Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier: OZCG6CWZLbt0auTCBqSKkdqqVmX4iV4JZSH1B676x40=
Subject key identifier: 84:E9:5B:41:4F:0D:21:87:F8:0C:B4:78:77:52:A0:0B:8F:D9:FE:D1
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial: 0195E0B4B1EE6F39F955D7F647312ADB460A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 07:01:33 +0000
Manifest this update: Sat 29 Mar 2025 07:01:33 +0000
Manifest next update: Sun 30 Mar 2025 07:01:33 +0000
Files and hashes: 1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: AqX0ksa81UenSsgd25Z/z/TpacBmdyRBA8zmvav0FI8=)
2: TSGJBwmUH6zzcSk5BJxtW8RE4eo.roa (hash: GDRdYgmwqR/8cmIcSo9mtVpLWe+BPUg+Ymiy8VwGofg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:b1:ee:6f:39:f9:55:d7:f6:47:31:2a:db:46:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
Validity
Not Before: Mar 29 07:01:33 2025 GMT
Not After : Mar 30 07:01:33 2025 GMT
Subject: CN=84e95b414f0d2187f80cb4787752a00b8fd9fed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:85:b9:11:e8:03:b0:4e:86:82:9d:3a:1a:
e1:3f:05:b6:cc:fb:96:9a:3f:37:f0:db:28:78:69:
64:9d:63:fe:3f:aa:a0:b5:b0:ae:02:57:fa:4d:d4:
b0:30:ec:5a:46:d8:6d:ca:1f:5f:6b:e4:94:95:98:
78:43:d3:27:93:f3:68:08:e4:36:8c:f5:71:9f:9a:
7e:50:06:34:54:f8:cf:bd:0e:6e:3a:65:a7:3e:b6:
a3:ec:ac:51:90:be:f1:40:58:b0:96:17:fb:14:1f:
39:51:52:1e:ce:88:04:d4:e1:56:b9:d0:32:f5:48:
04:f1:34:0a:da:0d:f4:a4:4a:7a:c0:4a:ad:9e:34:
55:14:0e:46:9e:12:d3:47:6f:9b:4c:f3:33:22:55:
b9:4f:2a:84:50:9a:20:55:a6:e9:1a:a3:0e:aa:6e:
30:2f:46:f1:04:48:39:60:ff:5f:18:c1:e6:8b:48:
14:48:70:41:ed:dd:81:bb:4b:8c:07:9c:aa:36:96:
2b:27:90:35:16:71:3b:12:bd:b4:14:22:60:82:d0:
5a:16:60:b9:84:5d:24:62:82:92:2d:b2:d8:ab:e4:
ea:c1:bc:20:72:b6:eb:d6:95:c7:4d:b1:9f:dd:83:
c5:e1:8a:d5:52:0a:be:25:ea:51:2e:60:7b:2e:94:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E9:5B:41:4F:0D:21:87:F8:0C:B4:78:77:52:A0:0B:8F:D9:FE:D1
X509v3 Authority Key Identifier:
keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d3:7f:44:ef:b5:b7:e1:76:5b:0d:de:3d:7e:bf:fb:dd:2f:
6b:08:38:cf:c6:a0:1c:a6:e7:76:54:b7:60:ae:91:9e:8a:5e:
f4:50:ee:4f:73:a6:60:17:76:d6:7a:f5:7d:1f:41:ce:95:fa:
0f:dc:5e:d8:40:f9:4b:bd:f7:66:6a:c4:ee:2a:52:25:98:4c:
6e:ab:3d:df:60:84:a6:e4:b0:f1:dc:52:88:38:b0:e9:7b:fe:
e3:e4:8a:f5:63:f4:ca:ac:7d:a2:78:33:c9:c0:f2:fa:2d:0f:
c3:a1:b6:60:08:f1:62:dd:d4:7a:b7:be:e1:1b:1e:27:61:06:
05:2a:3a:7f:a6:d5:f2:44:47:65:97:54:c4:6a:6e:91:e3:2d:
53:0a:65:82:03:31:5b:e2:50:37:82:85:68:1b:55:9f:6a:f2:
30:85:65:83:8c:14:f1:a5:12:7c:43:48:56:cb:84:2a:38:4e:
d2:7b:4c:6e:ad:e7:49:4e:8d:ff:f3:f6:84:63:83:aa:84:81:
5a:78:70:6a:35:32:bf:91:50:87:02:a3:e5:70:38:df:a7:c1:
b9:5d:70:e8:f4:1e:8e:68:22:ca:7a:9c:e4:13:a3:ec:63:5a:
24:07:51:1c:ef:c0:9b:e7:18:0f:a9:eb:5b:7d:8c:ff:a9:31:
40:58:73:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:31:29 2025 by rpki-client