Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
File: f3YJUscz9vLuklTtzRTg2qeLOIw.mft (raw, json)
Hash identifier: YYBjdnaJ4Taf7Ve3JQf+ng6Fw8VcqUPUlos9KDUagos=
Subject key identifier: 3B:6F:E5:CB:55:B6:9B:85:FE:2F:C7:BF:D6:D0:AF:61:2A:61:67:C5
Authority key identifier: 7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
Certificate issuer: /CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Certificate serial: 0194BC052CF176748880A454D97F17F73111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
Manifest number: 020E
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: ZCBQTSRDp2Vji2C9hSrbiPFq7OY.roa (hash: PB9NVbc1SKDdgUUB+S0NaDZM0GQCTky3OkA9OktttX0=)
2: f3YJUscz9vLuklTtzRTg2qeLOIw.crl (hash: PS+RKH+5tFPu00MDLrCMZVZvp6tZEV4hsSkF6oVSGno=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2c:f1:76:74:88:80:a4:54:d9:7f:17:f7:31:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=3b6fe5cb55b69b85fe2fc7bfd6d0af612a6167c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:1b:0b:0a:82:8e:e8:cd:7c:51:8c:26:1e:
2f:38:8a:5f:21:67:34:b5:f0:ca:3e:81:49:c9:1f:
e9:19:11:eb:21:ba:db:67:a5:42:d0:7d:f6:f6:49:
ae:27:a6:54:e0:0b:15:d1:23:4c:a3:b4:f8:22:68:
ac:a6:d1:f2:44:4d:f1:14:44:07:c9:ae:29:6f:2f:
27:1d:c0:68:aa:3b:34:34:8a:fe:c8:87:f4:a5:2e:
a0:9a:3c:23:1c:49:78:ed:c2:70:42:86:8e:1c:1d:
ea:27:b7:c3:2c:37:49:3a:e7:61:39:95:18:c4:45:
76:43:16:ef:8c:58:c4:b7:5d:82:fa:7f:c0:64:0a:
0c:6c:c4:72:42:2b:b9:98:e4:74:58:e5:8d:70:0a:
9f:66:47:da:bd:32:23:db:91:76:53:29:89:95:00:
98:2b:1b:e3:5b:7b:56:6c:68:b4:85:4b:4e:c5:10:
aa:53:ac:e8:d6:4f:fc:d1:0b:f9:69:57:56:9c:0b:
c8:70:29:3c:22:8a:a0:74:03:fa:ab:d5:45:82:ab:
24:36:1a:81:56:98:84:82:55:7a:6d:93:2e:5e:fe:
06:ad:af:04:31:54:44:05:0f:44:52:3c:e5:1a:0c:
fa:78:b1:c1:df:39:57:c6:12:a0:8c:b6:50:ab:36:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6F:E5:CB:55:B6:9B:85:FE:2F:C7:BF:D6:D0:AF:61:2A:61:67:C5
X509v3 Authority Key Identifier:
keyid:7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9b:91:f4:b3:86:a1:91:f3:ff:88:ea:7c:93:02:e6:49:94:
9e:8e:8e:c8:2e:16:40:c9:ad:97:c3:71:98:f2:10:29:e4:d6:
f0:27:72:ed:a5:c1:ea:53:0d:70:d0:66:e7:31:dc:cd:79:50:
20:93:da:46:3c:e0:d9:df:51:99:fd:2d:ba:c4:45:f0:d0:4b:
a5:bc:ab:f1:b8:47:6d:59:80:06:b4:d1:34:30:f7:8e:4f:08:
9e:ac:de:f0:c7:fd:c5:fb:d4:44:07:c2:98:6b:18:67:f4:b9:
51:a1:4c:a1:6d:8a:52:52:4a:16:b0:81:00:e4:9c:3d:6e:cf:
37:9d:cf:ce:30:07:63:c0:cf:37:05:8b:eb:95:a5:66:16:78:
70:de:8a:2d:ac:a8:64:ad:2e:23:bd:f1:d7:c8:02:ce:66:80:
7a:98:2e:8c:d3:61:6c:1f:82:ca:80:4e:a5:22:2f:64:51:e4:
03:a9:2a:26:26:18:eb:e1:3c:20:fa:20:60:61:82:0c:8c:a5:
61:fa:cc:c7:9f:4e:f3:e6:01:a2:e3:a6:f6:53:2b:25:24:7c:
ac:58:0c:ad:c6:b5:87:45:e2:7a:10:5e:06:99:25:4b:a7:84:
02:76:b5:2b:ca:c6:f2:93:37:41:7c:c6:15:ef:0b:53:05:e9:
a9:38:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:43 2025 by rpki-client