Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: 1RxUQVX5EWrZclH7AYQLrFdG9pfsyVVKRFn1xoIy3So=
Subject key identifier: FB:F1:68:41:40:B8:45:90:8B:D5:4B:7A:DA:10:22:FE:04:BB:1B:63
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 0194BD17A6C1BDBBDEB1F140C83CA051765C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=)
2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: CGM1o8fCsGk9BroNgbb6ifEv0yl5nXf7g+4FatJrxe8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a6:c1:bd:bb:de:b1:f1:40:c8:3c:a0:51:76:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=fbf1684140b845908bd54b7ada1022fe04bb1b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a0:a9:c4:76:03:65:91:00:1b:22:b1:86:81:
8c:3f:f6:ee:63:86:28:16:f1:83:cf:6d:a7:0d:13:
58:24:56:c2:98:af:12:14:75:f6:02:90:b8:e0:fd:
a1:b7:e9:07:b0:34:00:53:14:67:e6:05:d3:32:b6:
3c:a6:a5:4a:c6:fb:41:dc:fb:45:42:07:7e:47:7b:
31:1e:e7:7d:49:77:bf:55:0d:d6:9b:47:b3:d4:33:
34:ba:84:01:0b:11:a1:ce:75:47:77:99:0a:22:9e:
be:35:89:e7:38:0f:7a:a3:14:6d:c6:8a:a6:2e:74:
ec:50:1c:a1:cd:62:94:10:68:5a:69:dd:17:65:e8:
dc:ac:6a:ca:41:6c:9c:48:17:d8:4a:b1:0a:7b:56:
5c:15:b0:42:47:ca:a7:fd:79:a9:e9:d1:67:29:fb:
77:67:c9:a4:51:fc:8d:e8:05:12:9c:8e:e2:bf:a6:
69:21:e9:3c:b3:3c:75:5b:bd:e0:1b:4c:64:8c:11:
1e:bc:ef:78:c9:e8:b3:11:11:00:a0:7d:43:00:28:
d9:ce:c7:e1:58:2f:b1:40:e0:87:ae:87:a7:bb:5b:
2b:da:46:ae:fb:3a:57:48:92:d4:20:2e:b7:6c:6e:
03:27:cc:d8:99:08:7f:98:8b:e6:af:80:0d:6d:5d:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F1:68:41:40:B8:45:90:8B:D5:4B:7A:DA:10:22:FE:04:BB:1B:63
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:58:c3:5a:23:50:41:a8:fd:94:94:da:f2:20:e6:af:51:d9:
cc:8a:8e:3a:68:42:0b:8d:9b:4e:ab:a7:c0:1f:d7:7a:c0:ff:
95:0e:a6:0a:a8:22:ac:a8:dd:d1:f3:e7:16:d7:f2:61:18:93:
18:67:f6:59:73:24:e9:a6:34:3a:37:ae:ab:4d:3e:ef:49:66:
22:fa:7b:bc:bd:25:65:33:54:48:c2:b0:18:2b:63:51:12:16:
b7:1f:42:75:e0:20:6c:72:46:ed:06:91:9a:5f:b5:f9:e7:55:
4f:eb:20:57:7d:81:27:4a:40:bd:ca:ee:76:4a:55:ec:f1:bd:
9c:bd:15:74:e5:2d:c5:76:5c:c8:59:2e:82:5c:61:50:e6:fc:
9c:89:98:4c:d3:9e:12:3d:b4:57:67:6c:c0:24:1f:34:2f:c4:
35:6e:38:b3:98:5b:00:3b:77:e1:db:da:76:6f:58:57:9f:65:
fb:79:de:42:3b:b4:52:90:bf:06:36:06:27:41:51:74:cd:d0:
f1:6f:66:5a:41:a0:70:c4:70:c3:50:4b:76:b6:4f:78:ac:5d:
f5:b0:de:fe:f3:0b:e1:10:b7:76:fe:15:17:f2:48:6e:18:a4:
14:2f:f8:3a:be:8e:84:c9:9f:f6:56:67:41:69:ca:e8:1b:06:
36:3c:b7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:42 2025 by rpki-client