Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier: 8Z0mkmU6iUZyciymZGirh0mUSeAGO5KAndEjmEuULQA=
Subject key identifier: F9:57:91:AD:9F:E6:0E:0F:40:B4:FF:A5:CA:20:E5:44:06:57:7D:E1
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial: 0195E190843CD24CDF83FAE0BD55C18271E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number: 7E
Signing time: Sat 29 Mar 2025 11:01:39 +0000
Manifest this update: Sat 29 Mar 2025 11:01:39 +0000
Manifest next update: Sun 30 Mar 2025 11:01:39 +0000
Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: sRXAm2mj2akEIW9igama2JMISVKnpbCseWxINxyTnYk=)
2: VjoP5kM-KwhZcj01jM3hl-6r6UA.roa (hash: vqqeCugYqbCnSBb7Wp1fy/fzybkRWWHMWjjnU8HbuEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:84:3c:d2:4c:df:83:fa:e0:bd:55:c1:82:71:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Validity
Not Before: Mar 29 11:01:39 2025 GMT
Not After : Mar 30 11:01:39 2025 GMT
Subject: CN=f95791ad9fe60e0f40b4ffa5ca20e54406577de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:29:25:18:ca:3a:f4:b0:6b:85:07:40:fb:
0b:2d:92:40:70:5f:bc:96:41:ba:19:dd:21:14:5d:
d6:2d:b7:ca:61:df:eb:99:ab:a6:c3:8a:25:fd:c4:
ff:f6:7f:8a:a7:e4:1d:77:94:80:dd:fc:9b:61:45:
a5:7f:95:35:2b:62:5b:f2:24:f4:43:4b:e1:69:ef:
fe:47:f8:50:df:b2:eb:3b:91:24:e6:d8:a2:2c:7a:
66:ea:a7:46:45:4d:29:a8:6e:a0:6c:7a:86:98:b0:
c0:ad:8d:22:1d:06:8b:79:83:74:68:4e:35:6c:4c:
22:0a:4e:1f:6a:48:9a:86:9d:5f:34:cf:bb:f4:c7:
bc:e3:8b:0c:2a:dd:7a:fd:97:ed:ac:35:af:23:98:
e4:a5:f0:04:90:a2:8a:9e:d0:9e:b0:55:71:6b:b5:
4a:e4:a7:b4:19:43:1a:ae:ec:79:c3:55:9e:e1:8d:
14:17:a4:c4:b9:8e:87:c8:7c:5f:94:61:d0:74:6a:
7d:30:df:c1:1a:dd:79:53:13:39:8d:85:f3:ec:63:
21:c5:9f:5f:62:f0:54:e1:95:38:27:0c:40:0f:8c:
98:ff:a3:48:f1:7d:9b:e3:4c:c4:ef:b4:53:0d:7a:
56:44:0c:8f:74:16:1a:5a:0b:4e:53:65:f5:1c:d0:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:57:91:AD:9F:E6:0E:0F:40:B4:FF:A5:CA:20:E5:44:06:57:7D:E1
X509v3 Authority Key Identifier:
keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2e:4b:b0:f4:d6:2c:6a:7f:2c:37:7a:0f:95:7d:a4:e7:0c:
44:b6:aa:15:c9:11:17:61:a9:e7:cc:59:52:43:4a:1b:4b:69:
4d:cf:95:ac:4a:b1:4f:b7:1b:2a:b0:31:dc:ab:18:36:8a:00:
89:27:61:02:9e:82:31:d4:7c:60:a4:6d:4b:6e:01:9a:d0:35:
c2:e4:8e:35:95:f3:d9:ef:0d:5a:b6:d2:1c:94:3a:b0:69:bd:
58:4a:b0:e8:9a:3b:8a:72:61:4c:4e:e1:bc:91:0a:4f:57:dc:
36:b4:79:ad:fc:46:d9:54:e9:38:4b:ad:f9:f5:4e:38:18:7c:
4b:5b:fc:e4:ee:8d:ce:67:55:99:a1:f5:a9:5f:61:77:96:4a:
5b:82:02:42:50:7a:61:81:d9:5a:87:e3:2d:ea:84:f8:2e:21:
79:ae:27:12:7a:68:fb:38:97:71:62:90:3b:5b:e4:fd:60:11:
a3:25:c9:b0:5b:86:ee:f9:b2:9a:58:67:d0:c2:03:d7:1d:48:
b3:d8:bd:75:70:6b:b0:e1:f5:31:2e:68:52:0a:c5:cc:ec:f4:
68:d8:89:54:50:f1:cd:67:dc:ca:55:54:fc:44:5a:8a:0a:3c:
94:55:31:07:46:4b:4f:55:d2:1b:94:98:9a:70:b7:d6:f4:ee:
6d:49:b0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:53:04 2025 by rpki-client