Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
File: FpedN9oBar0TJ5JwulXWs8KWBXg.mft (raw, json)
Hash identifier: wiJOaf+Pu5YDkPt+5hi1Ba6P/QxS7S6q+SQm8qI7b+Q=
Subject key identifier: 8C:86:DC:71:DE:06:E9:9D:C4:AF:F7:9C:9F:52:9F:5B:0E:CC:FB:4D
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 0194BBCEBEEB2567928FFC289ABC21F6F4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
Manifest number: 1305
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: FpedN9oBar0TJ5JwulXWs8KWBXg.crl (hash: 9IiIzC174rIZZvNw6F9z7qcTNWU2/X3GJlhKqOF9N7A=)
2: PPUYZlg6H0XwL9T7p9j25_C1QJ0.roa (hash: ocscl0Gbeg5aCVZzJomKYL7Dzdpg0U688ymNmvZ0gWI=)
3: b62zrr5wzYN2MOAEsHfWSMG7FHQ.roa (hash: QoQnJbFutWiN0bVjBSQujyBlpWiG4wn++jIZ23iyHu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:be:eb:25:67:92:8f:fc:28:9a:bc:21:f6:f4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=8c86dc71de06e99dc4aff79c9f529f5b0eccfb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:ea:f4:0c:a2:8e:b3:22:e8:e8:31:e6:71:
57:11:82:dc:1e:a8:00:39:e2:ed:38:78:d2:9e:f8:
81:9b:b7:25:9d:13:44:00:e3:da:9a:a2:5c:83:a8:
89:74:47:14:be:b3:4c:51:d8:61:57:91:36:f1:b3:
c1:f5:0a:0a:55:78:43:20:fb:25:6b:86:d6:25:24:
9c:ce:57:06:f7:db:3b:0a:be:9b:ba:dc:be:74:6e:
17:d2:8b:e2:19:4b:92:4e:2f:bb:b9:89:62:20:9e:
ab:3b:8f:4c:f1:08:e4:48:31:ee:ed:db:7e:1d:74:
c4:32:ee:ac:22:39:04:59:a6:8c:d9:69:f2:ad:06:
fa:e1:b1:4f:e7:70:55:f5:32:38:c8:63:b8:e8:c8:
d5:51:df:b1:2f:90:c4:82:a9:b8:33:28:9f:1b:81:
63:b0:73:4b:25:8b:f3:b8:69:c1:33:0b:b9:df:da:
cb:c6:f1:5f:28:d1:3a:97:d4:8f:97:88:f5:0e:d2:
2b:f6:cd:fa:9c:90:90:52:48:f3:b0:aa:f5:bf:26:
17:19:bc:eb:b5:0b:0e:f1:39:29:81:cf:82:dc:c4:
22:43:58:08:72:55:a7:2d:4e:9b:db:fb:39:a0:0c:
1b:8e:98:83:7c:10:df:be:a3:ca:4a:2b:3e:37:44:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:86:DC:71:DE:06:E9:9D:C4:AF:F7:9C:9F:52:9F:5B:0E:CC:FB:4D
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:78:3b:c1:49:08:cf:dc:2e:a6:26:80:25:a4:3f:0a:91:1d:
c9:3d:7c:bc:54:24:8c:52:94:7f:6b:c1:d6:af:d9:1b:25:02:
04:9f:97:d6:8c:99:4d:db:9f:67:31:91:e5:42:67:b1:24:c4:
6c:a3:fa:d9:4e:96:da:0a:ba:df:5a:0b:ea:50:49:57:a9:93:
28:5e:b4:f2:c3:e2:3c:63:c7:aa:c3:49:5d:91:48:c4:a5:b4:
68:0b:cb:ab:71:12:03:7e:e8:b7:28:6d:90:d2:ce:db:e7:92:
19:8b:b0:6d:02:19:dc:13:f0:fe:32:fb:d1:26:03:12:b1:11:
cd:bb:bd:e4:db:8a:3d:02:6b:f1:98:c5:c0:44:e3:1b:39:d3:
a9:d0:86:e1:bb:a2:52:1a:d0:aa:40:1c:ee:35:e4:b4:27:cf:
e5:49:32:d0:c6:2b:91:f7:6c:5a:66:b0:07:c2:64:85:28:eb:
20:2f:9a:a9:9a:1a:09:f0:fc:ef:7d:e6:77:4a:06:95:af:02:
56:65:46:3a:d1:a9:5a:e0:b1:22:03:42:a1:1b:33:7f:1e:3b:
41:3c:4d:ca:7c:e8:83:d6:a8:e1:0d:6b:cb:79:3f:4a:43:93:
3b:75:1e:1d:26:89:bc:5c:75:aa:a9:73:4b:05:c6:a8:27:0e:
18:b7:a3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:54 2025 by rpki-client