Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
File: FnhcBIzz1bIYafSUNPLTu0fUO6E.mft (raw, json)
Hash identifier: zqFCpftEZgVJaPhYg0QwPx+ioCSvUgluMx+7RrVzCF0=
Subject key identifier: B6:A0:87:FD:01:51:8C:D9:01:C7:93:13:03:FC:29:06:38:20:9C:6F
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Certificate issuer: /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial: 0194BCA9A16D4052D0734425588A85E88439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
Manifest number: 1327
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: FnhcBIzz1bIYafSUNPLTu0fUO6E.crl (hash: XVxZtO2//YHCElB4X7Nrk34D069m+2M/nxIrKXdrwEo=)
2: wq-sbK6wZCslTg-KQk0eohj20JY.roa (hash: dIwNqBJjOyWxVd+rD1dPAAWpwiNwWE2sUgy3A31jXAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a1:6d:40:52:d0:73:44:25:58:8a:85:e8:84:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=b6a087fd01518cd901c7931303fc290638209c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:64:61:ca:8f:f1:67:2a:97:e6:3e:dd:6e:
c3:f1:10:ec:d3:b0:fa:e1:8f:fb:1a:fd:bb:ec:88:
8c:dd:f8:bf:b9:59:55:18:43:9f:3b:c9:fc:50:d4:
b2:06:f1:5d:40:c0:76:c2:ad:01:5b:92:9c:72:5c:
a7:9a:f5:12:9b:a3:4d:6e:ac:46:7b:a7:35:6c:9f:
0e:88:ef:0d:01:3c:f7:7a:af:43:70:be:88:1c:de:
24:d8:3a:d8:d6:0b:af:8c:b8:a3:7f:b3:69:14:a5:
f1:60:07:6f:51:3c:da:b1:ad:b9:5c:16:13:ba:81:
2d:f9:90:a9:69:5e:bd:ea:0a:25:96:1a:ed:e1:81:
6c:df:7f:13:e4:1c:a6:51:26:d6:df:f8:c3:fd:2b:
92:5b:73:86:00:2b:0e:e7:9b:a3:a9:4c:a5:5e:ea:
24:42:da:ea:13:76:4d:11:02:89:93:0e:5e:87:0d:
04:bd:b2:25:79:71:86:df:17:05:84:7c:c2:15:db:
d1:47:aa:aa:6e:80:b9:ac:31:89:1b:39:ad:fa:af:
4f:29:30:30:d3:69:dd:da:5e:64:96:9c:34:23:dc:
13:ea:56:ab:9e:9f:07:48:72:7c:86:cc:54:05:2b:
b1:0b:ed:a5:67:31:2d:63:bf:7b:63:78:02:ae:50:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A0:87:FD:01:51:8C:D9:01:C7:93:13:03:FC:29:06:38:20:9C:6F
X509v3 Authority Key Identifier:
keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:56:e1:fc:88:de:2e:59:51:46:2b:94:93:6d:a5:4e:6d:2c:
fe:d6:2a:b0:41:fe:14:e1:4b:ad:c9:9c:45:57:27:7d:72:e9:
f1:83:01:78:d1:33:c5:7e:56:55:bb:1e:9d:db:b9:5b:1e:de:
44:cc:4b:a1:88:56:63:fe:7d:84:63:94:c7:06:d6:e3:02:12:
ed:8c:20:ac:8d:00:13:f4:ee:31:35:c3:eb:6c:0f:95:9c:4f:
78:77:30:1e:6a:ec:8d:f6:4d:71:ca:ef:dd:92:a6:69:bd:7b:
68:4e:27:4b:86:70:72:ea:f3:f9:14:c4:fb:fa:ee:f3:37:47:
b7:66:b6:a4:b7:bd:37:85:65:d6:2a:94:31:5e:f7:3d:04:ce:
0b:a7:3a:52:b7:b9:fc:80:6a:1b:4a:30:be:35:fc:ba:cf:56:
94:16:25:97:7c:3d:71:86:09:e0:cd:b2:7e:10:79:50:ea:ed:
0d:e0:fa:b3:21:27:39:16:d2:87:16:03:b4:3e:d2:f6:f2:32:
77:9d:1f:aa:43:0c:df:d0:3b:f9:01:f7:c1:fb:ca:17:86:35:
59:b0:3d:70:c5:dc:63:66:a5:4e:3e:9a:22:aa:12:3e:d2:1f:
ef:b8:d3:b6:af:76:46:6b:ad:9c:4b:91:53:b1:7c:73:56:72:
b8:b5:72:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:28 2025 by rpki-client