Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
File: F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft (raw, json)
Hash identifier: N55tBGDFsUJY2JhZXhyx5y1s+AXHHZgFavyIYyxEOT8=
Subject key identifier: A9:A6:2F:F0:A0:3F:BE:FB:ED:9F:FD:03:C0:BD:9C:C7:D6:E0:D9:12
Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Certificate issuer: /CN=177005177526d668e844b2a7a5a59ac64a495652
Certificate serial: 0194BD4E583DDD64CD11A6A6F5F70CCA1BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
Manifest number: 0386
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl (hash: fSPa+x1IJjOgGBxsq7WdvgfN/zfm6t2WOqL/cESa7aY=)
2: mF32KrmR7qkPWXVgQfXewbxtOHE.roa (hash: iXEGOcbHzPC+9l+k6XZzUAzgZY6fYnZW9+XlT/82/iA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:58:3d:dd:64:cd:11:a6:a6:f5:f7:0c:ca:1b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=a9a62ff0a03fbefbed9ffd03c0bd9cc7d6e0d912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:ce:83:e9:96:de:04:2c:80:9d:4c:60:93:
7c:93:d9:61:5a:6e:cf:a8:f9:22:62:24:24:07:7f:
91:7a:f7:4f:7c:1a:67:b3:5e:14:2f:90:d8:db:ce:
ee:5e:7e:4e:de:9e:0f:a9:58:54:3f:f4:ae:65:a7:
88:f6:2b:70:39:a1:b6:91:f6:d0:37:ab:7e:8d:e8:
4b:33:76:b5:02:a1:30:20:e6:f0:5b:8a:86:33:83:
3c:f0:b7:f4:ff:aa:a3:83:1f:4f:0a:53:7b:7d:1e:
2b:73:03:be:ba:fa:81:08:51:eb:b4:f9:d2:0b:6c:
ff:32:b9:70:da:b0:86:17:98:63:56:b0:3f:d6:a9:
cb:eb:3d:e5:68:af:53:59:f1:71:a7:f6:c4:1f:66:
d3:18:42:5f:38:1f:a7:d6:01:93:60:0e:31:4a:87:
19:c0:fe:ee:fd:13:b0:58:82:02:28:08:9b:16:4f:
1d:4a:4f:3f:62:a4:85:1f:69:6f:ad:71:00:d6:e1:
dc:cd:25:78:a1:1e:48:c8:1c:4d:09:b1:04:20:de:
df:f3:64:ed:16:dd:2c:15:20:a1:be:f3:ef:56:4b:
14:ce:59:f5:78:59:03:18:37:ea:7e:bf:80:7c:68:
d1:45:53:2c:4f:b2:22:e7:91:cb:fb:de:83:4a:86:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A6:2F:F0:A0:3F:BE:FB:ED:9F:FD:03:C0:BD:9C:C7:D6:E0:D9:12
X509v3 Authority Key Identifier:
keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ce:d5:98:8d:3a:f7:92:89:65:37:c1:b3:25:36:be:d8:e9:
55:1d:24:98:6f:6b:8b:97:5d:4b:b9:82:fb:a3:96:45:e8:f4:
b0:f7:aa:ef:ad:f7:61:56:d7:0f:f3:f5:ae:e1:02:ad:47:fc:
00:6e:0d:f5:51:34:5d:22:e0:7d:4d:f2:bb:4e:28:6f:05:4e:
c5:03:56:a5:8e:f7:0f:e9:0b:ea:a6:06:a5:74:a5:45:b4:11:
8c:da:9d:79:ba:ca:9d:0f:97:1c:d6:12:bf:1d:74:43:ef:ed:
4d:f1:55:1e:e7:f9:06:cb:40:e4:30:2b:2f:7a:bc:1b:73:7c:
67:d0:fe:8c:d8:94:7f:66:fe:c4:c6:6c:38:e3:4e:e7:18:28:
28:55:a6:c3:a0:8c:bb:81:f2:5e:51:88:ff:95:c0:05:c6:6a:
2a:be:a7:3c:f3:85:ff:90:44:40:87:67:5e:91:00:5c:dc:d2:
3d:43:0c:66:17:ff:c0:e4:17:53:8f:9b:7c:a9:6e:e4:fd:25:
c6:3d:7f:07:a0:1f:b0:fd:c4:d7:8d:c9:34:2c:bf:2b:9c:05:
8d:1a:b2:98:ae:d6:2a:bb:cc:30:2c:8c:61:fc:6a:97:21:ef:
fb:e6:d3:c0:27:3d:d1:31:98:3b:67:c5:ff:f4:0c:57:55:f3:
f1:8d:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:55 2025 by rpki-client