Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f718b2-1e5a-4cd7-b692-c5733519a729/1/FKAFxxNsUR5X6l5lkZoz1MAIoQc.mft
File: FKAFxxNsUR5X6l5lkZoz1MAIoQc.mft (raw, json)
Hash identifier: Yq54TykrRqoM8jTRuLj6gK2YxOnvRQjV7uK26AEftSQ=
Subject key identifier: 16:24:28:36:84:35:7C:FB:6A:15:7C:06:E5:59:48:21:97:3F:1A:4A
Authority key identifier: 14:A0:05:C7:13:6C:51:1E:57:EA:5E:65:91:9A:33:D4:C0:08:A1:07
Certificate issuer: /CN=14a005c7136c511e57ea5e65919a33d4c008a107
Certificate serial: 01965B70DF244515DE6B09F013418E33BCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKAFxxNsUR5X6l5lkZoz1MAIoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f718b2-1e5a-4cd7-b692-c5733519a729/1/FKAFxxNsUR5X6l5lkZoz1MAIoQc.mft
Manifest number: A8
Signing time: Tue 22 Apr 2025 03:00:45 +0000
Manifest this update: Tue 22 Apr 2025 03:00:45 +0000
Manifest next update: Wed 23 Apr 2025 03:00:45 +0000
Files and hashes: 1: FKAFxxNsUR5X6l5lkZoz1MAIoQc.crl (hash: 2H71M3FTRiIIdn233y66hDUufr9MCy3fNlZ7npLssH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:df:24:45:15:de:6b:09:f0:13:41:8e:33:bc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a005c7136c511e57ea5e65919a33d4c008a107
Validity
Not Before: Apr 22 03:00:45 2025 GMT
Not After : Apr 23 03:00:45 2025 GMT
Subject: CN=1624283684357cfb6a157c06e5594821973f1a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:88:3f:04:16:8c:58:ef:b6:fb:a0:bf:dd:
57:1a:e9:a0:89:c4:18:f2:ad:8b:de:93:8c:e2:4a:
c9:1d:5c:ed:cc:37:4d:75:46:b4:f7:ea:a2:43:6a:
b7:bc:e8:7d:3d:b8:ab:7b:30:93:83:5d:b2:6e:e8:
e1:25:71:ad:b9:41:40:69:71:8a:2d:3d:42:7f:fe:
fa:8d:2f:78:d2:96:e1:8a:e1:f6:97:e6:27:2c:26:
88:f4:f6:69:bc:ce:91:d5:e4:9d:8c:a6:70:09:d2:
85:5d:ea:ce:bc:4c:9e:dc:ea:b0:58:31:63:b1:41:
9d:d4:7d:6e:a6:f1:49:f0:5c:10:94:ff:8d:da:77:
99:e2:4b:24:17:e2:11:47:cd:0d:a6:59:ce:3d:de:
8d:0a:d6:fc:d5:b7:43:1e:5d:d5:03:e9:bf:4a:f7:
65:d9:43:b8:86:6d:9f:53:1e:d8:79:b6:b7:7f:03:
fd:68:85:7f:82:e2:77:55:87:c9:c5:66:85:5a:3b:
ab:6a:ec:ba:e4:d6:25:20:45:c5:92:38:f6:3b:88:
17:cd:79:dd:ce:5e:39:3f:56:c1:d1:52:1d:09:f6:
6d:04:3b:07:40:b1:ce:f1:9b:b6:9c:5a:62:9b:94:
7a:fc:ec:e7:69:2b:58:74:4a:4a:8d:5f:4f:46:85:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:24:28:36:84:35:7C:FB:6A:15:7C:06:E5:59:48:21:97:3F:1A:4A
X509v3 Authority Key Identifier:
keyid:14:A0:05:C7:13:6C:51:1E:57:EA:5E:65:91:9A:33:D4:C0:08:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKAFxxNsUR5X6l5lkZoz1MAIoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f718b2-1e5a-4cd7-b692-c5733519a729/1/FKAFxxNsUR5X6l5lkZoz1MAIoQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f718b2-1e5a-4cd7-b692-c5733519a729/1/FKAFxxNsUR5X6l5lkZoz1MAIoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:72:8f:04:65:d5:4d:42:bf:58:5e:13:5a:56:72:7e:88:a6:
2e:ac:ad:f1:f0:01:47:dc:55:72:d2:0f:77:29:45:0f:e9:ca:
ba:8c:82:db:6d:62:1e:04:cf:dc:b8:d0:81:13:d3:88:45:54:
6c:52:b7:36:d0:ae:3b:fd:f1:d8:14:8a:00:fc:cd:6a:72:24:
0f:31:e7:dd:61:23:33:2d:d9:9f:35:11:21:56:de:1c:a7:c8:
c7:0b:c3:81:b3:29:10:79:29:f2:cb:86:8c:f5:68:1b:c5:00:
f6:5e:73:fb:c0:7e:90:82:4c:0a:91:a9:ab:cf:53:c2:6d:01:
c6:1f:e9:d0:23:c2:e0:a6:54:7a:39:79:1a:17:53:c8:77:2f:
2d:f1:ed:7d:e5:64:b4:43:c6:73:ce:5f:ee:30:a5:ba:06:6a:
bc:f2:cf:18:43:ad:0a:f5:0f:9e:12:c4:e2:43:10:41:5e:c4:
15:c7:8d:73:3c:4e:32:13:00:15:cd:d5:74:90:d7:8d:f5:d1:
bd:2a:1c:2f:42:24:4e:0e:58:70:34:2e:d7:d3:58:86:7e:7c:
37:04:31:28:68:16:89:ed:2d:d6:a7:29:0c:da:1a:48:df:67:
0f:36:a9:36:82:0c:02:36:df:a8:24:99:16:75:cf:19:42:a5:
04:47:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:05:26 2025 by rpki-client