Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File: FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier: IE8+7KXoOAOj2VN5LRR2cZdDBP2fSMDTP477WEVUsUU=
Subject key identifier: CF:4B:E6:0C:FC:51:F5:18:77:99:42:81:89:51:70:98:C7:FE:23:32
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 0194BD1788F0C5CB29DB8B826F7C0E516E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: 94l1w2XWFaaTHOERuSiRRUjKuclaPoOOPtHS7hHlF6Q=)
2: GeEhJpkO5WEp0V80xW7FkFa1oZU.roa (hash: JmYppaSBdSTenAfyN0elIx7FE9TqEQ3u8bLv/x+0br4=)
3: _OiChs3aOD95izxVXaCOo2qgpvA.roa (hash: tLbzYzrIK504sxJ59bK+1HEvF9TcLW4pKN1xZgqHSVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:88:f0:c5:cb:29:db:8b:82:6f:7c:0e:51:6e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=cf4be60cfc51f5187799428189517098c7fe2332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:1e:ab:1c:e2:d2:81:66:e2:2b:1d:1f:b7:
60:a8:b4:99:d8:d2:68:bb:59:1c:15:68:85:c7:5a:
f5:b6:15:85:8b:3c:63:0c:ea:32:cd:69:2b:22:53:
39:35:a4:58:aa:c8:dd:8a:a2:6e:0b:94:61:20:37:
d7:c0:c2:84:e2:ed:3a:97:73:ce:27:50:48:aa:ce:
a5:61:e5:56:8e:e0:b0:33:2d:27:7f:4c:46:93:14:
92:09:b8:6d:17:0e:0c:f5:43:5b:fe:46:4e:8c:35:
b2:e6:da:9d:f8:5b:bc:15:6e:4d:f2:3f:43:65:d2:
b3:0b:7c:ef:55:aa:3d:42:b3:5d:17:8d:b7:d1:10:
b7:98:ba:52:5b:2c:a1:34:02:53:62:db:92:87:24:
07:54:81:b5:c9:59:43:a8:83:10:97:da:51:38:40:
da:9b:82:2b:57:f2:5c:ea:c6:5d:28:5e:9b:1e:17:
39:52:af:1c:1b:56:ff:b4:f3:df:24:44:64:9d:be:
e0:77:bb:94:e0:b3:f7:79:63:29:fb:0b:3a:0e:3c:
74:60:d6:8e:f8:d5:96:69:f9:c1:3b:c4:45:dd:10:
fb:a5:b5:3c:6e:2f:55:a8:ea:82:e1:75:33:3c:cc:
ef:78:30:e9:c9:72:ef:55:43:24:aa:f8:98:99:34:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4B:E6:0C:FC:51:F5:18:77:99:42:81:89:51:70:98:C7:FE:23:32
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:76:5d:74:a2:69:a7:2e:65:47:26:4b:83:e6:21:3c:73:77:
36:5c:29:f1:df:2f:3d:54:55:3a:89:a7:35:7b:1a:a5:8e:b4:
42:e1:f6:6e:35:e4:49:21:6c:ff:b2:41:e5:b3:8c:bb:69:87:
63:5e:d9:00:a7:6d:7a:a0:bb:c5:81:4b:99:62:a6:1e:cb:a9:
e7:49:71:12:3e:0b:0b:f5:44:4b:34:73:c8:7c:a2:90:05:77:
96:13:eb:57:86:ff:95:41:c5:7e:54:72:d8:24:1b:a7:0c:44:
c7:81:d1:7e:19:44:d9:5f:0a:79:69:ae:1b:b9:53:ae:a7:6d:
4f:0d:60:69:66:c5:0f:36:3d:d1:5d:e9:e4:d8:59:ce:3a:e9:
2a:34:f4:94:76:59:34:0c:6f:7a:0e:5a:52:ae:41:a1:78:52:
99:4c:1f:ea:7f:11:87:2d:1b:7b:ff:d2:d9:ef:68:32:87:65:
47:ac:41:4d:e5:e8:b2:4f:fd:b8:db:de:7d:5a:fb:d1:91:31:
f2:ae:08:13:7c:87:a2:b6:13:89:c1:41:e6:38:94:6b:04:97:
ee:95:2b:1c:4a:11:51:70:66:fe:78:f9:a6:6a:c2:99:0c:9d:
3e:eb:56:01:aa:38:e1:b6:2a:ef:76:6c:2e:0e:51:e7:0d:51:
6d:2c:24:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:58 2025 by rpki-client