Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: oJtkJAznE6wG71ArXsI4Hx7pUFRBsMPz02cuhGJ0YHw=
Subject key identifier: B9:FF:DF:BA:2A:5C:DC:77:AB:F9:CD:4C:24:3C:C5:97:E8:0B:84:F2
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 0195E12201911A538D54C16E1A7843D8F385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 01CB
Signing time: Sat 29 Mar 2025 09:00:56 +0000
Manifest this update: Sat 29 Mar 2025 09:00:56 +0000
Manifest next update: Sun 30 Mar 2025 09:00:56 +0000
Files and hashes: 1: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: AqPl2yMYUZ5wxWZYqtpbAsxHEJSUGSzMszrOVgm4i4A=)
2: Ln2JbGXgQ88O79Pg1zLA68Pqxy0.roa (hash: Mstyw2j7AKFxamlwfGacDBtId3D916+hLBKPld0IQWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:01:91:1a:53:8d:54:c1:6e:1a:78:43:d8:f3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Mar 29 09:00:56 2025 GMT
Not After : Mar 30 09:00:56 2025 GMT
Subject: CN=b9ffdfba2a5cdc77abf9cd4c243cc597e80b84f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e7:32:f4:e0:de:fe:2a:4c:a9:78:64:b0:20:
63:94:71:d4:d4:52:0f:08:f2:ae:d2:dd:c3:29:cd:
e3:1a:0f:80:c4:24:80:3f:c6:51:0d:d5:79:c7:29:
e4:2d:2f:4d:fb:89:ae:b6:5a:67:81:6c:7c:6e:39:
08:a5:40:47:d0:6b:38:68:1e:fc:d1:29:12:0a:13:
0e:af:f6:7d:c9:16:13:fb:cd:c6:5c:8e:70:f7:0b:
f2:2b:ba:f5:4b:ec:0f:49:ce:01:96:7d:2e:4a:ff:
f0:b4:20:5a:34:2a:fe:8c:3e:f7:82:18:f9:19:3d:
3b:ce:bf:d7:30:4d:a4:1f:d6:a2:1d:db:8b:7a:9c:
86:01:03:05:77:65:e0:1b:11:40:62:e3:2a:66:a5:
8b:b6:29:3b:a3:10:27:d2:7c:be:b5:9d:aa:8c:c1:
19:55:6b:39:3b:52:5f:3a:ee:cf:d3:0a:5e:91:37:
90:8d:bc:b0:5b:74:08:07:3c:b6:8a:49:47:41:c2:
eb:3f:5e:02:52:af:52:d1:ef:47:50:93:b1:58:bf:
e9:ec:5a:62:be:4f:d3:1a:28:ad:0b:26:a4:d8:25:
57:4c:6c:ea:13:de:23:78:e8:5c:6c:91:7a:fd:1f:
8e:83:90:e7:a9:01:55:32:ae:c9:35:b8:26:3d:55:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FF:DF:BA:2A:5C:DC:77:AB:F9:CD:4C:24:3C:C5:97:E8:0B:84:F2
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bf:e8:5e:03:04:00:ba:81:5c:54:9a:28:55:7f:90:fb:33:
a1:ad:31:5e:a9:67:7e:1d:e0:e6:8f:ef:3c:9f:e1:77:d5:63:
81:bb:34:68:47:86:04:4a:1c:bb:48:3f:ad:8e:ae:c0:c8:03:
11:dd:51:fc:9b:7a:37:19:c6:9f:82:44:aa:d6:c7:70:62:c4:
9f:e1:7f:ee:c4:f8:35:b6:b0:fd:ef:27:de:ba:fd:b9:ca:f5:
e6:a7:d4:06:3b:05:9f:c4:1c:7b:97:d7:13:3d:d1:af:a6:13:
e2:a0:67:98:ab:46:3f:10:54:26:9f:3b:06:47:56:e6:4d:a5:
55:8f:36:89:26:91:fc:a7:2a:4f:e3:94:55:c1:7b:1c:a8:16:
a2:1e:39:7b:03:89:23:0a:88:ae:c5:b5:a1:dc:c8:81:c5:6b:
b2:81:bc:62:de:2e:33:0b:58:89:17:f0:e1:51:72:8d:08:fb:
a3:24:ec:3d:f2:7d:a4:10:7b:42:d9:f3:48:a5:3c:dd:7c:6c:
05:bc:41:23:9f:7c:5c:4f:8f:45:60:e6:3b:a8:66:19:1f:c2:
e4:94:fc:de:55:38:8d:92:24:d6:3b:b4:b2:ce:a7:f0:f0:7a:
07:50:41:d6:3b:4c:f7:b5:4f:48:41:6f:e6:68:88:98:7c:1e:
19:6b:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:05 2025 by rpki-client