Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.mft
File: FUNQKjLkt-H_DwIulTDcayMmnYo.mft (raw, json)
Hash identifier: JzrCO4qKg6JDY2cg8BGVbfnKuBVlbXjX1k+QcGelSkI=
Subject key identifier: 5D:3D:8D:E0:2D:31:A8:D7:1C:97:F0:CC:DD:96:CA:88:A7:52:98:A7
Authority key identifier: 15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A
Certificate issuer: /CN=1543502a32e4b7e1ff0f022e9530dc6b23269d8a
Certificate serial: 0195E15985A501CB84CAF2430812E53503EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.mft
Manifest number: 061F
Signing time: Sat 29 Mar 2025 10:01:35 +0000
Manifest this update: Sat 29 Mar 2025 10:01:35 +0000
Manifest next update: Sun 30 Mar 2025 10:01:35 +0000
Files and hashes: 1: 1-DxDsDMdf_RIlBxaE4mr5-L82gI.roa (hash: VcSMCxFdtSvdut5ZP4Ui9WVGG8c9ZkwpknVV/crMFhc=)
2: FUNQKjLkt-H_DwIulTDcayMmnYo.crl (hash: FnIeTqC8wep09Czv1Ap/ql/1ooMzWn6qKyU2ry5K+yo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:85:a5:01:cb:84:ca:f2:43:08:12:e5:35:03:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1543502a32e4b7e1ff0f022e9530dc6b23269d8a
Validity
Not Before: Mar 29 10:01:35 2025 GMT
Not After : Mar 30 10:01:35 2025 GMT
Subject: CN=5d3d8de02d31a8d71c97f0ccdd96ca88a75298a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:85:c5:73:ae:3b:f7:9a:b7:dc:56:23:d2:
af:7f:dc:b4:fe:93:55:c0:8c:e8:c1:3e:0d:69:9a:
68:e0:83:be:da:41:54:66:27:b1:9b:ed:ea:08:f2:
31:2a:de:5d:5a:89:c0:a6:c2:92:be:5f:3c:03:08:
97:30:27:a7:a9:4c:f5:5c:93:e5:de:51:bd:65:56:
a5:ff:02:7b:ce:1b:86:41:7d:d9:c2:29:3d:06:4e:
5b:4a:eb:4e:24:b1:69:c9:76:bc:4f:47:b6:9b:29:
b6:94:86:bf:bd:49:b4:42:20:59:0c:3d:c3:0b:3f:
fd:7c:66:67:49:b3:69:d9:d8:0b:5b:a0:dc:98:a0:
85:41:32:f0:70:0c:da:c6:5f:ca:ef:41:b7:e9:4d:
ac:f9:0d:61:f8:51:f2:a6:21:05:45:9d:64:3a:4a:
18:b9:0f:52:e5:d5:61:1a:a8:6a:fc:cf:cb:88:5c:
0f:64:cd:d0:3f:ad:4d:d5:13:84:c5:d0:d4:4e:b9:
a5:dc:97:b5:b6:fd:6f:63:02:7f:11:9e:84:86:35:
51:ff:ef:3a:cf:a2:32:ec:fb:ee:05:4a:b3:cc:34:
81:4d:3f:6d:86:8e:51:18:0e:53:7b:2e:26:d1:a5:
3d:58:70:11:e9:ac:97:ed:a3:63:f7:f6:c3:e0:e4:
a9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3D:8D:E0:2D:31:A8:D7:1C:97:F0:CC:DD:96:CA:88:A7:52:98:A7
X509v3 Authority Key Identifier:
keyid:15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5e:af:e9:18:10:67:9f:21:6c:59:6b:9e:17:a3:9f:10:4c:
56:37:21:61:f1:96:f6:70:37:06:31:e3:b9:6b:be:88:97:25:
c8:b1:17:e6:24:ca:80:60:43:32:00:ef:3e:56:17:86:51:55:
a2:07:6c:ec:c5:f1:a1:dd:5a:e3:fa:72:94:09:49:ef:fb:1e:
e4:9d:5b:11:f7:e8:1f:29:20:06:ee:21:bf:fa:44:c0:f1:b9:
0a:4f:f2:28:6a:98:15:fe:2c:6e:d2:e8:0e:1e:fe:93:9c:0d:
03:b4:dc:b3:00:24:00:fd:4c:09:a6:50:b5:a2:83:e0:92:c1:
cc:51:ac:50:86:8e:b5:ad:e0:e5:e3:ff:f2:7b:31:27:6a:8c:
82:0c:72:09:9b:2b:b5:41:ab:73:42:ff:b4:a4:07:49:88:98:
be:1a:89:fc:2d:f1:7a:b6:5f:54:58:d4:36:7a:4d:9d:41:00:
6a:2c:f3:2f:1c:34:76:d1:6b:e8:7e:e2:13:b7:13:9e:9b:c2:
f2:0b:be:1c:c8:5d:7b:cb:1f:80:2f:e4:c3:ef:24:b3:cf:2a:
b8:80:dd:c4:06:10:60:65:6d:a3:ee:83:52:40:a4:74:58:3a:
30:2f:96:b7:c2:4e:5c:e2:02:2e:10:b1:a1:11:e2:dc:52:73:
63:e1:b3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:07:50 2025 by rpki-client