Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
File: FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft (raw, json)
Hash identifier: ReXMrIoCiB6b55Wf4f0I5M1HUwSsbCJOxpR8Rilx+Ig=
Subject key identifier: 5F:A0:B6:46:0E:40:C2:63:C6:B0:DA:CB:AB:D2:E0:C5:4D:01:19:C9
Authority key identifier: 17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
Certificate issuer: /CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Certificate serial: 0194BD17E8E55FBD0CEC01B00C0E1AB9A69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
Manifest number: 03E2
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl (hash: CfpDvk1EWdEM6n86fZjuGXg0WixzSD70bYoMWe3x2UU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e8:e5:5f:bd:0c:ec:01:b0:0c:0e:1a:b9:a6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=5fa0b6460e40c263c6b0dacbabd2e0c54d0119c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:ed:b8:3a:da:0e:7c:00:e9:8d:98:a5:3e:
0b:c0:5f:9e:33:5c:ce:f9:b5:64:42:7e:04:b8:66:
df:4f:e6:00:0a:81:70:c8:42:38:d5:83:aa:e9:96:
b2:1a:33:5c:87:c7:c4:1f:a0:58:b9:87:e6:66:c5:
59:b0:6c:26:eb:b6:d1:b0:9a:22:80:78:7f:1c:fd:
a7:e1:41:28:40:e7:32:ee:24:0d:82:13:92:9e:bd:
9c:8e:00:1f:14:ad:dc:b1:e5:76:47:cd:cf:8e:74:
f5:a7:6a:44:c5:28:9a:26:4c:c7:2b:f9:2b:3b:1e:
d5:1a:99:58:17:40:80:1c:46:b4:57:a5:fa:88:98:
fb:e7:fa:a3:95:52:7e:cb:b1:dd:23:81:66:d8:74:
23:6c:4d:4c:98:ab:0b:60:31:c3:2b:1f:f3:7a:4f:
c7:6f:50:75:fc:5f:4d:0d:79:9f:9c:b9:c5:08:73:
37:26:cd:45:34:0d:88:b1:e5:21:f9:c8:46:7d:a2:
3f:a7:44:fa:2e:d3:36:c0:2e:07:09:69:82:18:7c:
d2:db:f9:ec:7e:ef:cc:cf:f1:43:cd:41:eb:b9:ce:
7e:8a:e7:d2:ea:bc:bc:80:3b:11:ba:a9:86:6f:ad:
d1:99:87:d5:7e:18:a7:6c:65:19:e4:33:6f:07:43:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A0:B6:46:0E:40:C2:63:C6:B0:DA:CB:AB:D2:E0:C5:4D:01:19:C9
X509v3 Authority Key Identifier:
keyid:17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ed:24:68:af:68:33:39:ec:5a:20:79:c8:7c:f9:65:17:2e:
99:97:70:c4:d6:84:ae:0e:7c:f7:0d:e9:c8:64:69:9b:88:ab:
80:cf:09:a9:74:7e:10:ed:a3:fd:37:dc:e9:e3:7a:84:07:68:
90:67:7b:27:76:24:6c:d7:1c:ba:d9:a6:4d:b1:63:71:88:4f:
48:3e:04:b3:61:17:3f:f0:b6:ba:16:ed:6d:39:af:7b:ec:ae:
b9:45:45:74:3e:0b:72:0e:f2:f3:4e:80:9b:8e:00:8d:6d:c8:
b2:e8:01:8c:c4:ee:94:ad:04:f3:87:9f:13:86:40:ae:71:57:
34:34:dd:05:60:65:ec:cc:5f:09:6d:57:4b:bd:07:08:dd:ec:
14:02:8f:25:3d:9a:b4:ab:e8:e7:cb:04:a2:fb:17:8a:d4:90:
78:fa:e4:ff:32:5f:1b:55:8b:44:91:5d:e2:70:06:52:dc:98:
19:ef:3c:09:c0:1d:d4:53:a6:28:b3:8e:fb:6f:4c:93:06:02:
dc:4e:42:9a:09:92:70:c0:22:9e:d8:b1:c8:6e:20:7a:f7:ff:
54:c6:55:cc:38:37:eb:2f:2c:0b:ee:58:1d:88:64:5f:c4:1d:
56:d4:79:ff:74:df:44:c2:3f:fb:d3:65:21:1b:5f:38:3e:ea:
05:bd:5c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:53 2025 by rpki-client