4:8e:9a:85:db:a7:2b:24:6b:92:cc:9a:
28:88:4c:6a:e5:67:9b:16:f1:5f:19:73:ad:e7:6c:
eb:4e:b3:88:af:3d:e9:70:5e:05:52:45:97:f8:2d:
c4:ca:c7:14:7c:5f:f8:d7:bc:a8:ad:18:83:6e:1b:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:87:1C:83:BE:19:34:CC:93:F8:10:3C:38:7C:E2:0E:CB:B5:D1:B1
X509v3 Authority Key Identifier:
keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:91:92:97:b0:88:dd:78:99:40:4c:3a:94:d6:61:ee:ca:7c:
fb:e9:48:28:6d:bc:80:51:45:bf:ce:f8:04:2f:0b:44:99:b0:
59:6a:cc:7c:9c:90:2e:21:66:19:5e:bc:19:06:15:fd:8b:3b:
5d:5a:ec:0b:9b:9f:b1:17:0f:db:ad:44:d3:34:b1:24:d2:48:
f3:71:60:ac:51:41:8e:98:d4:e7:d6:52:64:ed:ac:43:ac:01:
8b:5c:27:c0:e9:68:00:3d:2e:88:82:40:8a:ce:7e:9a:f0:b1:
7f:86:92:ec:f9:95:66:21:d6:46:5c:f2:82:69:f3:17:d2:19:
f3:ba:14:9d:d4:e3:86:c9:7e:93:36:57:87:f1:a0:08:a3:4b:
0a:b6:79:f4:60:27:1b:22:af:37:9a:ca:6c:d6:db:33:e6:cc:
9e:17:26:3a:7b:12:a2:6d:df:c6:b8:5b:8b:35:05:7f:c2:31:
63:9b:9b:a7:ea:ae:9b:06:48:b2:44:0e:61:76:a0:b4:74:6b:
e6:8e:d5:69:48:3b:2a:4d:09:fc:82:4d:13:97:69:28:34:bb:
7e:73:9a:ad:56:1d:96:bc:a9:d3:b8:d2:46:54:c8:53:09:6b:
5c:05:54:ea:81:2f:ac:b5:16:d2:9e:be:e1:1b:32:f9:d6:03:
98:a8:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:33 2025 by rpki-client