Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft
File: FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft (raw, json)
Hash identifier: kCo1XaPnzCUqnxQKrtVqfcLNo9Kh3HvUvUvByNH84ps=
Subject key identifier: 57:20:42:B3:AB:7A:CE:A4:28:7C:69:17:FD:60:B7:F5:74:E7:EA:39
Authority key identifier: 15:16:F9:14:FA:9A:0E:E0:F3:81:7C:4A:41:FA:78:31:5D:A6:F2:70
Certificate issuer: /CN=1516f914fa9a0ee0f3817c4a41fa78315da6f270
Certificate serial: 019415B9C77C41381CE7E8A5B5ECF18FFC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRb5FPqaDuDzgXxKQfp4MV2m8nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft
Manifest number: 0985
Signing time: Mon 30 Dec 2024 04:01:24 +0000
Manifest this update: Mon 30 Dec 2024 04:01:24 +0000
Manifest next update: Tue 31 Dec 2024 04:01:24 +0000
Files and hashes: 1: FRb5FPqaDuDzgXxKQfp4MV2m8nA.crl (hash: pyN02eWvxdXRUcER+6ao265RtP4qFEjtc1CtLsI/xcY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:15:b9:c7:7c:41:38:1c:e7:e8:a5:b5:ec:f1:8f:fc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1516f914fa9a0ee0f3817c4a41fa78315da6f270
Validity
Not Before: Dec 30 04:01:24 2024 GMT
Not After : Dec 31 04:01:24 2024 GMT
Subject: CN=572042b3ab7acea4287c6917fd60b7f574e7ea39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:59:bd:6d:64:93:ee:e5:6e:5d:5a:cf:9e:
78:29:64:63:22:c9:89:23:46:4a:e2:43:b4:d2:8e:
b5:24:4b:0b:a7:68:35:7e:17:22:5a:bd:3e:53:ea:
a4:1b:bc:8c:72:e2:67:51:72:c7:55:69:7b:19:c4:
b0:73:a0:60:6d:88:0f:78:9e:78:e6:c9:47:03:04:
25:ee:ce:22:5b:50:4f:68:66:af:d6:f5:6c:ee:dd:
80:98:45:b9:d0:bf:e4:bf:cc:a3:24:fd:f9:95:31:
53:97:81:53:69:d7:64:65:70:18:99:e7:f3:96:93:
56:26:a4:e9:8d:97:99:b1:e5:ee:e9:7e:1f:2a:25:
48:8e:63:2b:53:d1:21:2a:99:7f:ea:be:7f:ba:90:
35:33:cf:e9:3a:d0:a4:25:fc:ca:46:0f:de:f4:00:
be:0b:dd:05:a8:02:33:34:12:8c:38:f5:91:ef:1f:
6d:40:75:f8:30:07:1d:f3:0d:85:84:ed:aa:c4:34:
68:14:e0:4e:a4:c3:81:c3:4d:41:50:ea:cb:91:17:
94:f1:6a:be:9d:11:a2:34:19:7b:40:96:dc:92:2f:
73:39:09:34:8d:7d:5f:31:7b:84:4d:ab:c1:61:3c:
90:55:54:53:4c:ba:45:fb:26:f1:47:01:4e:f9:a4:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:20:42:B3:AB:7A:CE:A4:28:7C:69:17:FD:60:B7:F5:74:E7:EA:39
X509v3 Authority Key Identifier:
keyid:15:16:F9:14:FA:9A:0E:E0:F3:81:7C:4A:41:FA:78:31:5D:A6:F2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRb5FPqaDuDzgXxKQfp4MV2m8nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c1:8a:db:6e:ea:d5:d6:1c:13:98:cb:0b:28:95:97:c2:b9:
55:57:67:49:d1:01:e1:cc:00:46:3f:a0:75:ca:1d:74:ff:37:
61:3e:73:c2:c1:0e:4a:5e:bb:5f:78:eb:b9:eb:c3:d4:bf:d6:
b2:04:58:5d:6b:cf:15:20:da:3d:5e:b3:15:d3:71:42:10:cb:
70:e0:2b:91:71:66:87:ba:fc:68:69:d5:ef:74:8e:95:d9:8e:
ff:02:98:69:9c:58:a8:31:b7:f7:7d:c6:69:a9:12:37:a4:2f:
06:8e:e3:82:3e:d2:da:d5:f1:e9:b1:cf:bd:22:07:3b:86:cc:
3f:fc:b7:d1:c2:02:6b:2d:45:73:db:3f:ad:3f:ca:f4:50:ef:
c4:80:e4:12:33:cd:37:2f:22:a8:25:8a:b6:6b:67:a3:fe:14:
3e:37:b5:e6:73:b3:c8:b6:a7:8c:af:dc:1b:05:5f:6f:6b:ed:
d3:82:2d:dc:d3:c3:d5:87:99:99:f3:46:d8:b3:c8:4c:73:a1:
11:73:01:19:e2:83:37:38:3f:64:08:6e:09:51:7d:f0:15:3a:
53:92:46:16:f3:0c:b6:f6:f4:9a:76:79:e0:80:44:17:f4:24:
fd:ec:8f:6c:d5:a4:ca:52:3d:b7:e5:5c:0c:d2:13:81:2c:2f:
5e:f1:fd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:46 2025 by rpki-client