Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json)
Hash identifier: DN69mFYVNoslpM2Ai1A7b5312A/nQRK3FlHUVaDZ9RA=
Subject key identifier: 9A:26:FB:83:CF:CE:69:01:B1:E8:FC:82:84:88:D6:0C:45:28:23:F8
Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Certificate serial: 01962E2ABBC169AB5D9B90FB89AC0F8E299A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
Manifest number: 1289
Signing time: Sun 13 Apr 2025 08:01:14 +0000
Manifest this update: Sun 13 Apr 2025 08:01:14 +0000
Manifest next update: Mon 14 Apr 2025 08:01:14 +0000
Files and hashes: 1: 77yJaauLzrFexoGSd8mW28O_fIU.roa (hash: ub7MVHo9mZ0L5vdaNfZlA1Alkn53dGfVV4Z9Peyi1bs=)
2: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: Mc8M8C6de/7NfOLClCg8lVozdq0Cb1BtE382D8yDBPY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:bb:c1:69:ab:5d:9b:90:fb:89:ac:0f:8e:29:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Validity
Not Before: Apr 13 08:01:14 2025 GMT
Not After : Apr 14 08:01:14 2025 GMT
Subject: CN=9a26fb83cfce6901b1e8fc828488d60c452823f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:87:a6:70:7e:5a:73:c3:38:67:22:d0:80:
f8:43:b2:2e:3c:d5:82:be:16:ff:84:b8:a0:71:99:
e0:29:47:9b:ec:a1:86:69:2f:94:6a:43:f3:3a:e1:
2b:35:4d:e6:be:9e:19:c2:6f:d1:7f:ef:9a:5f:98:
4f:6c:ad:19:03:fc:18:95:26:d1:db:70:74:6a:f1:
a6:c7:fe:c0:b1:ab:46:9d:bd:5f:94:5b:0c:4f:72:
ab:cc:ce:4d:23:39:3e:f4:34:08:e4:b8:ba:40:67:
58:5c:e6:d8:58:a5:d4:34:0e:08:81:ef:a7:87:a1:
b6:79:c8:cc:70:87:64:ed:11:83:cc:cc:5c:ec:fe:
8b:15:87:92:b0:15:51:f1:d0:06:ca:ce:f5:bc:a2:
cf:ff:4e:a5:db:ad:a5:81:5d:3e:92:48:c0:05:42:
8b:d0:59:be:45:37:e3:40:0f:d9:24:5b:2a:78:66:
68:56:f1:d3:88:04:cb:fd:7b:ac:fb:f7:3f:18:d5:
de:96:66:f3:23:a3:1f:bd:e8:26:14:11:7c:fe:6d:
69:75:0b:48:0c:a5:73:55:db:ac:4b:fa:c9:22:64:
69:24:f9:88:ae:70:95:f1:92:20:2a:1b:98:6b:17:
d9:30:ea:c8:f8:59:0a:70:4f:32:7b:19:d5:7d:fd:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:26:FB:83:CF:CE:69:01:B1:E8:FC:82:84:88:D6:0C:45:28:23:F8
X509v3 Authority Key Identifier:
keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:14:42:be:9b:bd:e6:7e:51:42:96:32:b4:60:4e:a7:98:77:
17:18:2a:77:0a:f9:d5:f3:f0:30:c6:b1:22:31:bc:f0:1e:93:
c6:83:a7:2a:ee:2a:7d:48:27:fa:da:3f:db:0a:db:f3:e5:6c:
a2:f2:fe:f0:f4:36:d6:da:5a:41:f1:87:e3:a6:f2:01:75:56:
0e:58:72:76:ac:58:49:34:82:dd:eb:d7:1a:88:96:2e:c1:e3:
f2:23:dd:57:45:cf:69:48:8c:da:d9:90:05:4c:55:b0:59:53:
a4:29:71:79:dd:57:d3:0e:5e:d5:c4:d5:ff:05:1d:f7:ee:3c:
90:0e:df:36:f8:1f:db:da:04:98:a6:19:4c:1f:02:18:83:17:
ec:d8:16:4b:7b:66:d0:8d:d1:bd:8e:60:83:15:ed:bc:15:0b:
ce:50:15:bd:ca:58:0d:47:fe:1c:1b:1d:96:8c:12:bd:eb:e3:
91:2a:ab:b9:90:e2:ae:ea:c2:d3:f0:8e:35:41:2d:fb:f3:03:
42:75:f2:c1:07:35:17:e0:4a:02:58:5e:66:80:0c:a3:e6:48:
6f:6b:c6:7f:2b:34:c5:b1:07:87:9b:fc:d1:0c:9b:19:6c:81:
fb:4e:fd:09:d4:87:71:17:4b:f5:ee:36:8d:14:e8:3a:95:7d:
23:a7:35:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net