Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6f32b1-6a72-4e9f-85b6-51e72a300492/1/Fl-pPK0jgtk5puOCjQPQa2qK1vc.mft
File: Fl-pPK0jgtk5puOCjQPQa2qK1vc.mft (raw, json)
Hash identifier: QzLW2UI8t05Q0wtygdUo52lM1Uvuboib8bGo79DsGPk=
Subject key identifier: 70:F2:2C:1E:EE:69:6C:58:F0:FB:38:F7:F7:97:89:BD:55:85:15:E3
Authority key identifier: 16:5F:A9:3C:AD:23:82:D9:39:A6:E3:82:8D:03:D0:6B:6A:8A:D6:F7
Certificate issuer: /CN=165fa93cad2382d939a6e3828d03d06b6a8ad6f7
Certificate serial: 0195B36E31C0F73C27B34D6C1A192AE4F505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-pPK0jgtk5puOCjQPQa2qK1vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6f32b1-6a72-4e9f-85b6-51e72a300492/1/Fl-pPK0jgtk5puOCjQPQa2qK1vc.mft
Manifest number: 11CE
Signing time: Thu 20 Mar 2025 12:01:37 +0000
Manifest this update: Thu 20 Mar 2025 12:01:37 +0000
Manifest next update: Fri 21 Mar 2025 12:01:37 +0000
Files and hashes: 1: Fl-pPK0jgtk5puOCjQPQa2qK1vc.crl (hash: sdg0AfvzLWXhFY9tyUiXOYo2fb4OJtYtFApleECQWiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:6e:31:c0:f7:3c:27:b3:4d:6c:1a:19:2a:e4:f5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fa93cad2382d939a6e3828d03d06b6a8ad6f7
Validity
Not Before: Mar 20 12:01:37 2025 GMT
Not After : Mar 21 12:01:37 2025 GMT
Subject: CN=70f22c1eee696c58f0fb38f7f79789bd558515e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:46:77:43:84:d7:f1:a6:4c:65:e5:03:a7:
6e:1a:55:ff:49:3a:0d:32:55:55:2a:8d:b4:58:b3:
43:c8:ad:a8:0b:8e:6a:6a:31:67:49:e0:ca:1b:69:
3f:76:c5:25:3e:01:44:ef:de:eb:5f:fb:bd:f4:68:
6c:79:22:07:fc:d1:47:87:97:71:57:f5:b3:3b:85:
dc:5b:51:77:81:98:b7:1e:41:c2:5b:10:9c:5b:ae:
be:fc:d2:30:f5:b8:f6:67:54:0d:05:89:ee:bc:1b:
e0:cb:46:e9:40:aa:ce:59:93:c3:60:67:04:63:c7:
af:cc:11:f4:12:0d:ab:df:6d:32:79:e6:f9:d2:ba:
93:f9:48:61:b9:bf:f0:b7:c6:d0:c9:38:46:40:47:
79:de:87:39:fc:ec:5d:6e:d0:0e:2b:8c:83:0b:02:
d5:99:9c:97:68:c2:37:ab:3c:2c:f7:aa:f8:b7:a9:
6d:d3:30:17:9c:c6:7f:51:59:a7:30:53:6e:b6:a9:
99:6b:12:e5:63:c5:34:4b:28:ac:d6:59:cc:a1:39:
e4:e7:14:1b:24:b0:87:1e:d6:2d:57:f2:0f:e7:66:
f5:d2:f7:7e:34:1e:75:5f:49:90:02:c8:12:95:08:
b6:90:fc:29:55:61:53:64:5c:d0:5b:f0:a4:04:b3:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F2:2C:1E:EE:69:6C:58:F0:FB:38:F7:F7:97:89:BD:55:85:15:E3
X509v3 Authority Key Identifier:
keyid:16:5F:A9:3C:AD:23:82:D9:39:A6:E3:82:8D:03:D0:6B:6A:8A:D6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-pPK0jgtk5puOCjQPQa2qK1vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6f32b1-6a72-4e9f-85b6-51e72a300492/1/Fl-pPK0jgtk5puOCjQPQa2qK1vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6f32b1-6a72-4e9f-85b6-51e72a300492/1/Fl-pPK0jgtk5puOCjQPQa2qK1vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ba:69:67:ad:a7:6c:31:c4:e4:65:f2:61:ca:20:3a:86:83:
76:b5:56:f6:dc:8d:11:31:4b:cf:3a:d5:11:08:73:ca:c9:a4:
9b:e3:19:95:b8:dd:47:9d:b9:6a:ea:fa:51:07:de:81:47:5f:
31:e3:ec:e1:1f:78:c5:29:35:53:eb:3f:8c:f5:99:fc:55:36:
6f:df:f3:c6:9e:32:b0:6c:9f:49:db:bb:3d:c9:5d:aa:a6:fb:
c2:8e:47:cc:7c:f9:fa:6a:bf:a0:41:75:c3:b6:33:0e:a2:48:
5b:0c:db:5e:04:04:e9:9f:28:4a:9f:10:46:fb:fe:0d:a0:65:
36:a0:2d:ae:aa:07:f2:0b:96:8a:26:f1:4d:1b:ea:73:26:57:
aa:7a:aa:72:5b:2a:b8:b1:fe:fc:62:56:ed:23:b1:1b:f5:c8:
24:3e:f2:60:86:ed:63:3b:ea:b7:ed:a9:03:59:26:8e:e6:b3:
69:3d:07:4a:41:4d:3f:dd:7f:21:d2:39:e4:0c:78:6e:b9:72:
b9:96:8f:6f:c4:93:7e:cd:a5:cd:c1:74:92:7b:8e:99:aa:64:
66:03:b3:69:04:30:bf:d8:82:61:c3:bb:d3:07:75:88:77:e8:
f1:da:89:cb:32:fe:03:c6:75:4c:8b:49:35:93:48:d8:b5:47:
88:e2:0a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:37:13 2025 by rpki-client