Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/FNAcrh3f1NQ357f-6l6kbjBAUJA.mft
File: FNAcrh3f1NQ357f-6l6kbjBAUJA.mft (raw, json)
Hash identifier: +4xQaAngTtF/KmzQatLGRu9GMUb9HKa63JojNT2b1lQ=
Subject key identifier: 8E:39:C9:C7:A4:77:38:18:F2:48:5C:05:DE:A3:C5:CD:84:2B:BE:36
Authority key identifier: 14:D0:1C:AE:1D:DF:D4:D4:37:E7:B7:FE:EA:5E:A4:6E:30:40:50:90
Certificate issuer: /CN=14d01cae1ddfd4d437e7b7feea5ea46e30405090
Certificate serial: 0194D0D580150341291F8DFF4CFB2BFD182C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNAcrh3f1NQ357f-6l6kbjBAUJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/FNAcrh3f1NQ357f-6l6kbjBAUJA.mft
Manifest number: 068B
Signing time: Tue 04 Feb 2025 12:00:40 +0000
Manifest this update: Tue 04 Feb 2025 12:00:40 +0000
Manifest next update: Wed 05 Feb 2025 12:00:40 +0000
Files and hashes: 1: FNAcrh3f1NQ357f-6l6kbjBAUJA.crl (hash: Cdd6mteFxWcQOB+3KvD0i+ZzD+pAUUlCBZTrrzwrkIU=)
2: gdcvfVC1A0J6Y5wEeM7ajL8ZWqY.roa (hash: rwSDtV5+UFY1OMbVLd3/BKZgMtuvDFJGLNREvrJIiYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:d5:80:15:03:41:29:1f:8d:ff:4c:fb:2b:fd:18:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d01cae1ddfd4d437e7b7feea5ea46e30405090
Validity
Not Before: Feb 4 12:00:40 2025 GMT
Not After : Feb 5 12:00:40 2025 GMT
Subject: CN=8e39c9c7a4773818f2485c05dea3c5cd842bbe36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:06:4a:1a:d0:90:13:eb:94:ad:11:53:73:
54:f8:bb:94:99:4b:76:82:66:d7:c8:37:1c:70:64:
26:97:5a:87:96:fd:65:8b:87:01:90:25:5e:f7:0f:
67:1e:a8:8d:21:5e:c0:d6:8d:10:ef:f5:04:a8:24:
5d:3a:17:e3:e8:6a:bc:c2:7e:fe:37:57:bf:51:e1:
5d:42:19:ec:56:9b:26:86:0c:17:9e:e4:6f:79:a9:
43:7d:cf:8e:db:bb:8d:e2:62:73:3c:3d:14:aa:a1:
48:7c:e1:2f:52:09:34:31:d3:43:61:69:ba:d8:77:
a5:c5:cc:e9:fa:f0:51:a3:11:93:69:b7:d4:fd:33:
f4:c2:a7:12:4d:68:3f:4d:4e:8e:c4:c7:1d:ae:21:
56:2c:20:99:2a:87:9b:6a:d1:6c:d3:23:f0:be:00:
71:41:1a:2a:97:81:d8:05:5f:c6:1b:b6:bc:b3:2e:
dd:f1:8a:14:40:2b:68:f5:c1:3e:ef:bb:7e:57:5b:
ad:6e:74:89:e6:ba:22:9a:1c:6f:13:ed:07:33:20:
ba:2f:09:6c:1e:00:68:5d:d3:ca:da:cc:e9:5e:7d:
3e:26:23:e2:fc:76:a2:cf:e5:de:db:08:d3:f5:b6:
0f:2f:f5:b4:ee:1c:c0:61:f3:7c:a4:1f:5a:13:54:
aa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:39:C9:C7:A4:77:38:18:F2:48:5C:05:DE:A3:C5:CD:84:2B:BE:36
X509v3 Authority Key Identifier:
keyid:14:D0:1C:AE:1D:DF:D4:D4:37:E7:B7:FE:EA:5E:A4:6E:30:40:50:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNAcrh3f1NQ357f-6l6kbjBAUJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/FNAcrh3f1NQ357f-6l6kbjBAUJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/FNAcrh3f1NQ357f-6l6kbjBAUJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:01:9d:f9:d8:d9:2e:57:87:bb:47:e7:a4:23:0e:c8:8b:35:
da:45:98:e0:dc:21:e1:73:42:65:26:8a:44:c0:f3:4a:88:78:
90:20:7f:e5:7d:29:6c:9e:fe:49:1f:06:dd:7c:a4:62:ec:09:
05:16:6c:63:1d:ca:04:70:c1:40:06:32:ff:37:80:9e:79:ec:
19:4b:5c:c9:8d:32:66:05:ff:85:56:df:9f:df:74:4e:ac:57:
e5:1d:44:7c:fb:a7:2f:8b:c7:35:4e:b8:bb:81:66:5c:c5:66:
3b:b9:2f:39:73:04:e6:8e:1c:56:a8:0b:ee:31:cb:c5:fa:d5:
8b:72:27:6a:99:f6:4a:46:2a:9d:cd:c4:ef:67:ab:11:c8:c3:
d5:a4:13:f4:d3:f0:df:46:40:89:ba:12:46:e9:4a:1b:30:61:
b1:aa:bb:90:6f:e2:88:fb:d0:b2:ac:90:56:20:7c:ec:3b:40:
3f:41:7a:fa:f6:be:00:44:e4:a5:1f:7f:b9:26:8d:4a:d2:53:
24:cc:c3:57:6d:42:25:e0:cc:fe:f6:c6:93:e6:d0:22:98:48:
1c:84:fb:77:ad:e4:b5:f5:49:94:cc:92:16:ab:64:a3:e6:18:
97:68:0d:95:d4:14:61:f6:2b:84:4d:76:fa:6a:ae:e6:75:e5:
b4:f2:8b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:22 2025 by rpki-client