Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: lOR3qVhrkFE1uxzd7RSR4odH321o6+lraS8YUkCYuSw=
Subject key identifier: B5:34:FD:FE:0B:82:DF:69:A0:2E:9C:8A:24:DE:04:70:5D:05:F4:0F
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 0195DFD891F414EAAC760F05FB8E33816CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 132A
Signing time: Sat 29 Mar 2025 03:01:07 +0000
Manifest this update: Sat 29 Mar 2025 03:01:07 +0000
Manifest next update: Sun 30 Mar 2025 03:01:07 +0000
Files and hashes: 1: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: OjTQvl60LpUkowcTdfK3Ss5AgCrZ4sFGpvFHRSWxToM=)
2: c3yz1Xm3fr649PuxzYeiC0GyqPg.roa (hash: I/Ccv5oKVG1j/z4cFdG/fafH2WD7P5MCyaFq+J+EQdU=)
3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:91:f4:14:ea:ac:76:0f:05:fb:8e:33:81:6c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Mar 29 03:01:07 2025 GMT
Not After : Mar 30 03:01:07 2025 GMT
Subject: CN=b534fdfe0b82df69a02e9c8a24de04705d05f40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:13:32:df:17:24:35:7a:14:0e:4f:64:25:
0b:d8:c9:bf:37:f5:03:64:35:d4:a8:fb:b8:72:08:
9a:f8:4e:4c:23:e3:80:16:39:03:ca:a6:41:73:bb:
8b:65:03:4d:d9:57:13:35:4d:c2:48:93:1a:9e:36:
4b:d6:b6:0a:89:38:2a:51:8b:ef:70:30:ec:52:88:
f7:8b:2a:76:61:de:d8:3c:2f:7f:2d:00:40:08:2a:
f9:52:c6:92:fe:86:fa:30:02:22:26:3b:b3:27:cd:
7b:4e:78:5e:db:c4:5a:10:36:f3:54:f8:46:19:6e:
ca:64:26:ef:64:5d:0a:32:a3:cf:49:d1:57:2d:04:
76:c3:9f:2f:f4:55:7c:2f:f4:9f:ac:e7:bf:da:79:
d7:6a:8a:14:d0:9c:f7:d2:8b:5f:05:2b:59:5d:0a:
6a:cc:38:bd:0b:6e:8c:ee:17:2a:20:94:9c:8a:0c:
43:04:f6:ae:5a:39:36:d7:fc:18:25:64:db:bb:ca:
b9:46:ef:7d:44:06:e7:2d:8e:59:8e:4b:db:e4:07:
8e:65:d9:0b:6b:93:f4:08:ea:c0:a9:b6:77:e4:f8:
8b:fb:5d:95:d5:61:3b:90:e6:69:38:71:71:8b:dd:
fc:63:8f:f0:15:7d:b3:85:a3:5d:84:17:44:bd:e1:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:34:FD:FE:0B:82:DF:69:A0:2E:9C:8A:24:DE:04:70:5D:05:F4:0F
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:64:33:d3:b3:e6:67:bd:cc:3f:6c:90:f6:42:1d:e1:63:1b:
09:b7:d3:c1:ca:2d:00:81:3f:3d:73:41:9f:47:32:d0:da:46:
9f:6d:e2:4c:72:e8:a8:1b:b3:40:d0:aa:d0:b4:21:3d:55:e6:
5f:a6:9f:b8:d8:6e:5d:2c:d7:0d:ef:6b:61:81:c0:39:d4:35:
ea:7a:9f:9c:a6:ba:43:c4:93:17:bf:5d:a1:7a:df:21:74:99:
e0:fc:60:c7:f3:d1:3b:63:4c:c2:75:bd:a5:63:15:2f:95:27:
6a:b6:41:50:9b:bc:4b:11:88:e5:87:ed:7e:d9:4c:35:01:de:
bf:71:7c:11:2a:22:d8:18:9e:0a:2f:0b:b0:cb:b7:ff:2b:93:
1f:bf:14:79:90:b4:4d:85:22:81:fd:59:64:0f:88:93:53:28:
0f:ab:56:e0:f8:e8:73:94:f2:0e:88:89:4c:bc:99:3e:29:60:
a8:da:8c:6b:e7:c5:5c:65:6d:2d:b6:18:aa:26:57:d2:82:f0:
2b:90:55:51:b5:c9:91:f2:c7:41:cd:05:34:97:da:75:f5:a3:
de:40:e9:f8:c2:13:91:e3:1a:aa:d3:50:ff:cd:71:e1:de:f1:
dc:00:5c:9b:80:33:f5:bd:5e:0d:8d:92:9b:b4:89:50:cd:0d:
d3:d1:23:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:26 2025 by rpki-client