Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/FMC-CEv6DI5wHpw9QsGHx7pqQO0.mft
File: FMC-CEv6DI5wHpw9QsGHx7pqQO0.mft (raw, json)
Hash identifier: Yo4yjKg7LeABbA00iPbe6kBl5vjYgmEt1CPQRV+cnIo=
Subject key identifier: 89:B1:92:66:2A:A7:F7:12:0D:9F:62:D5:5C:0A:9A:29:EC:0E:E4:87
Authority key identifier: 14:C0:BE:08:4B:FA:0C:8E:70:1E:9C:3D:42:C1:87:C7:BA:6A:40:ED
Certificate issuer: /CN=14c0be084bfa0c8e701e9c3d42c187c7ba6a40ed
Certificate serial: 018BEBBF00075BAE38E9D26F5F9071928661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMC-CEv6DI5wHpw9QsGHx7pqQO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/FMC-CEv6DI5wHpw9QsGHx7pqQO0.mft
Manifest number: 085D
Signing time: Mon 20 Nov 2023 08:00:44 +0000
Manifest this update: Mon 20 Nov 2023 08:00:44 +0000
Manifest next update: Tue 21 Nov 2023 08:00:44 +0000
Files and hashes: 1: Bpt_7WSZPkzI4bnFpunLhUXJ_kU.roa (hash: oxEPWbaAYq7HpJZSUbOnXqCKpRsDON98PBLjgz+zv7Q=)
2: FMC-CEv6DI5wHpw9QsGHx7pqQO0.crl (hash: 447VtqWwWRlo2PKmX2UrsDY6DtyLX1Qwpp7Z0mw8eJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:bf:00:07:5b:ae:38:e9:d2:6f:5f:90:71:92:86:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c0be084bfa0c8e701e9c3d42c187c7ba6a40ed
Validity
Not Before: Nov 20 08:00:44 2023 GMT
Not After : Nov 21 08:00:44 2023 GMT
Subject: CN=89b192662aa7f7120d9f62d55c0a9a29ec0ee487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:cd:05:ed:cb:db:3b:28:3a:b5:a4:49:58:
94:45:af:6c:62:fb:a9:1c:39:26:f7:95:06:fa:a2:
8a:64:c3:07:b8:de:34:47:b1:6f:fe:c6:a0:45:c9:
3d:1f:9f:24:78:39:83:b6:81:ce:e6:bf:c1:60:82:
dd:43:df:57:d7:97:77:6a:95:78:1d:bf:c7:da:5b:
df:c0:35:9e:84:33:b0:dd:6a:48:eb:c4:61:78:64:
cf:e2:74:bd:ad:1e:09:fc:72:69:51:7e:58:cb:b2:
03:dc:aa:db:fd:c7:26:93:45:81:49:63:a4:73:a2:
37:de:03:df:f8:93:a1:5d:4d:a1:73:30:ab:0b:33:
4c:ad:e5:81:54:47:c8:47:7d:bd:b0:14:cc:2c:bb:
77:6d:a3:2b:bc:f5:29:39:d1:c7:11:ee:40:25:c7:
fd:1c:96:5e:08:f1:da:25:21:66:41:32:19:d4:b7:
ff:79:18:86:28:80:71:8c:71:40:59:20:c8:8f:40:
08:62:3a:dc:a5:ad:f8:95:d3:d5:43:f1:64:3a:11:
d5:7e:37:6b:c0:c2:e4:58:fe:6f:be:8e:59:67:67:
5b:f1:5c:97:8f:9b:bd:b3:d2:c8:64:2d:13:34:53:
89:94:3f:bf:2e:14:63:cd:4f:d8:98:23:a4:f9:43:
7b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B1:92:66:2A:A7:F7:12:0D:9F:62:D5:5C:0A:9A:29:EC:0E:E4:87
X509v3 Authority Key Identifier:
keyid:14:C0:BE:08:4B:FA:0C:8E:70:1E:9C:3D:42:C1:87:C7:BA:6A:40:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMC-CEv6DI5wHpw9QsGHx7pqQO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/FMC-CEv6DI5wHpw9QsGHx7pqQO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/FMC-CEv6DI5wHpw9QsGHx7pqQO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a3:e3:fb:96:c6:f8:ed:77:2e:2d:a5:8b:b4:df:23:de:74:
08:80:7a:41:33:77:73:26:c0:92:f0:5b:95:17:1e:ae:e4:78:
e1:81:33:8d:f5:de:9b:1c:f2:74:c5:f8:1e:ce:32:04:cb:c2:
72:f9:ff:b6:80:53:33:85:05:fa:26:63:3b:9f:d8:e1:f8:72:
63:7e:f7:f9:73:40:fd:cf:c9:ca:c0:a3:a7:99:1d:64:1c:ed:
b5:9f:66:99:7f:2e:83:45:d4:64:bc:45:0b:69:c7:d2:c3:d1:
fd:75:4f:10:af:da:20:b0:5c:07:ef:c8:10:5b:84:cf:d8:3c:
45:f9:14:7a:24:90:e8:3f:35:cc:ed:f5:f6:18:92:c9:1e:44:
8a:16:c0:dc:f4:56:c8:ed:5c:50:65:24:ce:bb:4b:18:d7:92:
cb:7d:16:24:8d:89:5f:03:38:ad:89:14:81:49:fe:dc:8a:f2:
5f:c7:6b:34:57:59:d0:d9:ee:ec:15:09:10:8a:1a:d2:28:87:
e7:64:8a:9d:ff:a1:33:9d:56:0d:68:8a:c2:9a:6b:6c:0d:d4:
d2:f8:00:4e:f7:0c:79:76:57:58:46:14:af:9b:5e:18:eb:ad:
fb:c9:0f:3e:8d:44:92:d9:eb:4e:9a:82:fc:85:dc:66:3f:fb:
7b:2a:4b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:48:09 2025 by rpki-client