Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: P8JpajDPW3CJFGoI0wz2+RZ8N7e7XvnZsVwnzauPMYA=
Subject key identifier: 9F:1E:BA:19:22:D5:B2:DF:21:57:E6:6E:D7:3B:E7:3D:8B:03:09:DD
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 0194BD17C36420F3BC2D7E9DC3695B4807E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 1396
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: 6VmfcwluE+7onkoapFWV7sJ9TuLtrbdSA7Cq6zeFb9w=)
2: kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa (hash: K3F9IA4gy3lGNBan+gMrBm2P+dEVmz4mQ6ObmV/2TV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c3:64:20:f3:bc:2d:7e:9d:c3:69:5b:48:07:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=9f1eba1922d5b2df2157e66ed73be73d8b0309dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:af:a0:5c:a5:3e:ca:44:f6:f0:28:03:eb:
a6:50:4c:b9:f4:cf:ec:6a:45:51:1f:2e:6b:66:2c:
3c:2c:e9:6c:4d:2b:3a:0b:a7:0c:09:0c:c9:61:c9:
a9:30:1d:70:4c:8a:8d:9e:8a:44:db:16:76:0f:97:
bd:03:b7:9e:c2:a6:09:7c:ab:77:75:76:4a:9d:f8:
65:7b:09:00:1c:de:3c:21:52:37:ac:d9:f7:b0:d6:
45:e8:3d:72:70:fc:e2:33:54:e8:ba:43:bb:0e:ca:
de:d6:8e:ff:1f:08:d3:e1:d8:61:aa:47:d4:2a:2d:
60:db:bf:6f:12:f0:c4:d3:ac:30:04:ad:4a:8f:75:
ea:f7:d1:d0:14:42:e0:02:ab:6e:aa:8f:5f:d1:05:
a8:65:8c:df:28:0b:e6:05:01:4e:ff:e7:9c:e2:50:
7c:a0:59:2d:12:34:74:d9:cb:57:72:1a:be:87:c5:
0f:4e:07:25:f0:aa:b8:8a:9e:22:f1:f3:2f:9f:3d:
7a:fc:e5:e5:cd:b5:64:36:96:98:3a:bf:38:9c:92:
f5:6c:c5:ed:31:69:ea:04:47:da:66:3c:d1:8f:4e:
7e:4a:d9:0a:59:a6:5f:c4:ee:9e:af:4d:1c:b5:74:
79:f1:f3:19:a7:c4:f7:ed:41:76:18:d8:58:15:b6:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1E:BA:19:22:D5:B2:DF:21:57:E6:6E:D7:3B:E7:3D:8B:03:09:DD
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d2:b2:63:22:b6:b8:55:98:9a:2f:2c:60:52:f0:07:e7:8e:
f7:c7:9e:cd:f2:13:9c:cf:6a:2b:86:94:41:8a:50:1c:e6:36:
18:ae:84:9f:02:1e:1f:b4:a6:50:89:11:bc:ce:de:25:fb:97:
34:c3:79:b7:3d:d9:88:3f:71:57:32:3b:24:86:1c:c8:7c:2d:
54:a1:8c:df:32:e7:05:1f:53:fb:55:4c:a2:6f:df:c7:7c:fd:
6f:64:ba:c6:e1:1e:1a:df:14:f3:21:79:a4:77:14:56:88:20:
ee:3b:4a:9d:aa:3c:05:b0:15:fc:3d:f2:2f:1a:22:7d:85:05:
fe:52:d4:be:a6:c1:58:86:e3:21:3a:92:5b:61:4c:0a:4d:21:
fe:98:82:a2:b0:57:3a:63:f1:28:82:98:73:c4:97:f8:fd:dc:
ae:ac:1e:2e:65:71:e3:81:40:f1:b5:f3:50:c7:65:aa:8d:5c:
ff:c1:92:d5:4f:95:e2:8b:1d:08:a6:e2:50:e6:3c:b5:5e:9b:
66:f9:aa:dc:d7:37:b5:9a:9d:33:36:02:35:7d:6e:c1:af:ad:
41:dc:30:9b:a7:ee:08:54:9f:34:03:c8:69:a5:d0:0f:0b:e7:
93:f2:b2:c9:2f:37:da:8e:0c:2b:be:d8:bb:99:e5:86:77:3b:
b9:3d:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:44 2025 by rpki-client